Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: RNv+pVzC5RhJpCt8/X1bL052wFb2DlHW/30waVztqPE=
Subject key identifier: BE:48:B1:4E:84:D2:C8:C3:41:AC:0E:21:37:DB:14:43:B6:74:80:73
Certificate issuer: /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial: 4E17F6A1944047AD18A37B016D2124D109D57FF1
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time: Sun 22 May 2022 06:06:16 +0000
ROA not before: Sun 22 May 2022 06:01:16 +0000
ROA not after: Sun 21 May 2023 06:06:16 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:17:f6:a1:94:40:47:ad:18:a3:7b:01:6d:21:24:d1:09:d5:7f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Validity
Not Before: May 22 06:01:16 2022 GMT
Not After : May 21 06:06:16 2023 GMT
Subject: CN=BE48B14E84D2C8C341AC0E2137DB1443B6748073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:ac:20:b3:91:72:ed:29:e5:c4:b1:da:3b:
60:db:39:2c:b2:6a:9a:5a:37:04:8e:e9:f8:d6:dd:
6c:fc:86:86:12:8e:aa:fe:10:c2:b7:3f:ff:41:73:
d1:75:f9:cb:61:47:6f:cb:0b:6e:4b:11:65:87:53:
8e:ae:a6:f9:50:b5:cc:f0:6f:3c:d1:f0:f6:18:f3:
51:89:db:f8:f8:51:85:fd:c6:b1:38:5d:07:cb:b9:
4c:e4:03:41:b7:5d:9d:0f:c0:d7:b7:37:39:d4:77:
b5:08:a4:c8:a5:01:8a:07:4a:32:91:e4:34:23:e9:
6e:57:b2:f2:43:70:c2:47:87:71:ce:a4:56:a7:50:
46:3d:f7:74:67:ea:9e:a0:72:19:43:dc:c8:a3:f9:
13:12:fc:fa:68:07:17:78:ac:ea:1c:8b:a9:fb:73:
16:82:d6:7a:7e:3c:d2:52:eb:c7:5f:62:0e:d5:be:
f6:67:2f:f5:b2:e3:be:17:d2:e7:87:c6:f8:32:8e:
89:bd:22:09:8b:d9:0c:50:0e:e4:c1:d8:cd:c6:a9:
09:bd:e3:c5:ee:b5:4b:a1:62:7c:e3:ed:c1:2c:4f:
b3:4b:48:d0:09:27:07:92:2c:30:18:03:f5:44:01:
e7:14:eb:4b:87:a1:46:3a:60:08:97:e7:51:91:70:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:B1:4E:84:D2:C8:C3:41:AC:0E:21:37:DB:14:43:B6:74:80:73
X509v3 Authority Key Identifier:
keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c2:9b:7c:8c:e3:6f:4b:27:66:c8:6f:83:eb:5a:d6:7f:fe:
a4:a1:a1:38:f7:c4:19:88:6b:bd:51:31:93:ad:ec:20:6a:d0:
59:02:5b:fa:5d:a4:3c:c5:4a:2d:d6:00:3a:4c:97:6f:eb:a3:
7e:d5:28:2e:db:c7:b3:d2:21:7c:55:f6:d6:b9:4f:32:1e:eb:
44:7e:1a:cc:b3:a9:56:66:08:1d:da:6b:80:ed:f7:50:c3:41:
02:24:32:93:e6:f5:47:6f:89:cf:e4:fb:69:d2:68:38:de:39:
6f:72:09:6c:f6:91:23:c2:31:41:36:f0:06:08:4b:87:68:87:
2f:64:54:0a:e0:8f:92:40:78:4c:d5:17:3f:ee:a7:9d:74:d2:
1a:45:dd:8e:5e:50:84:58:67:7e:95:21:dd:9a:94:0d:d1:c9:
98:fb:c5:04:73:9d:bc:1d:cb:1f:44:e9:d8:92:3c:23:2e:7e:
cd:c2:6d:d3:a9:58:59:f4:47:a5:75:61:d8:01:4b:89:49:8c:
28:21:2d:eb:3c:59:6f:ce:f5:17:82:a0:00:e9:a8:40:de:18:
c0:88:0b:f1:63:93:e5:9d:3a:a4:ad:1c:6f:ec:05:75:91:e4:
f8:aa:1b:6f:c3:55:4f:ba:ff:0c:06:9e:f2:5b:0f:81:f5:25:
a4:06:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:26:10 2025 by rpki-client