Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: Aqo3yoSA8VERPnOXBjH66sIKoJxK17nlPaI9++4HyME=
Subject key identifier: 3D:E9:A5:15:C6:7F:D9:CF:54:60:F9:5D:B4:6F:C0:FD:FC:F1:4D:E1
Certificate issuer: /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial: 0E3E4326B09A325C38829FD1737FACD316634274
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Mon 25 Apr 2022 15:11:34 +0000
ROA not before: Mon 25 Apr 2022 15:06:34 +0000
ROA not after: Mon 24 Apr 2023 15:11:34 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3e:43:26:b0:9a:32:5c:38:82:9f:d1:73:7f:ac:d3:16:63:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Validity
Not Before: Apr 25 15:06:34 2022 GMT
Not After : Apr 24 15:11:34 2023 GMT
Subject: CN=3DE9A515C67FD9CF5460F95DB46FC0FDFCF14DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:a2:e8:f4:6e:17:e6:cd:24:e4:ff:f4:00:
32:9b:35:5d:4e:b0:62:a2:8d:bf:af:2c:a8:0d:19:
da:69:bb:ae:a8:b7:f5:84:ad:ee:b4:6c:ab:8d:c1:
3b:c2:de:0f:10:c0:de:bd:5e:e9:47:bf:f6:06:ec:
bd:0a:e5:71:90:84:95:1a:2f:84:bb:dc:ca:7a:af:
76:38:c3:90:a7:28:d7:d7:39:7c:e8:2f:23:98:5f:
25:a8:84:44:8b:a4:4d:bb:d5:5e:79:da:67:06:e9:
98:c1:56:30:1e:da:eb:69:8c:56:9d:c3:e8:17:ae:
4e:d4:df:1c:bd:a6:c8:fc:9c:1a:d0:7b:a3:fe:bb:
21:45:01:3c:55:1b:d6:a4:33:cb:cf:e0:e8:c7:66:
8e:31:56:99:a8:5b:d7:83:b2:48:74:41:ac:04:6e:
34:ab:71:f6:5e:9d:9b:af:db:19:40:f4:82:58:26:
91:bf:1e:8c:03:2d:6b:0a:2d:97:d5:02:da:1e:1e:
d9:f7:d8:49:a9:7e:91:e9:f2:53:09:cc:0f:dc:2e:
bc:ef:fd:9f:db:64:2f:78:6c:04:32:68:af:23:3f:
c0:e2:4a:19:70:11:96:a8:75:0a:6e:3a:e6:e5:d8:
f9:9a:93:19:cb:e4:97:0e:fc:7d:80:48:5d:19:35:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:A5:15:C6:7F:D9:CF:54:60:F9:5D:B4:6F:C0:FD:FC:F1:4D:E1
X509v3 Authority Key Identifier:
keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
65:57:0f:e1:15:8a:b6:c9:9d:a6:48:76:18:f2:b2:eb:c2:5e:
2b:7f:5f:8f:d3:3a:86:11:a8:50:15:6d:cb:93:df:81:f4:7c:
16:29:14:ea:41:0f:99:51:37:ef:1d:4c:ce:3d:a4:77:4d:64:
6a:3c:28:35:ea:80:82:8c:bf:58:9b:67:95:2a:85:7e:a2:94:
d5:b3:6d:1c:cb:d4:24:dd:35:cf:66:08:cb:fc:1a:b5:94:cb:
bd:c3:f5:0b:1b:f5:cb:7c:4d:ba:ec:d6:c8:8c:13:3f:f2:b0:
e9:00:d1:f3:3f:d6:6d:9d:40:a7:16:05:59:a3:4f:04:18:27:
33:ea:ef:77:d4:90:51:29:89:ea:a4:16:fb:ad:40:2c:31:65:
15:50:17:ed:fa:7e:99:d9:80:03:ba:b9:30:b3:6e:d5:ae:ac:
be:16:ca:97:27:00:77:a9:2d:ee:50:6d:d2:ad:45:b1:a2:ea:
39:14:5a:98:4e:75:a2:f0:11:30:29:0b:dc:7d:58:5c:ff:0e:
b0:f1:d6:e2:aa:c4:f8:33:52:c8:ca:c8:3f:c9:df:d8:05:a9:
0c:81:dd:e7:86:1c:0f:83:c7:75:73:4a:92:be:0a:73:93:65:
8f:ec:95:87:c6:10:a5:2a:02:50:4e:b7:1c:96:e1:80:26:c5:
06:58:e6:2d
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUDj5DJrCaMlw4gp/Rc3+s0xZjQnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmNmNmE3NWZjYTVkMTk5YzdkOTQ4OWY4
ZDI0ZjcxM2U4N2QxMTJkNjUwHhcNMjIwNDI1MTUwNjM0WhcNMjMwNDI0MTUxMTM0
WjAzMTEwLwYDVQQDEygzREU5QTUxNUM2N0ZEOUNGNTQ2MEY5NURCNDZGQzBGREZD
RjE0REUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW6i6PRuF+bN
JOT/9AAymzVdTrBioo2/ryyoDRnaabuuqLf1hK3utGyrjcE7wt4PEMDevV7pR7/2
Buy9CuVxkISVGi+Eu9zKeq92OMOQpyjX1zl86C8jmF8lqIREi6RNu9VeedpnBumY
wVYwHtrraYxWncPoF65O1N8cvabI/Jwa0Huj/rshRQE8VRvWpDPLz+Dox2aOMVaZ
qFvXg7JIdEGsBG40q3H2Xp2br9sZQPSCWCaRvx6MAy1rCi2X1QLaHh7Z99hJqX6R
6fJTCcwP3C687/2f22QveGwEMmivIz/A4koZcBGWqHUKbjrm5dj5mpMZy+SXDvx9
gEhdGTXf7wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFD3ppRXGf9nPVGD5XbRvwP38
8U3hMB8GA1UdIwQYMBaAFLpT46jGogU+6ANP6u9Y/lH+9Ld1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODA0NzY1N2UwMTgwNjE0MjdhNjAwZTg0LzAv
QkE1M0UzQThDNkEyMDUzRUU4MDM0RkVBRUY1OEZFNTFGRUY0Qjc3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzkzZTNjYmJhLWI2NGEtNGY4Ni1iMDZmLTljZDM4MTNlOWJkZS9mY2Iy
MGY1OTY2Y2Y2YTc1ZmNhNWQxOTljN2Q5NDg5ZjhkMjRmNzEzZTg3ZDExMmQ2NS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwNDc2NTdlMDE4MDYx
NDI3YTYwMGU4NC8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzIyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKVcJgwDQYJKoZIhvcN
AQELBQADggEBAGVXD+EVirbJnaZIdhjysuvCXit/X4/TOoYRqFAVbcuT34H0fBYp
FOpBD5lRN+8dTM49pHdNZGo8KDXqgIKMv1ibZ5UqhX6ilNWzbRzL1CTdNc9mCMv8
GrWUy73D9Qsb9ct8Tbrs1siMEz/ysOkA0fM/1m2dQKcWBVmjTwQYJzPq73fUkFEp
ieqkFvutQCwxZRVQF+36fpnZgAO6uTCzbtWurL4WypcnAHepLe5QbdKtRbGi6jkU
WphOdaLwETApC9x9WFz/DrDx1uKqxPgzUsjKyD/J39gFqQyB3eeGHA+Dx3VzSpK+
CnOTZY/slYfGEKUqAlBOtxyW4YAmxQZY5i0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org