Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: SNuMaIxtBN0vhlrQNe9AeyGQo8PDtJjetOH4hTiGoXc=
Subject key identifier: 35:8C:05:2C:C4:A8:A6:64:B2:85:8B:E2:AB:AE:5B:0E:A3:06:53:77
Certificate issuer: /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial: 5F30CB18719B70C6C1EEB4E2CC6872FC3942FB10
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time: Tue 03 Jan 2023 18:05:26 +0000
ROA not before: Tue 03 Jan 2023 18:00:26 +0000
ROA not after: Tue 02 Jan 2024 18:05:26 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:30:cb:18:71:9b:70:c6:c1:ee:b4:e2:cc:68:72:fc:39:42:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Validity
Not Before: Jan 3 18:00:26 2023 GMT
Not After : Jan 2 18:05:26 2024 GMT
Subject: CN=358C052CC4A8A664B2858BE2ABAE5B0EA3065377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:02:e2:2f:78:37:79:cf:4f:cd:17:a7:95:
78:a3:2c:7d:df:8e:55:18:a4:50:3c:85:0a:45:77:
c4:f9:bb:8e:34:8d:3f:8b:0c:e8:fe:73:b1:53:82:
48:59:03:54:ae:6b:38:54:5c:82:de:2b:73:8e:89:
3b:26:ec:bd:f4:cd:d8:6d:fb:32:7c:b4:4b:a0:6a:
c4:26:93:b2:d5:c5:0c:63:e1:8d:f1:d0:9f:a0:c1:
8e:64:71:74:64:1d:ee:20:d2:7d:37:46:5c:32:77:
26:46:33:cc:f2:90:4a:aa:7e:4c:94:b7:ef:58:0a:
92:5e:4e:32:fd:90:b9:92:b4:d9:03:53:fd:ae:ac:
56:6d:5b:3c:a2:9d:06:90:27:9e:5c:36:b0:4b:8b:
64:43:25:e9:bf:ea:59:c2:43:b9:cb:a8:98:7f:b6:
85:09:0c:40:f2:0d:d8:ae:ed:b5:c5:73:d5:b0:3e:
dc:de:b7:ac:4b:7b:db:00:9a:31:e7:cb:ec:48:e8:
31:51:b1:db:9f:9e:e5:f0:87:dd:f0:4b:88:7a:ab:
83:57:99:0a:ca:ba:75:48:b4:c2:8e:af:9a:a2:28:
26:06:74:9b:ea:ae:c5:57:1c:43:49:2e:88:a2:55:
9c:2e:02:10:55:34:b4:6d:98:21:3a:a9:df:17:b0:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:05:2C:C4:A8:A6:64:B2:85:8B:E2:AB:AE:5B:0E:A3:06:53:77
X509v3 Authority Key Identifier:
keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ad:c7:bc:fb:af:f5:bf:bc:17:ce:a8:f6:d7:47:f7:2c:30:
65:de:16:c9:59:32:0a:e0:55:e2:37:d0:60:dc:0e:3c:86:55:
12:84:5d:d5:48:df:e8:01:60:35:d2:d4:21:2a:76:e4:cb:37:
f7:b6:01:4e:36:24:52:6c:74:82:b7:1f:26:1b:9a:83:25:3e:
4d:0e:68:b9:ee:a1:ae:14:05:f4:83:01:34:5d:03:b8:1e:f6:
5b:5a:f5:85:b3:20:d6:83:d5:e8:9a:0b:06:7d:17:e1:2c:89:
d2:26:17:f6:82:bc:03:97:83:ab:61:19:24:2c:55:8d:9a:b6:
d5:54:16:3a:f1:0a:c1:58:93:0f:5a:30:97:b6:b4:52:93:df:
d6:ac:90:6a:87:c1:81:1d:3f:4a:4c:ea:0a:b9:29:a9:a0:89:
5a:92:29:e8:8c:73:d1:a4:21:09:90:33:a9:7d:09:f8:5c:01:
7f:d2:75:41:53:1e:a4:5f:68:70:d2:29:52:19:30:5d:d0:27:
8c:19:f9:a5:5d:b1:f7:38:6b:26:49:7e:f3:ac:c6:7f:5f:03:
c9:19:7e:08:38:f6:6c:d9:27:4d:65:ed:9e:84:cc:2d:43:51:
36:39:80:23:42:e6:34:50:39:2e:64:06:da:1c:31:69:1d:6e:
8d:9f:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org