Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: +rZ8OA43UgoXWToFy/4Th5d0jMArkNhwMKFfqMUpwzM=
Subject key identifier: 5A:48:AA:16:A2:EA:7E:B2:A2:77:00:8A:6E:E6:B5:02:38:E7:C0:48
Certificate issuer: /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial: 756D2DF2D7B7F8DA88249346D16150D1FD5945F6
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time: Mon 05 Jun 2023 18:32:51 +0000
ROA not before: Mon 05 Jun 2023 18:27:51 +0000
ROA not after: Mon 03 Jun 2024 18:32:51 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6d:2d:f2:d7:b7:f8:da:88:24:93:46:d1:61:50:d1:fd:59:45:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Validity
Not Before: Jun 5 18:27:51 2023 GMT
Not After : Jun 3 18:32:51 2024 GMT
Subject: CN=5A48AA16A2EA7EB2A277008A6EE6B50238E7C048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:ad:d0:b4:e3:13:72:78:ad:ff:7e:32:99:
70:41:97:dc:cd:f5:cf:08:d9:77:87:26:25:a6:0d:
e9:54:4c:97:a7:8a:59:8b:de:71:ea:94:e9:56:7b:
8d:42:b3:f5:50:38:01:f0:b4:11:d0:96:45:41:45:
1f:c1:31:7f:9b:d1:4a:ba:e8:d0:d2:4c:63:15:46:
d9:a9:c2:3b:3e:5f:d1:91:47:4e:6c:e7:2b:84:31:
2e:57:b3:9d:1c:9e:d3:8b:88:23:de:4a:54:70:dc:
95:36:b4:89:44:76:b0:3a:33:cd:f5:0f:00:c7:b9:
6a:e2:02:58:c1:c3:6b:1b:eb:b3:1c:fc:e7:c6:e6:
dd:a3:6f:a9:ed:67:c4:34:98:93:f0:96:2b:04:10:
a4:e9:02:01:44:81:43:d7:99:5d:65:82:5c:7f:97:
c5:e3:aa:d8:2f:18:ac:f9:d4:30:4a:e2:86:74:8c:
78:aa:c4:67:c3:0b:e6:52:da:a1:0b:76:ff:c3:76:
33:a2:ee:73:f1:f5:4e:81:39:0e:24:18:09:d4:cb:
be:25:57:5d:f0:73:54:00:0f:eb:b5:92:37:6c:cf:
14:ea:88:b8:05:a2:e4:5a:33:c0:57:86:b1:70:96:
17:9a:50:2b:7b:f4:61:a6:15:90:9a:03:e6:25:c0:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:AA:16:A2:EA:7E:B2:A2:77:00:8A:6E:E6:B5:02:38:E7:C0:48
X509v3 Authority Key Identifier:
keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:08:11:c0:5b:db:90:d2:25:07:2c:8b:0d:f7:fe:f9:7f:61:
c6:09:0e:0a:d7:e3:21:a4:08:4e:65:3f:38:93:c7:62:5c:9c:
4a:8b:9d:90:fc:46:de:91:2b:bb:2e:19:82:c9:76:54:99:2d:
b1:65:58:0a:fe:1f:cc:2e:bf:5d:f3:ec:68:cd:68:9e:82:3e:
91:2d:31:9d:99:c3:9f:7e:0e:32:3a:1a:ca:4f:be:0b:ba:35:
bb:1e:38:c9:6e:92:16:37:d0:cb:09:de:d3:9b:f1:cc:64:80:
30:a5:b7:91:87:9b:27:4b:b8:5f:4a:c7:66:f4:63:cb:34:73:
18:b3:49:ad:a8:c2:0b:24:24:84:1a:e9:0e:d9:c0:1e:af:de:
ba:2c:43:8c:44:9f:5d:48:35:61:66:3d:95:05:12:53:89:d7:
48:7e:5d:30:bb:4f:b2:71:6f:ae:f2:51:c5:a4:cf:24:b0:ef:
58:f0:2e:8a:64:36:9c:d0:e9:a7:5e:e6:55:95:8c:d2:44:20:
1d:dc:af:60:ca:df:d0:95:7f:48:65:96:18:d6:4b:38:df:1a:
0b:0f:1c:23:d5:03:b6:63:94:dc:95:20:e7:65:3f:11:24:4c:
78:2e:ea:67:5e:53:d6:a9:3e:8a:56:c4:23:ed:5b:7c:08:b8:
fc:85:ff:df
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUdW0t8te3+NqIJJNG0WFQ0f1ZRfYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjI1NzAzMjhlZWNhODgwZGJmYjIxMDMy
YjMzNzAwOWI5NmEyMWFlZGEwHhcNMjMwNjA1MTgyNzUxWhcNMjQwNjAzMTgzMjUx
WjAzMTEwLwYDVQQDEyg1QTQ4QUExNkEyRUE3RUIyQTI3NzAwOEE2RUU2QjUwMjM4
RTdDMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNut0LTjE3J4
rf9+MplwQZfczfXPCNl3hyYlpg3pVEyXp4pZi95x6pTpVnuNQrP1UDgB8LQR0JZF
QUUfwTF/m9FKuujQ0kxjFUbZqcI7Pl/RkUdObOcrhDEuV7OdHJ7Ti4gj3kpUcNyV
NrSJRHawOjPN9Q8Ax7lq4gJYwcNrG+uzHPznxubdo2+p7WfENJiT8JYrBBCk6QIB
RIFD15ldZYJcf5fF46rYLxis+dQwSuKGdIx4qsRnwwvmUtqhC3b/w3Yzou5z8fVO
gTkOJBgJ1Mu+JVdd8HNUAA/rtZI3bM8U6oi4BaLkWjPAV4axcJYXmlAre/RhphWQ
mgPmJcCp4wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFpIqhai6n6yoncAim7mtQI4
58BIMB8GA1UdIwQYMBaAFGctZHmVwD2+e0ynxNdI2hNPB3AmMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg1NDMzYWMwMTg4OGNjYjdlMTUzMTI2LzAv
NjcyRDY0Nzk5NUMwM0RCRTdCNENBN0M0RDc0OERBMTM0RjA3NzAyNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2Y2ExODZmLTdmOWItNDdhOS1iNjIxLTNkNTgzZWU4NDk4Yy9mY2Iy
MGY1OTY2MjU3MDMyOGVlY2E4ODBkYmZiMjEwMzJiMzM3MDA5Yjk2YTIxYWVkYS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4NTQzM2FjMDE4ODhj
Y2I3ZTE1MzEyNi8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACVcJgwDQYJKoZIhvcN
AQELBQADggEBAEsIEcBb25DSJQcsiw33/vl/YcYJDgrX4yGkCE5lPziTx2JcnEqL
nZD8Rt6RK7suGYLJdlSZLbFlWAr+H8wuv13z7GjNaJ6CPpEtMZ2Zw59+DjI6GspP
vgu6NbseOMlukhY30MsJ3tOb8cxkgDClt5GHmydLuF9Kx2b0Y8s0cxizSa2owgsk
JIQa6Q7ZwB6v3rosQ4xEn11INWFmPZUFElOJ10h+XTC7T7Jxb67yUcWkzySw71jw
LopkNpzQ6ade5lWVjNJEIB3cr2DK39CVf0hllhjWSzjfGgsPHCPVA7ZjlNyVIOdl
PxEkTHgu6mdeU9apPopWxCPtW3wIuPyF/98=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org