Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: xq+neX685AEpOAIOWcurhLzHqoHDQA+uanu8oGoJbSc=
Subject key identifier: 08:A4:8F:AD:17:8B:43:BC:C8:89:4E:81:27:22:8F:3B:92:47:2A:94
Certificate issuer: /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial: 2ECA66363E1A23837A316170F47E0D552D44BB94
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time: Wed 01 Jun 2022 18:50:01 +0000
ROA not before: Wed 01 Jun 2022 18:45:01 +0000
ROA not after: Wed 31 May 2023 18:50:01 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ca:66:36:3e:1a:23:83:7a:31:61:70:f4:7e:0d:55:2d:44:bb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Validity
Not Before: Jun 1 18:45:01 2022 GMT
Not After : May 31 18:50:01 2023 GMT
Subject: CN=08A48FAD178B43BCC8894E8127228F3B92472A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:bc:bf:6d:3e:71:29:ad:5b:f9:f7:35:d3:
55:e0:db:53:60:7d:6f:64:f6:89:5f:5d:e0:48:0f:
81:17:e1:29:7c:9f:77:fa:f8:b4:5e:a8:6b:75:c9:
41:19:b0:f2:13:b8:d5:fb:b9:67:f3:a6:c7:8e:eb:
62:35:87:de:5c:ca:d2:c3:cc:fe:3c:c4:72:40:ff:
7e:08:b6:8a:0a:59:04:9a:1d:3f:ad:26:67:32:83:
70:bc:21:4a:ba:7d:12:9d:c1:89:14:96:7d:3d:42:
de:e5:a1:65:f4:e3:ca:72:a4:64:cc:64:46:16:c7:
af:69:3b:fb:0d:37:70:39:4f:8d:65:98:15:c5:d8:
94:ff:a2:c3:bd:ae:12:a6:80:cd:8a:4b:6f:d2:f2:
fd:f0:14:11:8d:b1:2f:16:5a:8e:17:54:cb:b1:1d:
9f:c8:59:cd:32:7d:51:d6:62:87:78:63:9b:2f:79:
ea:23:c8:d2:33:b5:ff:05:11:c7:af:fa:5d:5a:7f:
8b:fa:67:66:a8:fc:10:f8:90:65:4a:ad:1e:46:89:
cd:46:91:44:92:ba:09:d6:01:e2:43:48:85:5d:9b:
52:4e:b1:47:ba:d1:0d:c2:9a:10:9e:41:f3:a9:5a:
f6:97:4e:d6:96:78:0b:46:3a:cd:14:75:f2:c4:4e:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:8F:AD:17:8B:43:BC:C8:89:4E:81:27:22:8F:3B:92:47:2A:94
X509v3 Authority Key Identifier:
keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fa:2e:af:3f:c0:e9:6b:10:53:48:58:36:8d:14:cc:4d:00:
f7:bf:6a:9d:20:a2:a9:a6:aa:f6:f1:b9:32:ef:c2:0c:11:de:
c1:d7:90:bd:82:b7:fe:f0:bd:c1:f0:63:85:a9:0e:00:16:20:
ca:d2:f1:70:97:16:e6:f7:b6:f0:fe:17:5d:47:f4:8f:41:9a:
db:0f:96:fb:56:d2:97:b3:70:d8:a0:57:be:ce:83:50:2c:bf:
22:71:8f:55:5c:9e:73:8d:b0:2e:a4:37:24:ab:9f:70:d4:b0:
12:1d:d5:95:a1:42:d4:ba:7a:2f:8d:16:a3:be:f7:b5:8a:7a:
32:02:b2:f5:13:ac:b8:9c:f0:cb:b3:6b:e9:cc:de:8a:f6:7d:
34:e5:a3:ef:7b:5c:9f:48:72:62:63:40:c6:ba:a9:1a:d6:9f:
c2:0e:0c:4e:08:54:b4:9a:94:f0:3e:f7:fe:99:eb:fa:3e:b5:
4b:d9:72:7a:61:8a:5d:cf:31:67:59:34:2d:48:1c:02:3d:af:
cb:63:59:3d:17:be:e3:6e:03:63:da:b0:e5:10:3f:66:a5:46:
9f:02:2f:0f:12:c6:0d:37:bd:0e:97:24:1f:6c:89:8e:f0:23:
55:6a:38:c7:45:45:39:2b:68:c2:4e:b5:dd:af:24:45:3e:1e:
1e:16:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org