Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier: +Vouyea2ujaoX3LOG6UxQjZ44YXaRiNb3UQ41h7N8K8=
Subject key identifier: CB:0A:40:71:C7:9D:5C:DB:C8:34:23:4A:EF:6D:59:84:9A:A1:96:0C
Certificate issuer: /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial: 54224D4F855B2365F47EE5058140CF33752084B1
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time: Mon 25 Apr 2022 15:11:40 +0000
ROA not before: Mon 25 Apr 2022 15:06:40 +0000
ROA not after: Mon 24 Apr 2023 15:11:40 +0000
asID: 399970
IP address blocks: 149.112.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:22:4d:4f:85:5b:23:65:f4:7e:e5:05:81:40:cf:33:75:20:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Validity
Not Before: Apr 25 15:06:40 2022 GMT
Not After : Apr 24 15:11:40 2023 GMT
Subject: CN=CB0A4071C79D5CDBC834234AEF6D59849AA1960C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:1e:56:e5:7f:12:e7:01:a0:29:b9:49:4a:
e6:35:0a:64:40:5f:41:cf:d7:02:66:d3:79:5e:12:
88:02:d9:4a:98:b5:b0:44:48:08:d9:82:08:a2:a9:
8c:9a:14:03:82:77:7f:f6:72:1c:22:59:48:b2:30:
c2:9b:c7:d3:a2:8a:9f:ec:07:eb:41:c2:ab:51:54:
7d:3f:8f:3b:77:07:c7:3c:fa:db:68:74:c0:8a:23:
bf:df:1a:dc:74:11:bf:e5:79:8e:b9:19:5e:f1:61:
c5:b9:f6:9b:9a:e9:00:84:6f:e8:85:7b:14:9c:dc:
ff:4e:32:a1:51:bb:89:f1:23:9d:c5:5d:59:60:f3:
b4:a5:0b:49:8e:12:64:0c:59:34:77:c6:9a:21:a8:
ce:0f:20:c8:f8:5d:69:12:7f:4a:4c:07:33:d3:ad:
b9:fd:bd:2d:67:4c:45:c7:bf:22:44:71:7b:89:1e:
86:5f:49:cb:d9:33:40:79:1d:5f:97:03:a8:cd:fc:
6a:fb:45:71:9d:ca:82:f6:3f:79:5b:ee:29:c6:75:
a9:f9:9a:d7:b2:7c:f2:39:ae:73:a2:7e:26:5c:fc:
16:46:8a:16:99:1a:70:66:5e:97:bc:97:be:df:e1:
b3:71:cf:2f:94:74:b1:41:b0:85:f0:45:db:a2:68:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:40:71:C7:9D:5C:DB:C8:34:23:4A:EF:6D:59:84:9A:A1:96:0C
X509v3 Authority Key Identifier:
keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:9c:6f:02:25:ae:7b:84:7a:f3:44:ce:57:6c:b5:0a:b0:0d:
11:b8:05:05:8f:fe:c0:41:5c:31:ff:67:84:12:57:6a:5d:80:
a9:39:a5:a6:f8:1f:34:f6:e8:67:54:cb:db:4d:50:f8:5a:61:
f8:e5:dc:a9:2a:7d:e2:31:5f:1b:9a:81:d7:cc:3c:c9:8f:ec:
5e:a2:2b:0b:d0:df:e0:f4:8a:d6:fe:25:c0:51:32:5b:04:ac:
ef:bc:1e:a5:9d:c7:5c:09:9e:c4:48:3d:5d:ea:08:b0:30:af:
d7:3d:37:be:27:7d:ed:c1:e2:72:ba:c0:bc:ad:1a:dc:8a:55:
df:7d:19:4e:71:02:e3:ac:fc:25:e4:54:00:01:b5:07:13:81:
da:87:4d:58:d3:e7:06:9b:6a:ac:93:59:da:1b:b1:da:72:b9:
11:57:7f:63:10:a2:d4:e7:26:f4:0d:50:29:9b:62:70:2b:91:
5b:c1:99:a0:00:b0:a2:83:52:1f:69:b0:94:db:0f:e2:a6:8a:
41:15:0a:62:2a:6e:e5:c3:22:ed:2a:75:47:f2:27:9c:92:3e:
6d:f5:2f:67:ac:9b:99:22:45:45:b7:8f:2b:c5:ab:fd:1e:dc:
90:29:f9:f9:c0:ce:f5:c4:e4:fe:a9:1c:3e:95:ad:eb:32:db:
65:be:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org