Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          66aT847RFZz8lmP1xPh8PJXA9DnneIK57ySPG3aLL7Q=
Subject key identifier:   45:1E:F5:C2:4F:27:20:14:C8:0F:A4:22:2D:85:F5:15:C9:22:88:C6
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       57EF8AFD11E59B44E2A241F9E3CFAE13EC7C3A2C
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:25:10 +0000
ROA not before:           Tue 14 Feb 2023 14:20:10 +0000
ROA not after:            Tue 13 Feb 2024 14:25:10 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ef:8a:fd:11:e5:9b:44:e2:a2:41:f9:e3:cf:ae:13:ec:7c:3a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:20:10 2023 GMT
            Not After : Feb 13 14:25:10 2024 GMT
        Subject: CN=451EF5C24F272014C80FA4222D85F515C92288C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:17:a3:f6:12:01:de:70:f5:90:da:36:5c:
                    7b:b1:e3:36:03:4b:73:b1:c0:e6:a5:f2:07:a0:84:
                    bc:a5:3a:22:2f:64:99:38:4b:2a:95:7d:33:38:f9:
                    f4:84:30:6a:10:5a:92:47:fe:8c:63:39:54:d6:ea:
                    e5:35:1c:b6:b8:5f:f2:e6:c6:68:84:d2:6e:13:e6:
                    7e:83:86:51:ef:da:1c:11:f9:68:b6:57:6e:0c:9f:
                    bb:d6:51:1b:b5:65:6f:e0:a1:a2:66:3c:e1:b7:18:
                    f3:f4:9a:39:ce:c8:40:72:bf:6b:b7:09:db:17:d4:
                    3c:12:92:a6:1e:97:37:f0:19:27:9a:68:64:ff:b1:
                    cc:e3:66:1e:3b:dc:bd:16:92:8c:be:68:1e:32:66:
                    11:3c:bd:2b:1c:b1:90:f8:c9:dc:7e:8e:9b:dd:83:
                    1b:e4:a3:66:2e:3c:9d:7d:c6:b2:f4:2e:34:d0:c9:
                    8a:29:b3:6a:e1:4c:45:7b:9f:27:c6:d0:c7:ee:64:
                    7e:dd:b4:7b:c7:ac:ee:72:a5:7f:a8:87:c7:7b:4c:
                    70:49:37:d0:56:88:4b:b9:d5:8d:21:e2:4b:f0:da:
                    48:21:d3:f6:5f:cb:a8:6f:42:3a:dd:86:ae:a9:51:
                    e8:19:5c:37:5f:ba:55:ab:d7:49:52:be:65:19:e6:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:F5:C2:4F:27:20:14:C8:0F:A4:22:2D:85:F5:15:C9:22:88:C6
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1e:2c:1d:d8:3e:83:aa:3c:11:fb:74:e9:bc:4f:f8:fa:6b:
         d5:f0:29:85:48:a7:71:ab:6e:37:d9:28:99:15:85:c2:ea:70:
         e9:c6:23:89:58:d9:43:4c:4e:46:84:99:b3:2c:22:27:d8:50:
         31:13:df:7f:ab:f3:b8:f1:5a:93:63:a4:d8:10:73:35:da:c2:
         1c:b8:b8:7e:f4:d9:51:df:3b:45:0e:71:2c:b4:e9:73:29:dd:
         75:3f:4b:d6:77:25:76:07:7d:a8:e6:f3:8b:ae:46:dd:9f:f5:
         c3:75:f6:90:2a:62:90:26:1e:6d:e5:5c:fc:bd:5e:65:74:29:
         9e:a4:b8:6d:12:91:2d:06:98:55:3f:4a:e1:e1:20:12:b2:e9:
         0f:2b:47:dc:5a:ae:f6:f8:89:5d:f8:9a:86:f2:9f:4c:68:d1:
         fc:60:72:94:89:b0:03:0d:56:22:5f:95:67:9b:39:6d:37:e9:
         2e:c5:97:54:5e:1d:de:b5:9d:70:8c:c2:07:de:f3:bc:41:0d:
         c5:22:fb:e8:b6:64:45:0e:37:64:81:0d:6e:4e:33:48:3c:52:
         f3:64:c0:f0:af:29:2a:80:ad:62:ec:ca:85:7e:85:c7:12:69:
         89:12:23:05:97:e6:29:c8:43:03:95:37:1a:f0:f1:04:ab:ab:
         42:35:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:41:46 2025 by rpki-client