Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: HQ6JhiGjv3cDfoyMG3aGBZoUNlZcorGkDhxCvw6ityU=
Subject key identifier: 52:02:60:CD:BF:CD:74:E6:15:93:88:CB:0A:29:62:3B:CA:CE:0E:D0
Certificate issuer: /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial: 1A6D07CCA3613A9F07150C67B21F8CBE4CBC8BC0
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Tue 24 May 2022 21:13:50 +0000
ROA not before: Tue 24 May 2022 21:08:50 +0000
ROA not after: Tue 23 May 2023 21:13:50 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6d:07:cc:a3:61:3a:9f:07:15:0c:67:b2:1f:8c:be:4c:bc:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Validity
Not Before: May 24 21:08:50 2022 GMT
Not After : May 23 21:13:50 2023 GMT
Subject: CN=520260CDBFCD74E6159388CB0A29623BCACE0ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:2a:1e:14:47:fa:e9:d5:2e:55:36:f0:5d:
f9:c3:5e:5b:95:28:39:41:0f:88:ff:95:b7:f2:ed:
0c:3d:b0:87:48:0d:ea:05:43:a8:7f:a5:45:0f:82:
4a:09:ab:9d:c5:5b:f2:eb:6c:e0:f9:3a:b7:e5:c6:
2c:b7:38:61:95:f9:a3:62:1a:e5:8c:7b:84:38:31:
3c:6d:84:63:d7:c2:e8:da:c0:1f:85:1f:05:a9:be:
d2:0b:f9:00:c1:5a:c6:d2:2d:7e:99:27:cf:63:d6:
08:dc:b4:d2:43:8e:66:3e:96:af:ef:7d:67:f5:16:
ed:23:9c:7f:46:7a:2c:5d:f4:27:ca:4c:46:04:53:
ab:41:7a:4b:ce:29:a4:03:d2:68:28:d3:e7:44:c9:
cc:81:fb:54:84:76:fa:59:d3:f2:02:87:6f:a8:af:
94:23:18:77:e1:b7:62:88:95:c0:c0:68:5f:f6:b0:
b1:aa:0e:3b:74:7d:84:ae:79:05:14:5a:86:21:02:
f8:ab:d2:8d:ee:09:6d:3d:2b:d1:0f:0f:06:04:97:
51:98:bd:64:11:52:12:20:ee:d7:c9:f7:52:dd:9a:
ca:a9:79:92:33:ec:cf:1e:ce:7f:8f:35:68:a7:e1:
03:3a:bd:2b:33:4a:7d:dc:4d:f3:2a:72:3f:8a:6e:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:60:CD:BF:CD:74:E6:15:93:88:CB:0A:29:62:3B:CA:CE:0E:D0
X509v3 Authority Key Identifier:
keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ec:4a:bf:c3:7f:1d:e7:5c:04:ca:c8:c2:0d:a8:88:78:4b:fe:
72:8a:3c:2a:3f:d9:ca:11:1d:8c:f6:77:8b:a7:aa:54:e4:43:
3b:7f:d9:3a:64:85:66:94:9f:c4:2a:a4:0c:da:d2:ca:fc:8a:
64:41:1a:27:c7:4d:83:71:6b:5a:c5:4e:2d:87:19:e7:b8:65:
30:aa:54:a0:55:fb:cf:93:c1:76:36:86:60:a9:69:9c:87:1f:
41:c9:2a:4f:52:60:06:a9:27:1e:a5:42:0f:c8:21:64:15:c8:
e0:27:b1:6b:94:c6:03:84:1a:86:2b:10:27:e8:95:be:29:ab:
46:64:e8:9b:cc:06:30:51:60:74:ee:12:d3:a6:77:55:2d:eb:
33:79:75:51:7f:5b:30:c7:70:9b:9b:55:f2:c2:e6:97:72:69:
1d:2e:06:ac:1b:fe:13:8e:13:8e:a1:e5:f2:2c:12:33:0e:7b:
68:4b:b5:48:1b:40:44:4c:9a:ec:aa:36:5c:05:19:4b:e6:6a:
31:70:51:48:af:16:41:57:28:18:87:5c:7c:c3:dd:4d:dd:40:
91:66:36:e9:c8:d6:bb:a7:ec:6e:e9:56:67:c2:d6:cd:e7:5b:
85:e9:27:bc:2c:30:07:25:4d:bd:09:47:7a:93:4b:34:51:e6:
0a:a2:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org