Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier: i/LJCWOo2LfZB4gf923N0cxqvxQmRIoRc7CQDdsIpU8=
Subject key identifier: 8C:64:81:2A:D1:E9:51:B9:0D:72:DA:9A:EE:60:93:F5:8B:11:E6:94
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 0C67CC1E1D12BD3301EA40D435C865BBD0B367F7
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:31:37 +0000
ROA not before: Fri 18 Apr 2025 22:26:37 +0000
ROA not after: Fri 17 Apr 2026 22:31:37 +0000
asID: 399970
IP address blocks: 149.112.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:67:cc:1e:1d:12:bd:33:01:ea:40:d4:35:c8:65:bb:d0:b3:67:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:26:37 2025 GMT
Not After : Apr 17 22:31:37 2026 GMT
Subject: CN=8C64812AD1E951B90D72DA9AEE6093F58B11E694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:fa:90:39:d5:fe:86:9a:1f:57:44:47:a7:
12:8a:5f:b5:63:21:f3:63:86:3c:d5:9b:cc:0f:cb:
fd:62:71:23:b6:c0:cb:5b:f7:c0:3e:15:0a:02:21:
95:2e:3e:b0:f5:e5:89:fe:35:4c:4c:14:6f:7a:21:
b7:1d:47:a4:00:f0:0d:f7:36:f2:4a:ba:12:1f:a4:
a7:cf:02:37:17:1e:a7:93:4d:90:05:a1:f6:74:cd:
42:f3:c4:cb:5e:ed:4f:26:4f:07:01:af:d6:b1:84:
f1:f3:de:49:67:54:d0:58:1a:e1:a9:7a:d6:92:04:
4f:a4:d8:e8:eb:d5:b3:96:79:f2:fb:ca:3d:6b:f4:
b9:67:4a:59:df:e0:92:b8:93:cb:eb:5d:3b:bf:18:
be:cb:6c:83:29:ad:53:0f:3a:d2:6c:51:d3:78:50:
a8:bd:89:36:b9:d4:60:0e:e8:88:e5:b0:cf:9f:75:
f8:f3:42:63:e3:06:b1:96:6b:f6:a2:c5:ff:9c:7e:
18:e1:0a:e3:9d:67:da:9d:16:84:53:4a:68:9e:0a:
43:e6:c2:5d:5e:9c:ae:20:6d:8b:39:a5:25:70:0b:
c3:20:fd:37:03:1f:69:a4:34:eb:92:ba:af:5b:f5:
ab:3d:e4:50:bf:ab:dc:17:35:25:34:84:09:af:5a:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:64:81:2A:D1:E9:51:B9:0D:72:DA:9A:EE:60:93:F5:8B:11:E6:94
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/23
Signature Algorithm: sha256WithRSAEncryption
17:e7:4d:2a:23:fb:0b:f4:7b:a4:27:7d:28:94:bc:a2:76:cd:
96:cb:6e:ef:ea:03:5e:59:21:7d:07:b4:57:5a:96:74:b9:a3:
7d:fd:86:e2:43:f3:8b:6b:15:61:26:54:c7:84:e4:d2:80:29:
27:d8:0f:bd:51:e9:f8:9c:9b:62:4e:ff:1a:8a:99:c6:eb:b4:
b6:8b:f8:5b:db:5f:d9:3a:c1:68:f3:7a:5c:10:be:ed:19:f1:
53:a1:63:cd:de:dc:e2:44:a8:67:95:5e:1c:43:8b:46:8e:ee:
b8:5c:e2:fd:cd:d0:52:de:1d:87:92:8b:ba:45:48:0e:99:6b:
fc:a0:ee:36:e8:c6:3b:b0:68:8f:70:83:c7:54:b2:3b:84:eb:
54:54:82:79:97:b8:de:bb:80:e8:b0:e4:4b:9e:20:e0:61:00:
57:35:5e:3e:5b:ed:5f:c8:d9:0e:09:72:b4:85:87:63:5e:94:
72:54:f4:75:9e:6c:20:7c:cb:7b:fe:b3:ea:4e:c5:b7:0b:99:
5c:f0:bc:04:c4:de:6f:62:d9:c0:73:e1:ec:03:7b:3b:72:b3:
6e:46:34:9a:88:3d:3f:15:f2:a6:49:78:86:2a:69:42:ef:87:
45:7c:dd:2e:e2:b6:4f:89:82:59:44:61:46:77:4e:af:d1:55:
44:75:a3:dd
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUDGfMHh0SvTMB6kDUNchlu9CzZ/cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjBjMmVmZmFiMDIyYjcyMDJjMTI0YWMw
MzY0YTNmMmY5MmYxZTdmYWEwHhcNMjUwNDE4MjIyNjM3WhcNMjYwNDE3MjIzMTM3
WjAzMTEwLwYDVQQDEyg4QzY0ODEyQUQxRTk1MUI5MEQ3MkRBOUFFRTYwOTNGNThC
MTFFNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU/6kDnV/oaa
H1dER6cSil+1YyHzY4Y81ZvMD8v9YnEjtsDLW/fAPhUKAiGVLj6w9eWJ/jVMTBRv
eiG3HUekAPAN9zbySroSH6SnzwI3Fx6nk02QBaH2dM1C88TLXu1PJk8HAa/WsYTx
895JZ1TQWBrhqXrWkgRPpNjo69Wzlnny+8o9a/S5Z0pZ3+CSuJPL6107vxi+y2yD
Ka1TDzrSbFHTeFCovYk2udRgDuiI5bDPn3X480Jj4waxlmv2osX/nH4Y4QrjnWfa
nRaEU0pongpD5sJdXpyuIG2LOaUlcAvDIP03Ax9ppDTrkrqvW/WrPeRQv6vcFzUl
NIQJr1psBQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIxkgSrR6VG5DXLamu5gk/WL
EeaUMB8GA1UdIwQYMBaAFLegdNRHQhedQQPy+SuN1745V1zVMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRjYWI4MTdiNmJlMTQ5YzQ4M2QxOTQzMGUyNTQ1MzEwLzAv
QjdBMDc0RDQ0NzQyMTc5RDQxMDNGMkY5MkI4REQ3QkUzOTU3NUNENS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzljNjRkNGFkLTg0MWItNDBhOS05NTdjLTNjZDFmZTZiYjE1ZC9mY2Iy
MGY1OTY2MGMyZWZmYWIwMjJiNzIwMmMxMjRhYzAzNjRhM2YyZjkyZjFlN2ZhYS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS80Y2FiODE3YjZiZTE0OWM0ODNkMTk0
MzBlMjU0NTMxMC8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGVcJowDQYJKoZIhvcN
AQELBQADggEBABfnTSoj+wv0e6QnfSiUvKJ2zZbLbu/qA15ZIX0HtFdalnS5o339
huJD84trFWEmVMeE5NKAKSfYD71R6ficm2JO/xqKmcbrtLaL+FvbX9k6wWjzelwQ
vu0Z8VOhY83e3OJEqGeVXhxDi0aO7rhc4v3N0FLeHYeSi7pFSA6Za/yg7jboxjuw
aI9wg8dUsjuE61RUgnmXuN67gOiw5EueIOBhAFc1Xj5b7V/I2Q4JcrSFh2NelHJU
9HWebCB8y3v+s+pOxbcLmVzwvATE3m9i2cBz4ewDeztys25GNJqIPT8V8qZJeIYq
aULvh0V83S7itk+JgllEYUZ3Tq/RVUR1o90=
-----END CERTIFICATE-----
Generated at Sun May 11 12:50:27 2025 by rpki-client