Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: MG47Cm4oFlQpYyUWwFd4RJrOERTxF+Fr+8lZDlY9iX8=
Subject key identifier: 9C:DD:DA:7A:D0:8B:D5:38:84:ED:CE:12:A2:4E:20:8F:50:44:04:53
Certificate issuer: /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial: 2196D155E632C3C9218980B6A8327A89771F5732
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Mon 05 Jun 2023 18:33:03 +0000
ROA not before: Mon 05 Jun 2023 18:28:03 +0000
ROA not after: Mon 03 Jun 2024 18:33:03 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:96:d1:55:e6:32:c3:c9:21:89:80:b6:a8:32:7a:89:77:1f:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Validity
Not Before: Jun 5 18:28:03 2023 GMT
Not After : Jun 3 18:33:03 2024 GMT
Subject: CN=9CDDDA7AD08BD53884EDCE12A24E208F50440453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:92:f0:14:ce:5c:77:3d:a8:81:36:19:b8:
8b:a5:61:3c:27:90:e9:7e:60:4d:82:c3:d4:d7:de:
b5:ca:3e:a8:92:26:97:18:6e:59:72:f5:e1:a5:5a:
ca:98:1d:9f:91:53:0b:62:2f:c3:1d:f1:48:06:9e:
29:5d:8a:f8:3c:7e:d9:16:cf:c8:39:28:bf:d8:94:
e9:10:35:ec:4f:2b:e9:2b:3c:3a:b9:28:2c:85:8b:
80:fb:ca:eb:a5:b5:9d:6a:9a:55:a2:69:07:1b:20:
91:36:22:1c:fb:de:2e:64:58:1f:3d:5f:31:2b:2b:
18:b7:76:a1:35:4b:2e:42:52:81:cf:c7:7b:1f:0d:
2a:96:7e:cd:5a:13:d9:74:1b:ff:18:dc:27:31:3d:
cf:ef:ee:be:49:4b:cf:50:5c:88:83:76:a0:65:64:
66:99:6e:a1:cb:b9:33:43:d3:ea:9b:d6:7f:ac:df:
ef:e7:00:25:1a:1d:a5:6e:34:32:27:60:13:f4:d5:
14:a3:8b:48:d0:8d:3d:7c:6d:78:15:34:39:18:e6:
a1:82:fe:f3:f4:76:81:c7:cb:d0:f3:19:d7:9f:7a:
98:10:2b:0b:2a:9a:0c:72:18:f7:3d:39:ce:68:f6:
79:c4:0a:fd:c1:2c:92:81:ef:c8:a2:0c:32:4e:b6:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:DA:7A:D0:8B:D5:38:84:ED:CE:12:A2:4E:20:8F:50:44:04:53
X509v3 Authority Key Identifier:
keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:f8:09:18:64:44:62:02:40:1a:ad:1d:e0:df:00:44:1a:c3:
5e:e0:b8:74:a5:73:10:6f:9f:95:71:10:8d:f8:7c:40:87:a9:
10:94:63:23:72:23:38:6c:21:93:84:24:f7:ba:86:fa:1c:cb:
e4:31:46:e1:8e:fc:e8:c9:f4:be:86:41:4a:89:82:b2:45:18:
8c:0b:af:36:4d:8b:04:9a:f0:a6:c1:e2:8e:7f:19:c5:bf:a2:
56:a3:7f:19:1e:63:3b:2e:7e:e2:98:91:f8:87:5b:73:13:46:
f1:8d:b2:9a:39:09:06:bf:5e:bd:78:ee:07:e4:0e:63:67:0a:
d1:b4:c0:05:66:c3:e5:dc:d7:4c:94:6a:72:85:2e:8c:46:24:
ec:e1:95:b5:54:a9:5c:57:41:69:d9:48:54:f0:b9:0c:a9:8b:
14:80:45:df:6e:dc:49:b8:32:67:10:93:00:3f:ad:8b:e1:9b:
ec:3b:24:53:b4:1c:0d:bd:3f:3e:51:de:d7:40:69:62:55:d9:
ee:60:e5:7b:49:59:0e:db:5e:58:e0:92:91:cf:8d:d4:f4:04:
79:aa:58:0c:79:07:04:7f:bf:b7:40:92:44:95:a1:2b:c6:1f:
db:0c:13:9a:16:6d:66:68:6f:05:bf:cf:14:e8:b7:02:47:5d:
29:df:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org