Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: EjTf7lSW5AEbsxrB+nB8vcEaAe4yt9BuKErzurSjU8s=
Subject key identifier: 8B:09:9F:28:DF:CE:40:F2:FA:1C:08:6F:8E:D6:B1:95:FC:33:D4:0F
Certificate issuer: /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial: 6FA459F401A5E0C4444E0CC293DF1669A549FC76
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time: Wed 01 Jun 2022 18:50:55 +0000
ROA not before: Wed 01 Jun 2022 18:45:55 +0000
ROA not after: Wed 31 May 2023 18:50:55 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a4:59:f4:01:a5:e0:c4:44:4e:0c:c2:93:df:16:69:a5:49:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Validity
Not Before: Jun 1 18:45:55 2022 GMT
Not After : May 31 18:50:55 2023 GMT
Subject: CN=8B099F28DFCE40F2FA1C086F8ED6B195FC33D40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:74:66:84:f5:19:b4:c6:4a:de:d5:fe:78:
f1:4f:6c:b0:27:3e:fa:10:11:59:b5:85:1c:dd:f4:
07:57:2b:cf:5c:c3:1e:48:96:fa:24:40:05:60:8a:
36:38:da:21:c0:75:00:63:9e:d5:22:0b:33:24:6f:
0d:69:52:f2:f5:81:57:92:75:97:24:c6:92:20:56:
e1:41:cd:d0:af:d0:00:06:0a:bf:84:ed:18:16:5c:
da:c7:8c:5d:95:5c:a3:7d:2f:64:4c:94:8b:ef:d8:
26:8c:80:fb:06:18:7b:3a:1a:33:e2:ed:c5:a5:40:
55:0d:d6:30:04:5f:6a:46:c7:1e:76:73:c6:06:65:
02:b0:62:41:db:99:fe:80:59:1b:52:eb:31:a4:be:
2d:00:eb:70:09:63:b1:5a:b2:b6:a2:5d:49:69:15:
36:11:09:2e:5d:f6:8b:c9:db:bc:d6:5b:ca:e9:b9:
c8:ae:3e:0f:5a:df:48:76:5d:6a:de:d1:3b:f0:9c:
c4:b5:bf:67:9a:45:c9:59:fe:84:88:cd:0d:b5:8a:
35:97:8d:53:e2:19:a8:29:f9:8b:a7:80:62:68:82:
ad:ab:7f:e8:f2:2d:11:13:aa:ec:f1:52:97:a0:c5:
59:65:8a:39:38:b4:00:a7:c4:c3:ba:d6:be:b1:b0:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:9F:28:DF:CE:40:F2:FA:1C:08:6F:8E:D6:B1:95:FC:33:D4:0F
X509v3 Authority Key Identifier:
keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ad:9e:4b:9e:23:7a:08:8d:53:6d:19:77:42:27:3c:13:4e:
1d:0e:81:ae:45:15:5a:d3:1d:a1:0f:fc:44:af:33:72:1d:56:
0c:a2:b3:64:8a:1d:25:35:32:93:57:01:b9:ca:46:1d:71:cb:
2e:67:34:45:8e:d8:64:83:c2:36:5e:b7:f2:f4:55:e9:4f:d1:
ac:e0:97:cb:02:e7:b5:f1:ef:f7:3e:d5:cd:55:a6:07:a0:cf:
a6:37:2e:97:31:a8:9c:e4:b4:e8:62:8d:23:f8:c4:5c:aa:50:
ec:64:19:c5:d5:95:b6:34:5f:03:1b:e9:c9:13:bf:7f:08:d6:
71:96:7a:7a:e1:e9:5c:fb:0c:1a:84:54:6b:86:81:9a:b0:7c:
d8:7c:5f:58:32:17:97:ba:96:5a:ba:84:3f:ea:35:4e:cf:52:
d6:ff:52:f4:79:66:4b:65:83:1c:a3:f7:86:e4:80:ca:9d:25:
e3:d4:41:72:20:e7:ea:9a:b2:01:47:77:00:09:b4:6e:8a:12:
e6:2e:f6:4a:96:2b:68:50:5a:39:2e:7f:a1:bd:b4:15:91:f0:
fc:b5:36:66:e9:de:c0:dc:3d:41:03:01:aa:90:ae:20:10:6c:
ab:7e:c1:cb:88:c0:47:53:cf:e4:8f:30:91:c7:a7:bf:c6:9d:
8a:6c:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org