Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: BzG1WTVbMUgtN0tpexINGn8OHtt9YsJw1zYKTFTJcYU=
Subject key identifier: 56:14:C7:DF:F8:A4:E2:F6:88:FA:60:5A:00:39:9A:7F:D8:6C:3A:80
Certificate issuer: /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial: 12E4267DE83211AAB64F13076B1360AE5E6922CE
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time: Mon 05 Jun 2023 18:32:47 +0000
ROA not before: Mon 05 Jun 2023 18:27:47 +0000
ROA not after: Mon 03 Jun 2024 18:32:47 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e4:26:7d:e8:32:11:aa:b6:4f:13:07:6b:13:60:ae:5e:69:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Validity
Not Before: Jun 5 18:27:47 2023 GMT
Not After : Jun 3 18:32:47 2024 GMT
Subject: CN=5614C7DFF8A4E2F688FA605A00399A7FD86C3A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:d1:3e:7e:b7:29:e0:2b:fc:a0:a1:70:98:
78:bf:cb:39:71:df:0a:07:68:90:a1:ae:cc:d9:23:
70:80:09:b2:6e:2c:b3:a2:6b:f6:45:57:b6:95:28:
40:5c:15:f1:6a:9d:74:ca:db:ac:3d:d8:b4:7d:ba:
a2:20:39:b9:2a:c7:23:af:03:de:8c:f1:5b:d4:a6:
4c:9c:3a:ac:33:77:56:6d:60:7e:77:51:d4:dd:ba:
57:76:a7:3e:c6:a4:c3:dd:72:13:fa:23:9b:e9:e9:
18:9d:08:99:2f:b2:83:c7:a9:c8:af:d6:77:57:b4:
d5:bc:c6:c0:e7:32:64:ba:f2:38:17:0f:de:88:ed:
d6:93:a6:42:2f:57:6f:1c:57:68:85:e9:10:82:fe:
bb:9d:3c:a7:0e:cd:c1:d8:d5:13:81:fe:f5:25:29:
c3:02:60:49:83:b9:44:2e:b0:c4:06:b5:4c:fc:78:
77:cb:f8:ec:3d:c0:67:2a:b2:1b:51:ce:9c:29:a7:
44:0a:00:c6:8c:56:82:c9:0f:76:08:10:aa:e7:06:
1e:df:a8:74:06:f0:e5:e4:7f:2a:49:27:b2:38:14:
a9:38:86:7c:22:b7:24:49:9f:e1:ff:d8:e7:7f:44:
83:92:e5:17:75:de:58:80:de:08:94:14:10:4f:0d:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:C7:DF:F8:A4:E2:F6:88:FA:60:5A:00:39:9A:7F:D8:6C:3A:80
X509v3 Authority Key Identifier:
keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:61:73:57:cf:8b:38:f0:89:d9:f7:5d:82:b8:cb:51:71:df:
3b:7f:71:17:b2:15:ad:ea:33:7b:88:f1:8e:00:2a:c3:37:d7:
63:72:aa:aa:3c:49:29:4e:5d:d6:38:9b:df:ad:34:60:79:c0:
40:00:78:06:7c:52:97:db:53:9a:3c:bf:2d:26:11:6e:65:ae:
10:31:ac:9e:23:b2:d5:35:bb:73:67:79:85:17:e3:7c:70:ab:
00:6b:68:2c:18:23:65:10:19:c1:ba:8b:2a:26:0d:02:8c:67:
2f:8e:e0:f0:f9:41:66:73:d3:49:33:db:b1:8f:fc:1e:d0:fe:
d0:e6:8e:d8:0b:5c:85:30:a6:c6:c4:ec:f7:05:d6:19:b2:42:
47:40:93:cd:20:d6:0f:7c:7d:e7:b0:bb:54:d9:c5:e3:ce:53:
17:cb:47:ee:2b:36:3b:db:ec:89:95:1b:dc:b0:25:2d:8f:e9:
f1:a5:81:a1:f8:44:f3:15:c6:32:4b:41:25:de:ca:d9:2e:7d:
47:ed:71:bd:40:39:30:2d:e4:2f:bd:80:bf:7a:88:04:cf:c7:
b5:a3:17:23:7c:87:7a:c6:54:68:28:5b:47:75:9e:42:1d:36:
3d:77:82:7d:28:a9:ce:f8:10:7f:80:83:ff:5c:8f:6a:8f:a4:
80:86:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org