Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: uQ2qLfPBoUzlG0JHwcRDhn2499pw+dZUiGORZ2HtDCE=
Subject key identifier: 6E:E2:FD:A4:B8:E8:C8:5B:7E:F9:AF:66:9B:C9:E2:F4:70:50:96:09
Certificate issuer: /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial: 174C136FC6B5F3D444E39F5835AAC4B837861F6F
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:09:57 +0000
ROA not before: Fri 02 Aug 2024 20:04:57 +0000
ROA not after: Fri 01 Aug 2025 20:09:57 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4c:13:6f:c6:b5:f3:d4:44:e3:9f:58:35:aa:c4:b8:37:86:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Validity
Not Before: Aug 2 20:04:57 2024 GMT
Not After : Aug 1 20:09:57 2025 GMT
Subject: CN=6EE2FDA4B8E8C85B7EF9AF669BC9E2F470509609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:f3:d9:18:67:71:ef:54:44:6c:34:80:57:
8f:aa:d5:a7:41:a4:a8:53:87:73:bc:82:f3:37:a9:
7b:04:89:0d:fa:24:0f:51:d3:79:ea:ec:85:0c:b9:
e6:72:ee:d9:fc:fa:4d:c2:70:b9:9c:0a:37:5e:38:
80:7d:75:73:15:5d:a4:69:03:a2:5e:e6:ed:06:29:
f6:1f:4e:a8:e2:0d:21:cf:f1:32:df:78:a0:30:95:
c1:7b:ff:24:59:df:71:a4:c2:1f:b5:92:6d:5b:0e:
a8:27:79:ef:85:a2:85:eb:4d:76:f7:a7:a3:10:6c:
81:7e:64:d5:08:9f:57:ca:4a:27:93:7b:44:f9:8a:
95:91:24:a0:2f:78:25:16:e7:53:3d:9f:b5:0a:24:
aa:1b:9b:1d:2c:46:72:d5:61:33:73:3a:1e:f1:bd:
5d:3e:27:42:6a:d0:3f:e3:02:15:f4:1b:8c:19:dd:
c5:3f:3a:97:8d:ab:6f:b7:01:e5:81:f5:76:b7:3f:
a9:5f:24:3d:2e:10:6a:23:f3:3f:b6:e0:a8:c3:82:
6f:92:fb:2a:1e:a2:92:5c:da:09:94:23:11:6a:79:
3c:d2:c7:82:af:a6:b2:32:90:9d:36:65:5c:2b:46:
2c:be:a8:58:76:3e:8e:6c:69:72:e3:21:a6:5a:6d:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:FD:A4:B8:E8:C8:5B:7E:F9:AF:66:9B:C9:E2:F4:70:50:96:09
X509v3 Authority Key Identifier:
keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d8:9d:54:14:e0:db:69:37:a1:ec:d7:a6:f8:36:6e:5a:05:
6c:7c:38:2c:c6:18:74:71:b2:1e:d9:c2:69:48:c0:ea:d8:31:
45:3a:b4:ac:33:10:8d:e4:3a:72:0d:ec:cc:25:69:cb:ad:57:
90:eb:d4:92:14:1d:14:9a:d7:ee:6b:84:3d:12:83:3f:86:9f:
d1:0a:8f:5d:cc:08:62:2f:4a:5a:bf:33:17:33:0e:14:ce:77:
84:8d:17:4e:32:48:dc:6b:34:81:9a:75:a3:df:bc:41:b4:2d:
be:17:97:2b:35:e5:fb:61:7f:83:e1:4d:cc:c4:5f:0f:a8:2d:
54:a3:79:9c:44:bb:82:65:66:87:88:c2:fc:ac:d7:93:84:d8:
8d:dd:63:44:af:bb:ed:c2:5b:da:06:cc:35:97:b5:f4:07:ba:
36:87:55:b5:7b:6b:bb:28:e8:2f:33:c4:ac:c4:10:0a:ef:de:
17:ab:a2:c7:ca:3c:39:12:dc:91:6e:9b:a2:ee:cd:fa:9d:b8:
47:55:64:33:0a:c4:7b:c4:ea:7d:af:17:d8:84:d2:9b:17:97:
63:d2:4e:cc:ab:72:18:9b:97:76:86:aa:e6:1e:8c:98:2f:78:
24:4f:17:53:4a:51:65:1a:72:b4:7a:52:06:a4:9c:b6:18:24:
25:d5:c0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org