Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: 9iNpEpaVKGbOsbLkaK4QEgOmNbMvLrMGJ+xxokCchlc=
Subject key identifier: 3C:D0:32:9A:5F:1E:F5:7C:BB:29:28:F6:5A:D3:A8:2D:25:AE:05:18
Certificate issuer: /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial: 5C7B688C4B612DDEF3FCE929C1D7D88A601B252D
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:09:58 +0000
ROA not before: Fri 02 Aug 2024 20:04:58 +0000
ROA not after: Fri 01 Aug 2025 20:09:58 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7b:68:8c:4b:61:2d:de:f3:fc:e9:29:c1:d7:d8:8a:60:1b:25:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Validity
Not Before: Aug 2 20:04:58 2024 GMT
Not After : Aug 1 20:09:58 2025 GMT
Subject: CN=3CD0329A5F1EF57CBB2928F65AD3A82D25AE0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:97:8e:ae:58:b7:56:47:61:a0:82:97:6a:
86:86:e8:fc:d8:cb:e7:0f:08:75:70:9c:34:d6:b0:
ff:12:a8:90:05:a0:77:24:26:ae:69:56:2b:87:c7:
42:89:be:af:69:29:fa:bc:3a:73:6a:de:07:3c:e1:
2e:97:d0:da:07:c6:7c:0b:0a:4e:0a:59:16:66:40:
f6:de:b1:be:04:f8:85:4d:a7:30:cb:f4:52:31:1f:
11:9e:0b:25:1c:68:94:76:b5:20:44:82:7f:9f:2c:
ff:99:7a:42:23:00:5b:fe:9b:cb:b5:ef:3b:4b:bd:
cc:ce:7c:4e:d9:2c:77:cf:35:fe:0b:83:34:34:25:
da:c8:b8:68:16:d8:c0:2e:32:6a:b9:40:17:06:6a:
46:9b:6d:ea:67:8e:e0:36:b4:37:07:20:d8:94:c3:
4b:4b:05:75:a3:3c:0a:57:c0:1f:8a:30:1f:3e:12:
0b:a9:47:3d:45:cb:34:79:f2:bf:bf:7d:23:c5:05:
d6:e3:29:e9:ca:15:32:e7:c6:3f:0c:56:c7:e9:00:
2e:eb:04:15:c2:26:52:63:b5:f2:0d:ce:71:5e:c2:
e0:bc:9a:ff:36:98:2d:35:31:b0:29:0f:29:27:16:
36:4e:bc:2e:b4:08:d2:30:83:5a:3f:9a:1e:c1:f8:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D0:32:9A:5F:1E:F5:7C:BB:29:28:F6:5A:D3:A8:2D:25:AE:05:18
X509v3 Authority Key Identifier:
keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0b:49:13:ad:24:2f:02:3f:a6:67:78:e9:de:f5:e7:41:b4:
7b:2e:15:d8:0f:a5:58:01:90:0e:ad:5f:59:8c:3b:64:f8:6c:
df:13:ac:d5:3a:c7:e6:12:22:6c:3f:85:09:9a:14:12:7d:11:
71:3d:fd:ba:d5:b6:3d:48:48:ee:e7:14:ad:c7:83:1b:95:49:
74:50:c8:a0:2d:9f:6c:ad:47:b3:dd:66:b6:e7:eb:b0:ae:8a:
7b:0f:85:43:a0:bc:8d:37:62:7e:a4:4f:e6:17:7d:51:a4:5e:
10:14:81:71:25:64:fa:d9:c4:47:71:91:3b:76:85:04:d9:92:
fd:8f:10:9a:8b:50:01:c2:34:53:06:d4:e9:68:04:0b:55:cb:
8a:93:80:a4:93:be:96:c3:04:66:3f:ce:8d:ba:49:78:ee:c4:
50:f4:72:ed:98:b9:f4:00:6b:74:55:4f:94:7f:91:3b:5c:41:
5e:6a:e6:54:61:5b:f5:18:be:a1:93:c0:1b:26:5e:f4:67:15:
78:4f:01:a4:ba:34:a4:ae:a7:71:93:6f:80:c1:ff:86:bb:ce:
c2:6d:93:a0:fa:50:67:9e:50:d5:40:ae:b2:f2:93:89:9e:c8:
0a:9a:74:b0:b7:b7:be:7d:7a:a9:4e:6f:aa:c1:1f:93:d8:45:
9f:8b:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org