Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: bgiC3cHVYOj9jt1IWHpzpBKaoOEAVUDBwPh2i4PV5Dk=
Subject key identifier: AA:25:54:9C:04:04:4B:BA:18:83:E2:DD:61:73:F0:B4:91:B8:D9:74
Certificate issuer: /CN=fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6
Certificate serial: 66A1B1B80526353DA86C7AA1D8D6995B12F88933
Authority key identifier: C7:6F:54:7E:C5:CB:0A:C6:22:F2:80:D5:60:91:2B:99:71:D1:75:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67/fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time: Tue 15 Aug 2023 15:58:33 +0000
ROA not before: Tue 15 Aug 2023 15:53:33 +0000
ROA not after: Tue 13 Aug 2024 15:58:33 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a1:b1:b8:05:26:35:3d:a8:6c:7a:a1:d8:d6:99:5b:12:f8:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6
Validity
Not Before: Aug 15 15:53:33 2023 GMT
Not After : Aug 13 15:58:33 2024 GMT
Subject: CN=AA25549C04044BBA1883E2DD6173F0B491B8D974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:03:18:7c:b5:4c:4f:a9:18:9d:8e:6e:b0:
24:37:e9:5b:29:64:ac:79:02:3f:29:60:91:8e:49:
44:d5:c7:d9:d3:8d:a8:46:7a:08:7a:e8:13:dd:47:
e8:07:f7:63:66:20:7a:b2:54:b1:b0:56:90:15:0d:
6e:2d:96:59:20:70:73:2c:ca:b4:f0:79:14:9a:a9:
87:55:41:82:67:09:54:51:af:ae:32:62:79:87:1a:
c8:7a:3a:43:9e:4f:77:2d:d5:7a:c0:29:d1:ab:93:
5c:14:35:05:49:c7:6e:b6:bf:48:03:96:e6:7e:c2:
8a:cd:06:76:f9:ee:75:ac:dc:4d:2a:17:cf:bb:58:
a0:1b:b8:29:de:5e:ee:8b:8c:ae:dc:ff:b6:30:9b:
c9:ea:0a:37:f4:68:2e:81:02:8a:d5:d3:28:0b:83:
a1:8c:e2:92:6c:77:32:c6:9b:f4:be:19:37:b4:7f:
21:c6:92:4e:0e:35:66:82:87:a1:53:7f:73:e2:07:
84:77:98:c2:f1:f1:08:f5:d6:40:fe:0c:24:26:44:
72:b5:52:3b:3c:72:d8:71:27:10:30:76:b1:34:54:
fe:6a:96:2a:b1:ca:4a:b3:cc:fb:a3:db:33:e3:fb:
09:96:f0:aa:0e:e7:a6:01:98:f0:24:11:a5:b8:a2:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:54:9C:04:04:4B:BA:18:83:E2:DD:61:73:F0:B4:91:B8:D9:74
X509v3 Authority Key Identifier:
keyid:C7:6F:54:7E:C5:CB:0A:C6:22:F2:80:D5:60:91:2B:99:71:D1:75:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/C76F547EC5CB0AC622F280D560912B9971D17509.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67/fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dc:58:bb:d9:e4:87:cc:af:8e:6a:90:7b:e9:24:ea:e5:e5:
c2:e3:10:f5:0f:05:11:35:95:c9:1d:fc:2b:2c:ee:db:f4:65:
59:db:e7:d1:7c:73:86:f1:30:16:03:17:22:9c:57:0d:b2:8e:
b3:af:7a:52:84:32:cd:2f:f7:6a:9c:56:91:06:31:90:2b:1a:
c4:48:32:6e:d1:7d:8f:b3:fa:a8:2c:16:32:50:61:f6:ff:dc:
b6:b7:e9:e5:4d:33:1d:f5:5d:03:d9:24:71:bf:6a:92:ab:aa:
0e:3c:87:85:ef:10:28:26:2e:b5:84:05:4a:5b:76:c2:7a:29:
89:6a:a8:24:c6:8f:30:49:a5:0a:26:d3:98:1f:9d:fb:4f:29:
b8:65:d3:ce:0f:be:50:40:f9:f3:fa:51:ac:ff:34:b8:d9:d7:
45:ca:cb:fd:45:d9:41:3c:ea:20:af:fb:d5:c5:a1:21:fa:ed:
d7:60:8b:2b:be:9f:57:14:67:82:cf:aa:35:f7:7d:f3:88:4e:
47:a1:a0:05:34:20:1b:92:2e:d3:cc:ca:c7:d0:a7:67:aa:b8:
c6:f0:3a:b9:35:46:4b:cf:c4:c5:19:fe:18:aa:54:29:fb:ba:
a3:80:29:79:e0:0c:e3:57:c6:e3:29:2f:d0:e0:7f:b2:18:c7:
73:9e:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:10:45 2025 by rpki-client