Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier: 8cKEpdfhrW1e5+S7PVhEAKFgpF9eOJGSDHGwLIhvMb4=
Subject key identifier: B5:04:56:09:A6:4D:F3:E9:3F:11:4B:3E:70:62:0E:BB:3B:13:6D:80
Certificate issuer: /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial: 11FECD6738E9CD5193DA13902DAE465BCE34AF91
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time: Mon 05 Jun 2023 18:33:00 +0000
ROA not before: Mon 05 Jun 2023 18:28:00 +0000
ROA not after: Mon 03 Jun 2024 18:33:00 +0000
asID: 399970
IP address blocks: 149.112.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fe:cd:67:38:e9:cd:51:93:da:13:90:2d:ae:46:5b:ce:34:af:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Validity
Not Before: Jun 5 18:28:00 2023 GMT
Not After : Jun 3 18:33:00 2024 GMT
Subject: CN=B5045609A64DF3E93F114B3E70620EBB3B136D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:35:69:ab:7f:8d:6a:1f:6f:97:fa:4d:05:
4f:d5:ce:14:5d:8a:3f:e0:4d:44:41:43:18:1b:b8:
54:3a:ba:a4:e9:39:37:ab:aa:33:a0:eb:6d:8d:15:
13:f6:52:a9:c7:c1:0f:56:92:d9:56:6c:3b:8f:bd:
0f:5f:cf:58:07:3e:2d:9b:4c:ac:37:05:7d:ea:8a:
40:0f:b7:79:00:13:09:44:ae:31:3a:87:63:7d:49:
7f:47:ac:f6:bc:0d:73:e1:3e:ba:53:58:20:e6:ac:
f1:1a:91:8f:1d:f1:72:54:4b:d0:56:85:22:99:3c:
08:42:48:a4:38:de:d8:05:f3:b8:be:ba:0e:0b:3a:
31:04:d6:17:4f:28:0c:49:63:55:7a:79:2c:f9:10:
76:54:f2:5e:0e:3c:9a:d5:63:7e:08:b5:f0:20:3d:
a6:3d:a1:c4:c4:6e:f9:b9:85:90:b4:63:fb:8f:6e:
36:79:c4:ba:2f:ee:f7:e1:7c:ca:b5:30:0a:9b:ec:
f0:81:2a:4a:99:84:16:ca:2a:14:08:20:24:0a:86:
42:0c:fb:c0:24:84:d5:41:98:06:cb:b2:92:70:e6:
f8:cb:a6:c7:58:b5:ae:81:67:5c:0b:3b:4c:58:61:
d1:46:56:e8:53:2b:13:ce:29:ab:a2:59:f0:37:90:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:56:09:A6:4D:F3:E9:3F:11:4B:3E:70:62:0E:BB:3B:13:6D:80
X509v3 Authority Key Identifier:
keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/23
Signature Algorithm: sha256WithRSAEncryption
10:ab:c5:a5:3d:72:ee:80:08:49:35:21:2b:75:d8:dc:1e:09:
dc:f0:3d:c9:77:64:32:6e:12:e0:da:74:a4:e8:5f:fe:d8:b2:
fb:bd:ab:78:9b:1c:1d:c4:a1:24:28:a6:38:4a:f2:f6:ff:46:
26:70:ef:5b:c0:67:09:6e:9c:31:eb:b7:fe:54:ff:f2:0f:03:
af:2f:68:eb:0b:55:df:1b:22:6d:59:a7:cc:50:57:7d:fe:c2:
85:f7:33:3e:45:52:2f:14:aa:cd:dd:ae:76:d8:d8:c5:e0:c2:
3c:85:ea:b3:44:ee:62:e0:cf:02:3e:30:a1:8c:85:3f:ee:5f:
ed:97:a3:71:8f:b6:07:00:61:dc:6c:8f:82:ee:2e:55:a7:04:
fc:58:ca:4b:86:3a:25:bd:b1:7a:24:01:f7:73:4f:fd:23:e8:
87:36:eb:9b:f4:13:f2:79:b5:22:be:35:78:22:9f:30:7f:b9:
3e:56:43:78:01:e2:46:66:81:ff:ca:05:73:42:71:55:e2:db:
04:d2:39:6e:b0:08:f7:32:ee:9d:ef:ac:ec:8e:5e:d5:a1:92:
df:d1:31:9f:94:31:ae:dd:ab:0b:a0:21:5e:ea:9a:e9:13:fb:
59:40:c6:c8:2a:30:e5:f5:02:9e:68:f8:05:a9:b3:7b:72:87:
2e:bb:0e:8d
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUEf7NZzjpzVGT2hOQLa5GW840r5EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjI1NzAzMjhlZWNhODgwZGJmYjIxMDMy
YjMzNzAwOWI5NmEyMWFlZGEwHhcNMjMwNjA1MTgyODAwWhcNMjQwNjAzMTgzMzAw
WjAzMTEwLwYDVQQDEyhCNTA0NTYwOUE2NERGM0U5M0YxMTRCM0U3MDYyMEVCQjNC
MTM2RDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwss1aat/jWof
b5f6TQVP1c4UXYo/4E1EQUMYG7hUOrqk6Tk3q6ozoOttjRUT9lKpx8EPVpLZVmw7
j70PX89YBz4tm0ysNwV96opAD7d5ABMJRK4xOodjfUl/R6z2vA1z4T66U1gg5qzx
GpGPHfFyVEvQVoUimTwIQkikON7YBfO4vroOCzoxBNYXTygMSWNVenks+RB2VPJe
Djya1WN+CLXwID2mPaHExG75uYWQtGP7j242ecS6L+734XzKtTAKm+zwgSpKmYQW
yioUCCAkCoZCDPvAJITVQZgGy7KScOb4y6bHWLWugWdcCztMWGHRRlboUysTzimr
olnwN5DN5wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLUEVgmmTfPpPxFLPnBiDrs7
E22AMB8GA1UdIwQYMBaAFGctZHmVwD2+e0ynxNdI2hNPB3AmMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg1NDMzYWMwMTg4OGNjYjdlMTUzMTI2LzAv
NjcyRDY0Nzk5NUMwM0RCRTdCNENBN0M0RDc0OERBMTM0RjA3NzAyNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2Y2ExODZmLTdmOWItNDdhOS1iNjIxLTNkNTgzZWU4NDk4Yy9mY2Iy
MGY1OTY2MjU3MDMyOGVlY2E4ODBkYmZiMjEwMzJiMzM3MDA5Yjk2YTIxYWVkYS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4NTQzM2FjMDE4ODhj
Y2I3ZTE1MzEyNi8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzIyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGVcJgwDQYJKoZIhvcN
AQELBQADggEBABCrxaU9cu6ACEk1ISt12NweCdzwPcl3ZDJuEuDadKToX/7Ysvu9
q3ibHB3EoSQopjhK8vb/RiZw71vAZwlunDHrt/5U//IPA68vaOsLVd8bIm1Zp8xQ
V33+woX3Mz5FUi8Uqs3drnbY2MXgwjyF6rNE7mLgzwI+MKGMhT/uX+2Xo3GPtgcA
Ydxsj4LuLlWnBPxYykuGOiW9sXokAfdzT/0j6Ic265v0E/J5tSK+NXginzB/uT5W
Q3gB4kZmgf/KBXNCcVXi2wTSOW6wCPcy7p3vrOyOXtWhkt/RMZ+UMa7dqwugIV7q
mukT+1lAxsgqMOX1Ap5o+AWps3tyhy67Do0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org