Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: B4uMuOej0G2Yulv0mMUOD29Ym3bU/HqeRdPdFeN61fc=
Subject key identifier: 01:29:F4:35:9D:C8:11:30:9D:C2:D3:65:45:02:8D:12:82:88:8E:B4
Certificate issuer: /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial: 33AC7C99442F19BDFE18504CF9805CEA9DAD6951
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Wed 01 Jun 2022 18:51:09 +0000
ROA not before: Wed 01 Jun 2022 18:46:09 +0000
ROA not after: Wed 31 May 2023 18:51:09 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ac:7c:99:44:2f:19:bd:fe:18:50:4c:f9:80:5c:ea:9d:ad:69:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Validity
Not Before: Jun 1 18:46:09 2022 GMT
Not After : May 31 18:51:09 2023 GMT
Subject: CN=0129F4359DC811309DC2D36545028D1282888EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:d5:61:80:c5:55:ff:65:85:b7:7b:92:c1:
aa:7e:06:3a:dc:09:01:b2:2a:e3:0b:a6:3d:19:51:
a8:41:3e:59:6e:64:eb:bd:a6:a7:5e:4f:7d:04:8d:
be:b5:5c:94:41:ab:05:f8:14:54:06:7b:fd:95:13:
5a:ae:12:83:66:18:fa:af:01:ac:3a:40:68:5f:61:
45:92:64:4b:25:81:6d:d4:40:02:5a:37:5f:c9:4c:
17:b6:ab:a4:8c:d4:60:10:6d:65:67:e2:32:a5:e9:
5e:25:13:2f:a5:ee:90:89:36:9f:f3:44:55:c7:57:
18:e9:e6:21:a6:b1:d2:ce:39:ef:5b:f3:24:af:b1:
7f:ef:1e:fa:a9:39:6a:50:d3:52:b9:3b:78:53:b7:
af:2a:b0:12:e2:a2:16:17:77:12:2e:2d:d1:70:75:
fb:91:e0:fa:96:de:96:8a:da:8b:ca:54:3f:34:42:
e8:5c:4f:df:6f:77:ee:4d:ca:10:f7:0a:9f:cd:1f:
2f:7a:8a:59:d9:ff:6d:1b:5a:57:be:43:c7:30:48:
77:5b:0d:3d:cd:b5:01:76:a8:54:dc:16:8c:92:0a:
67:a8:e6:4d:3a:9a:f1:87:85:69:c3:2e:2d:86:2a:
1f:b6:b3:ab:58:5c:11:95:a7:ef:39:26:9d:bd:a6:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:F4:35:9D:C8:11:30:9D:C2:D3:65:45:02:8D:12:82:88:8E:B4
X509v3 Authority Key Identifier:
keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ed:48:fd:aa:2b:6b:de:13:f4:6a:6d:f9:0a:d5:59:bc:16:
d4:86:26:7a:a8:ae:49:9e:c1:15:87:b7:d4:6b:ce:bd:95:f8:
a8:17:ad:65:30:e8:df:b5:81:37:ba:30:40:d0:b1:6a:32:3b:
52:92:c0:a3:75:fa:5b:ad:34:a5:1e:9f:ff:b7:68:ac:a3:07:
29:14:ca:a7:0f:85:4f:3f:a4:21:91:47:b3:40:a0:22:4a:e4:
d0:2e:89:cb:f8:0b:a2:70:b2:4a:f4:5f:65:45:c0:6b:61:c1:
b0:2c:3a:22:53:56:fb:85:00:3d:95:6d:ff:64:3b:d1:40:13:
1c:08:ae:ca:22:13:67:d7:4a:f8:72:7b:d3:17:92:ba:68:91:
a2:b2:0a:45:bf:8a:73:5d:b0:9b:84:10:69:3c:92:19:9b:1c:
50:19:91:5f:69:44:22:15:f2:58:46:a0:3f:8e:a9:79:f7:d0:
6f:30:f9:8d:20:67:c3:cb:c4:39:5f:1b:f0:8c:b1:d5:0c:c3:
80:cb:b2:56:8d:60:76:ce:7b:c8:d6:49:99:70:de:c3:52:67:
6c:a3:1a:23:c9:37:fd:70:23:31:5b:6d:53:1e:44:48:46:bb:
3b:47:85:67:4c:ee:b4:69:bb:b2:61:8f:60:83:41:8f:1a:db:
12:48:d9:14
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUM6x8mUQvGb3+GFBM+YBc6p2taVEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQ5ZjZmOTk3NjI2Njk5MjJkM2E5MWM1
YTE1ZTMxZDA4YjM1MmZiNjQwHhcNMjIwNjAxMTg0NjA5WhcNMjMwNTMxMTg1MTA5
WjAzMTEwLwYDVQQDEygwMTI5RjQzNTlEQzgxMTMwOURDMkQzNjU0NTAyOEQxMjgy
ODg4RUI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VXVYYDFVf9l
hbd7ksGqfgY63AkBsirjC6Y9GVGoQT5ZbmTrvaanXk99BI2+tVyUQasF+BRUBnv9
lRNarhKDZhj6rwGsOkBoX2FFkmRLJYFt1EACWjdfyUwXtqukjNRgEG1lZ+Iypele
JRMvpe6QiTaf80RVx1cY6eYhprHSzjnvW/Mkr7F/7x76qTlqUNNSuTt4U7evKrAS
4qIWF3cSLi3RcHX7keD6lt6WitqLylQ/NELoXE/fb3fuTcoQ9wqfzR8veopZ2f9t
G1pXvkPHMEh3Ww09zbUBdqhU3BaMkgpnqOZNOprxh4Vpwy4thioftrOrWFwRlafv
OSadvaY4pwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFAEp9DWdyBEwncLTZUUCjRKC
iI60MB8GA1UdIwQYMBaAFPSk+w+9MpzfxWVGSWbPExlGnjO1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMjA5ODVlZWIxN2NhLzAv
RjRBNEZCMEZCRDMyOUNERkM1NjU0NjQ5NjZDRjEzMTk0NjlFMzNCNS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M4ZDQyMWFjLTMxMDMtNDdhMS05MWFjLWVkNGUyODdiYzNjOC9mY2Iy
MGY1OTY2NDlmNmY5OTc2MjY2OTkyMmQzYTkxYzVhMTVlMzFkMDhiMzUyZmI2NC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTIw
OTg1ZWViMTdjYS8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzIyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKVcJgwDQYJKoZIhvcN
AQELBQADggEBAFjtSP2qK2veE/RqbfkK1Vm8FtSGJnqorkmewRWHt9Rrzr2V+KgX
rWUw6N+1gTe6MEDQsWoyO1KSwKN1+lutNKUen/+3aKyjBykUyqcPhU8/pCGRR7NA
oCJK5NAuicv4C6Jwskr0X2VFwGthwbAsOiJTVvuFAD2Vbf9kO9FAExwIrsoiE2fX
Svhye9MXkrpokaKyCkW/inNdsJuEEGk8khmbHFAZkV9pRCIV8lhGoD+OqXn30G8w
+Y0gZ8PLxDlfG/CMsdUMw4DLslaNYHbOe8jWSZlw3sNSZ2yjGiPJN/1wIzFbbVMe
REhGuztHhWdM7rRpu7Jhj2CDQY8a2xJI2RQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org