Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: /BMLRI3MN4snzi4PxGX869ZOeSZKjUEJikLbs5VW7ho=
Subject key identifier: D8:D9:70:B3:0D:53:12:27:03:AE:A1:8F:0F:4F:F5:BF:FF:66:E9:20
Certificate issuer: /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial: 70755FDD76A16C78ED44FDE05C72C2F40705BFF6
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Tue 14 Feb 2023 14:25:21 +0000
ROA not before: Tue 14 Feb 2023 14:20:21 +0000
ROA not after: Tue 13 Feb 2024 14:25:21 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:75:5f:dd:76:a1:6c:78:ed:44:fd:e0:5c:72:c2:f4:07:05:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Validity
Not Before: Feb 14 14:20:21 2023 GMT
Not After : Feb 13 14:25:21 2024 GMT
Subject: CN=D8D970B30D53122703AEA18F0F4FF5BFFF66E920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:c6:fe:c8:db:bb:ee:76:08:3a:ba:b7:b3:
5a:72:f4:8d:42:60:bd:fa:de:aa:ae:11:2a:ee:ad:
b0:e9:e2:25:4d:3c:7c:40:e5:7b:b6:bf:62:28:d4:
c0:ac:cf:37:a2:b5:14:65:9b:b1:9a:3c:0a:60:9b:
45:82:24:14:2b:98:16:c1:22:1a:c2:8e:90:9e:ba:
00:bc:b1:2c:41:03:20:f7:11:e7:64:66:b6:a3:15:
13:08:19:c0:99:d1:fa:59:43:54:8b:f9:29:17:a3:
9e:35:5c:56:7d:85:93:58:65:4b:8e:c1:d6:79:79:
04:3d:11:dc:4d:0a:c0:1d:3b:5e:9d:34:3b:11:c1:
3e:b2:78:b8:2b:c1:a8:be:5e:c5:18:65:2e:6d:a0:
4e:fe:5f:ce:6d:43:8c:de:72:66:ff:87:eb:44:7f:
a5:29:7d:c9:63:c4:62:6c:bd:eb:4b:59:c5:74:34:
b7:c2:e8:3e:d9:5b:82:7a:8a:27:15:33:24:58:d6:
66:62:a1:79:13:f7:35:40:90:57:88:eb:23:13:79:
76:8d:9f:53:d5:62:98:9d:a4:77:3f:91:4a:89:ee:
b3:23:e0:71:cc:c1:51:d0:ef:8b:e5:3d:3c:2c:64:
45:ce:40:7f:d8:a5:13:c8:14:36:24:53:28:92:c1:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:70:B3:0D:53:12:27:03:AE:A1:8F:0F:4F:F5:BF:FF:66:E9:20
X509v3 Authority Key Identifier:
keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ca:97:f5:f4:c3:ea:75:c3:fc:25:b2:d1:87:b9:22:20:99:
06:64:48:25:dc:ad:37:5e:6b:2d:1d:2c:ee:5b:49:63:96:5e:
d8:18:c6:69:ed:61:de:c0:90:41:43:5d:96:ec:8c:6e:35:58:
54:e6:2f:07:a0:be:c7:84:1d:a8:4d:5c:c8:23:b7:d8:f6:61:
b5:47:77:82:1c:98:de:82:80:a0:e1:ff:4c:41:c5:cf:ab:60:
a1:fe:84:87:b8:88:1e:1f:88:f7:d0:a2:4f:b7:f7:17:81:7c:
e2:53:87:2e:2f:85:72:2d:16:56:a5:ad:79:46:a0:4e:f8:c9:
e0:bf:8f:5c:cb:36:bb:60:34:58:2e:52:28:cc:69:19:0f:59:
85:ff:1a:a2:87:16:65:c8:61:2e:be:3e:22:d1:0d:90:81:d7:
be:f3:cf:29:1a:82:dd:a5:fe:ad:ed:34:cf:e0:f0:64:20:a6:
ad:73:80:50:29:f4:e3:12:aa:3d:07:86:6b:e8:1f:dc:eb:55:
0f:64:b7:6e:02:0c:c7:cc:82:84:24:78:bc:6a:aa:22:bd:03:
fe:b3:1d:b5:7a:0c:46:87:cf:f2:1f:86:e8:78:1c:0f:25:d7:
1a:e0:06:29:0d:4e:ce:cf:c8:cc:43:36:8d:4f:29:3a:15:ba:
37:a8:08:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:48:51 2025 by rpki-client