Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135342e302f32332d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32332d3234203d3e20333939393730.roa (raw, json)
Hash identifier: fZy3TfLuyScTEhhX4+iYQvKIfvJuPKhAXHgQ2h0Uoxo=
Subject key identifier: 4A:77:A1:8C:F4:C7:72:57:EB:23:15:71:DB:FD:B7:8D:03:18:C7:CF
Certificate issuer: /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial: 38FE6D51B4D9094818F65D5CF9C1A6D6338E6F01
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135342e302f32332d3234203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:15:34 +0000
ROA not before: Fri 02 Aug 2024 20:10:34 +0000
ROA not after: Fri 01 Aug 2025 20:15:34 +0000
asID: 399970
IP address blocks: 149.112.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fe:6d:51:b4:d9:09:48:18:f6:5d:5c:f9:c1:a6:d6:33:8e:6f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Validity
Not Before: Aug 2 20:10:34 2024 GMT
Not After : Aug 1 20:15:34 2025 GMT
Subject: CN=4A77A18CF4C77257EB231571DBFDB78D0318C7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:2b:6c:ec:b8:cd:22:fa:f2:6e:7e:91:94:
32:82:f2:d4:8f:3c:02:40:93:04:27:2a:1c:63:48:
08:13:f0:16:37:da:f7:ed:55:3e:d8:dd:28:5e:3b:
0d:a1:5d:d3:6e:f8:cf:6f:76:dc:5d:5c:2a:60:43:
d3:6e:39:86:ce:c0:78:41:2b:f9:4a:40:d9:e3:dd:
eb:05:98:09:3a:85:5e:80:71:4e:4a:e6:6a:54:09:
ca:a0:7a:96:4d:22:26:cc:f6:0c:7d:b0:b5:30:62:
d6:50:48:4d:e3:ac:25:54:95:a1:43:58:0b:e7:0e:
a7:74:53:69:98:0b:5f:88:da:f5:be:3d:d8:b3:84:
e7:21:e1:d6:a6:f9:1d:88:f4:6f:ff:20:b3:81:34:
1d:98:2b:a9:f1:76:74:06:26:ca:cb:94:10:18:d0:
c7:2b:89:4b:11:74:36:fd:58:e1:0f:45:a6:44:1c:
77:92:d1:92:ac:7f:8e:f6:ff:94:1a:cd:f4:9b:8d:
68:b6:2f:01:45:79:e2:7e:04:24:b9:b5:4d:7c:4a:
5f:e5:ed:72:20:69:be:21:14:5f:da:96:73:8d:41:
c5:8e:3d:bd:b5:38:52:98:c3:85:91:54:40:1d:24:
a3:01:8b:08:30:10:7b:18:67:f9:16:74:71:3e:fc:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:A1:8C:F4:C7:72:57:EB:23:15:71:DB:FD:B7:8D:03:18:C7:CF
X509v3 Authority Key Identifier:
keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135342e302f32332d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/23
Signature Algorithm: sha256WithRSAEncryption
32:b7:0f:b6:ee:a1:15:c1:7a:68:0f:37:df:11:6c:b4:66:b4:
d9:09:b0:04:0b:3c:91:eb:97:ba:4b:db:3f:5a:55:ea:96:e4:
0a:89:de:d6:27:f3:a2:58:5c:99:b5:69:24:90:ce:4c:58:ac:
57:04:a5:40:f7:6b:4e:fd:a6:fe:ec:59:67:1f:9c:53:38:63:
a5:a7:de:f2:e1:db:6e:6c:91:7c:71:26:f3:6e:e5:87:71:c5:
dd:1c:d5:5e:c7:22:71:0c:d2:d6:a3:13:46:7b:f2:d2:24:73:
f6:6f:22:4e:56:04:ec:f0:9c:38:3a:f6:fb:41:5a:7c:90:dc:
c4:1a:a1:5b:78:53:ad:00:b0:81:fc:13:2a:e9:f5:56:99:72:
1f:ae:fa:c6:9b:49:34:b0:e1:f3:5d:f0:1d:3d:5e:f2:a1:cd:
5f:79:4f:17:e7:4f:0f:bd:0d:3d:e7:5e:06:a0:29:cb:6d:5e:
5e:c3:a0:ff:06:d8:d2:a8:5c:35:ab:12:60:aa:b5:c9:e8:f7:
6a:5a:e2:87:9e:e5:a2:41:73:32:be:c5:9e:78:d5:73:e3:83:
3f:74:87:b1:a9:94:72:70:e2:78:71:ec:35:d5:8d:fb:99:fb:
53:e6:5f:a1:a8:e7:13:81:d5:61:84:2f:5a:6b:a2:60:f3:d6:
89:91:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org