Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: Y418ldgASY/DvV8JwBFFLHFfMIO/2A2eik6UViJ4TuE=
Subject key identifier: 59:B0:6D:54:9E:10:7C:63:57:5D:98:D4:C7:DE:8A:83:A1:29:D3:4F
Certificate issuer: /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial: 31CA4DDEA6749E497BEF3B1A814AE1E4264CB033
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time: Tue 14 Feb 2023 14:25:01 +0000
ROA not before: Tue 14 Feb 2023 14:20:01 +0000
ROA not after: Tue 13 Feb 2024 14:25:01 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ca:4d:de:a6:74:9e:49:7b:ef:3b:1a:81:4a:e1:e4:26:4c:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Validity
Not Before: Feb 14 14:20:01 2023 GMT
Not After : Feb 13 14:25:01 2024 GMT
Subject: CN=59B06D549E107C63575D98D4C7DE8A83A129D34F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:9a:41:f7:93:d7:8f:3f:8f:bd:e8:e5:37:
bd:98:bd:55:72:d7:63:27:f8:7b:c1:fa:54:76:b9:
1b:0e:7b:57:a5:fb:2d:5d:78:18:8e:e6:dc:08:8f:
e4:a6:3e:1d:24:ac:05:da:5f:74:43:6f:8a:c6:74:
89:6b:a2:15:81:02:14:75:96:0a:a9:43:93:c7:a1:
a9:41:91:6f:78:37:d0:17:cc:f6:d9:72:3f:5d:77:
6a:1f:11:3c:23:29:b0:c9:3d:bd:48:a4:22:08:10:
82:9e:8d:57:3b:32:dd:a4:f6:5c:63:b3:4b:ec:a6:
cf:4f:73:7f:43:94:7f:fd:69:c0:ac:6e:68:b7:2e:
d9:77:cc:e6:c7:91:42:ba:1e:25:8a:8c:0f:0e:9a:
03:e8:0a:dc:3a:90:15:1d:cd:19:7c:5e:b4:32:2d:
3a:a0:a8:2d:2c:51:e4:e4:47:30:32:c7:61:b3:95:
b5:be:31:5a:1e:92:0e:1c:8d:c9:3f:2f:e5:ee:ae:
8a:ec:9a:7e:91:ce:e7:70:75:6e:62:8f:5d:5c:c2:
28:fd:ba:af:91:44:0c:79:ff:3c:b0:89:77:03:2b:
7e:fe:1c:42:27:c8:08:da:3d:0f:04:27:e9:dc:c7:
44:ba:34:57:7a:f5:b2:8f:6b:41:10:a8:eb:43:eb:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:6D:54:9E:10:7C:63:57:5D:98:D4:C7:DE:8A:83:A1:29:D3:4F
X509v3 Authority Key Identifier:
keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:cb:9e:6a:c0:fb:2e:b5:d5:05:5d:9c:b9:06:f7:a8:d7:18:
15:06:77:f3:7b:72:8c:e0:6f:f8:90:dc:d3:61:f0:eb:41:50:
13:39:19:d0:54:cd:e1:95:cb:c4:3e:67:05:dd:04:39:b0:39:
bc:54:b1:2d:b7:9f:46:53:b8:d3:b3:93:64:2c:7b:18:87:97:
a7:f3:86:13:59:f4:34:b7:b3:fb:51:df:a6:16:e9:ef:da:3f:
63:6f:11:db:49:26:0c:b4:2f:f3:1b:5d:5e:4c:e3:d8:30:62:
26:9f:e8:40:fc:00:d1:59:30:90:8c:96:5b:0b:56:53:33:6b:
d6:1b:36:55:b2:3c:dc:2c:a1:ec:bb:76:5a:c0:48:9f:7b:43:
31:34:26:03:b5:93:dd:e1:10:21:44:2d:ad:0f:ff:93:22:fd:
fc:5f:5b:58:01:16:ae:53:11:8e:3f:b0:6f:2e:fc:fe:7c:f4:
56:50:df:5e:23:d9:af:94:2c:2a:3d:e5:9e:57:4e:b2:6e:90:
be:9a:f7:a8:47:92:b4:23:58:f2:25:ce:39:e8:20:d0:0f:3b:
3b:d7:0f:a6:58:9d:ba:1a:16:52:b5:02:aa:b2:ff:f5:4f:fb:
45:10:50:ea:ac:8f:7a:63:bc:76:a4:4c:44:58:0c:f6:8a:05:
ed:8e:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:51:16 2025 by rpki-client