Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: rnoAMRc/EM82n9qcAIGd3PltMeSgiRH0Rpr2SinbrjA=
Subject key identifier: 00:14:F5:33:D6:54:C7:94:82:51:8D:2F:C4:4C:09:A5:70:48:44:57
Certificate issuer: /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial: 4554152AE26F2D53F3F20775144C9626D08AB92C
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time: Thu 13 Jan 2022 19:22:16 +0000
ROA not before: Thu 13 Jan 2022 19:17:16 +0000
ROA not after: Thu 12 Jan 2023 19:22:16 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:54:15:2a:e2:6f:2d:53:f3:f2:07:75:14:4c:96:26:d0:8a:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Validity
Not Before: Jan 13 19:17:16 2022 GMT
Not After : Jan 12 19:22:16 2023 GMT
Subject: CN=0014F533D654C79482518D2FC44C09A570484457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:9a:20:43:71:13:97:0c:35:5b:7d:74:42:
83:3e:ce:2e:24:ff:dd:0d:83:26:a0:5c:2f:fa:07:
d2:f1:b5:ce:a9:0b:2e:43:13:be:f8:4f:5e:b4:14:
34:1c:cf:d1:b5:a3:b1:f2:61:f7:b5:d1:33:ad:89:
38:d0:8b:ad:77:e8:a0:58:68:15:cf:8b:62:42:08:
4b:07:04:82:be:a7:8e:ea:54:21:e6:91:c6:53:07:
f2:62:86:f3:44:03:d7:c8:6d:95:7d:2e:0c:ea:fd:
69:27:b8:e3:2d:ce:e3:68:d1:a3:03:61:c0:bf:86:
e6:88:c9:70:d0:b1:fe:c5:5a:d1:a0:85:10:7b:b8:
80:16:51:f9:b9:39:d8:9d:21:c3:47:2c:8c:4b:bf:
69:e2:a8:7d:31:e8:1e:17:cb:7b:b4:fd:c5:01:20:
9d:fd:5d:c9:2f:fb:9d:4c:27:cb:07:3b:87:32:a5:
c9:8d:29:e0:44:ef:4d:93:61:65:57:46:06:7d:da:
f9:52:0d:56:1d:56:68:ad:e4:03:55:a5:ad:1b:8f:
c7:75:d4:94:50:d1:9e:92:86:64:a3:ed:e6:ed:07:
6c:67:68:c1:a4:c5:ff:7e:a9:a4:3b:2e:b6:e7:d4:
11:1d:c9:fc:98:1e:2a:82:36:67:a3:22:39:51:bf:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:F5:33:D6:54:C7:94:82:51:8D:2F:C4:4C:09:A5:70:48:44:57
X509v3 Authority Key Identifier:
keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cf:9e:1a:6b:ee:4b:b0:ad:9c:8c:ed:d6:91:a4:75:43:8e:
83:7d:86:9f:71:68:5b:a9:b5:66:84:a9:de:47:77:ee:ac:c2:
a4:ec:24:e9:45:9d:67:46:55:6c:7b:6c:30:95:30:a6:81:55:
7f:1b:4c:71:49:5e:39:ef:f2:d3:20:0e:bc:2d:b7:90:ea:9b:
a0:0b:ea:73:6f:3d:0c:39:49:5b:75:01:85:c9:0f:7e:10:7c:
a5:d3:52:2a:22:a0:64:55:8c:12:28:ce:8a:5d:6d:ce:f4:ba:
27:02:d7:27:7a:4a:90:b7:6e:c1:19:73:19:a8:a2:40:e4:3d:
2f:6d:31:6f:17:47:04:c5:91:12:8d:29:6c:97:46:02:2a:db:
21:1f:6a:69:49:58:89:b6:2f:14:a6:9a:e2:5b:ec:3f:93:70:
17:d6:bf:8c:29:3e:bc:5e:8f:8a:6e:6b:bf:8d:05:9f:07:4e:
ac:bc:94:0b:1d:3f:7d:61:be:b0:60:32:55:69:25:03:02:e5:
38:54:b6:71:24:71:06:f3:1c:21:24:fa:67:6f:c9:ae:ad:ad:
5b:d2:35:24:ed:8a:84:4e:f8:c5:36:8f:4b:fc:af:dc:c6:87:
1e:61:a3:93:14:59:44:e5:d5:8f:6f:34:cd:08:a0:46:52:1a:
51:31:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org