Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: KkNP1oisux7Of2JIBQbqRLZtNeaLY6gt5sU2HGCG6oU=
Subject key identifier: 47:E5:98:DF:60:3A:25:E9:8F:F6:A6:CA:2F:7B:6B:3B:EB:FC:6E:2D
Certificate issuer: /CN=fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6
Certificate serial: 6544F480BC9481E8BB23F3C2D5FE32165DE10657
Authority key identifier: C7:6F:54:7E:C5:CB:0A:C6:22:F2:80:D5:60:91:2B:99:71:D1:75:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67/fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time: Tue 15 Aug 2023 15:58:40 +0000
ROA not before: Tue 15 Aug 2023 15:53:40 +0000
ROA not after: Tue 13 Aug 2024 15:58:40 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:44:f4:80:bc:94:81:e8:bb:23:f3:c2:d5:fe:32:16:5d:e1:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6
Validity
Not Before: Aug 15 15:53:40 2023 GMT
Not After : Aug 13 15:58:40 2024 GMT
Subject: CN=47E598DF603A25E98FF6A6CA2F7B6B3BEBFC6E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:98:09:bc:a2:32:79:b4:43:3a:f3:a9:7c:
83:3c:62:f2:eb:78:33:43:36:8e:2f:0a:ad:1a:34:
40:07:f0:8a:8a:09:76:91:11:91:50:b4:24:cd:b6:
35:5a:19:cc:e0:b5:c6:fb:eb:24:5d:77:a3:4e:c8:
77:62:59:3c:d3:b0:f3:a0:3d:05:97:77:3b:ee:90:
64:b5:3a:31:1a:07:3e:7e:a0:d0:be:6d:3d:33:e4:
46:51:b4:80:b5:fd:40:47:2b:df:f5:b1:a3:e9:76:
d1:ba:66:93:a1:73:09:67:af:c0:8f:95:f9:6d:ec:
23:a3:5f:33:9c:53:ad:83:26:60:9a:01:c6:b0:95:
47:57:b5:dd:39:c5:2e:fa:a8:cc:d5:74:68:8f:d7:
d8:30:ad:47:bb:bf:fa:89:df:e8:f6:b5:97:c4:fd:
88:5c:c1:c1:29:0d:4b:03:fa:75:a4:58:e2:02:00:
94:4a:dc:b2:12:e3:be:26:42:49:63:24:81:3a:fa:
f1:5e:f7:86:fd:cb:21:24:24:25:93:0b:02:f6:af:
44:ce:42:8e:7a:bc:c1:fc:6e:db:f0:56:38:99:ab:
a3:bf:ec:da:01:3d:fe:e2:df:1b:13:ad:24:09:d1:
7b:2c:a9:ef:b4:a2:d8:63:43:e2:1d:04:cf:1b:88:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:98:DF:60:3A:25:E9:8F:F6:A6:CA:2F:7B:6B:3B:EB:FC:6E:2D
X509v3 Authority Key Identifier:
keyid:C7:6F:54:7E:C5:CB:0A:C6:22:F2:80:D5:60:91:2B:99:71:D1:75:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/C76F547EC5CB0AC622F280D560912B9971D17509.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67/fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:05:bc:c6:f9:1f:ca:a7:0d:0c:47:4b:1e:f2:05:70:7f:1c:
b2:e2:91:a9:01:78:f9:79:6e:38:8b:60:fb:7f:22:e0:22:49:
0e:c9:89:29:82:db:54:fa:bc:3c:ca:11:8e:8f:0e:93:1f:67:
fc:67:22:14:b2:33:fa:ce:cd:7d:65:94:b6:47:0c:ad:04:a9:
00:a8:13:b8:f1:0c:ea:e7:6b:9d:43:32:f0:1e:df:56:24:d9:
47:26:f8:d9:e6:b8:2a:f3:c6:eb:44:78:45:c6:fb:e8:88:6e:
d8:05:7b:96:75:e3:f0:35:79:17:81:2e:70:41:67:fa:8d:d5:
c4:54:bc:05:ba:be:28:30:5c:8f:3e:9e:e1:48:ce:01:48:34:
4d:27:85:3b:84:d2:ab:48:9f:bd:a3:74:5f:0c:0d:6a:8f:d4:
08:bf:42:29:28:20:54:83:c6:2c:ec:d3:90:65:c9:44:a0:ac:
b2:89:cb:97:d1:07:64:30:f4:97:38:c8:4f:e6:06:e0:4c:10:
13:b8:cd:35:2c:93:99:22:20:f9:bd:ff:fe:84:45:cd:a4:7d:
6a:53:a6:1c:57:56:79:b4:60:48:0f:b7:75:fb:4c:db:cb:b7:
4c:47:89:f7:b1:bd:84:6e:bb:c0:82:dd:02:d5:5a:da:03:77:
85:5a:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:14:21 2025 by rpki-client