Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: ZGD/L9zfv+es6Z14kDZ1OKdyYx4ZAQ9D21pYBsGO1Tk=
Subject key identifier: A3:7C:12:2F:FE:A5:95:3F:E5:E3:7A:BA:AA:4F:C8:77:05:1D:42:83
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 1E21C111A8B5C0D3A7B804D773E4AE31F103AED1
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:31:39 +0000
ROA not before: Fri 18 Apr 2025 22:26:39 +0000
ROA not after: Fri 17 Apr 2026 22:31:39 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:21:c1:11:a8:b5:c0:d3:a7:b8:04:d7:73:e4:ae:31:f1:03:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:26:39 2025 GMT
Not After : Apr 17 22:31:39 2026 GMT
Subject: CN=A37C122FFEA5953FE5E37ABAAA4FC877051D4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:0a:49:86:96:3b:fd:7a:0b:b1:f9:a0:d9:
dc:51:97:51:c3:5f:20:49:67:5a:3b:6d:fa:18:52:
21:c9:a9:1a:51:2a:d0:e7:fd:43:28:ac:58:76:7a:
8a:34:e6:49:8a:1f:22:c8:64:51:30:3f:61:03:1e:
63:80:28:69:f5:86:ca:bd:06:04:59:a7:76:dc:1b:
37:b4:66:78:56:04:5e:4c:dc:7d:af:61:16:6d:22:
85:6e:73:4d:1a:f3:7c:00:0b:2f:fc:9b:a1:56:68:
29:91:ff:63:67:a9:05:62:67:19:dd:a1:ec:26:06:
52:54:cc:06:55:05:ed:9e:59:c7:43:e6:e4:74:70:
04:3c:5c:a0:55:a0:60:03:7f:52:5c:93:a4:c0:cd:
28:c2:f4:c3:39:cd:62:3e:ad:58:5e:d1:c6:cc:50:
60:97:77:c3:f3:c5:ac:2e:c6:bd:1c:97:d3:9f:62:
2e:27:fc:1d:3b:71:06:b2:86:a3:0a:08:85:58:c6:
6c:6a:f5:8d:39:80:a8:c8:56:06:c8:4b:01:95:b4:
6d:1a:8e:30:e6:6c:4c:b2:32:2f:47:00:c8:b0:2c:
9c:eb:85:42:c6:ab:ab:fa:56:2b:8d:e6:34:9c:36:
ee:2c:3d:64:59:4d:b6:a5:72:43:1d:c5:fb:22:b3:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:12:2F:FE:A5:95:3F:E5:E3:7A:BA:AA:4F:C8:77:05:1D:42:83
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ca:7d:de:16:d6:6c:4b:9e:ff:4e:3c:6d:58:65:e5:f5:69:
bd:19:ec:6a:f4:b7:70:6b:a2:fb:81:93:1d:92:19:8c:57:34:
5c:0b:d0:2b:ae:f0:8e:4e:71:8c:85:7e:b0:bb:cd:29:17:06:
c2:b0:ce:1e:91:fb:47:e3:09:c9:2e:f4:58:fc:9c:5f:a3:5c:
af:8e:09:05:ce:32:7d:be:76:d5:7a:cc:c1:de:a9:c4:94:dd:
d7:68:d6:b9:36:9b:93:ff:39:52:6b:ac:03:b1:c8:46:7c:71:
1c:47:ed:d9:53:4a:7d:ca:c0:83:1d:1a:be:02:3a:cf:f8:9c:
98:5c:59:7a:61:59:46:6d:e9:7d:6d:53:0a:1c:3d:55:1f:06:
1f:aa:ff:a0:f8:ed:8e:76:8c:50:14:a5:6c:f9:33:5c:e4:22:
9f:3b:e6:fe:60:3f:38:2f:1e:c2:d6:f2:d2:5a:5f:44:33:00:
24:94:e4:cc:ad:d8:48:9b:86:31:97:70:b7:b3:57:c5:43:ca:
5b:a6:0a:12:a8:f3:13:ce:4f:43:f7:dd:14:2b:26:d3:52:d5:
79:f8:f4:d1:1d:c0:47:d9:25:28:eb:6b:9c:7f:d9:6a:e2:21:
4e:be:80:d3:79:5d:a0:c8:16:00:12:8a:55:b0:a6:be:5b:41:
43:de:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:40:38 2025 by rpki-client