Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: TWjB5m/8c/NRUW2itktuHNMRIDQiAd1lFYVsOFj1CJI=
Subject key identifier: FA:D9:D4:3B:C3:94:2B:D6:18:BF:79:D0:FB:DB:85:00:EA:C2:D0:BB
Certificate issuer: /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial: 455BB01ACA8F0DC0DFFE75331CB00CBF436522
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:14:31 +0000
ROA not before: Fri 02 Aug 2024 20:09:31 +0000
ROA not after: Fri 01 Aug 2025 20:14:31 +0000
asID: 399970
IP address blocks: 149.112.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5b:b0:1a:ca:8f:0d:c0:df:fe:75:33:1c:b0:0c:bf:43:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Validity
Not Before: Aug 2 20:09:31 2024 GMT
Not After : Aug 1 20:14:31 2025 GMT
Subject: CN=FAD9D43BC3942BD618BF79D0FBDB8500EAC2D0BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:7e:92:1c:7b:a3:16:ca:04:5a:fe:c3:0f:
4d:d8:72:82:56:d1:2a:8e:a9:1d:c0:b7:f9:be:da:
42:fc:02:41:4d:10:be:b9:4a:f0:3f:ee:e0:72:45:
1c:a0:b8:9c:3b:48:50:0b:c4:b1:ca:d7:9d:f7:a5:
5e:7c:33:e5:ba:9e:47:1a:ab:25:ba:4b:ed:34:1c:
d0:79:00:e0:75:de:b0:bd:69:00:2d:e0:39:b8:44:
8a:bd:0b:cc:de:3b:f8:4b:4c:74:fc:2d:71:82:f2:
c1:8a:ea:93:36:7f:30:7a:71:e0:c4:f1:8f:55:0c:
ed:29:65:81:25:39:5d:ca:60:fe:ad:89:4b:ff:3b:
a3:74:90:8e:ad:94:a4:9a:c5:0c:d2:b8:9c:52:1d:
37:9f:88:7e:fe:b5:f4:5b:ff:05:b1:cc:c7:d4:5c:
b4:35:15:e2:e8:34:c6:2b:2c:88:c2:0c:ef:59:52:
ce:cc:17:50:bb:c4:72:71:ca:32:ec:7b:ae:51:bc:
3d:27:69:dc:9c:d5:52:5f:80:82:b2:77:54:c2:2c:
b4:cb:03:dc:8b:5c:ab:6b:9a:33:bd:a5:be:d9:07:
a1:61:a2:22:ac:94:0b:54:02:c4:13:c6:a9:13:80:
ed:57:d1:4e:49:e5:64:a4:5f:e4:3c:88:50:c8:8f:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:D4:3B:C3:94:2B:D6:18:BF:79:D0:FB:DB:85:00:EA:C2:D0:BB
X509v3 Authority Key Identifier:
keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.155.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9f:ee:33:a8:82:cd:f6:b9:dd:c8:8a:61:06:ea:c5:f7:2d:
47:74:1b:e0:1b:d7:4f:c9:c2:12:9c:24:83:08:c4:4f:a6:e6:
53:ce:0f:c4:51:8a:2d:ac:ab:12:fd:63:f7:d9:aa:73:de:92:
07:d7:78:29:e7:9a:0a:02:e9:47:52:77:75:8d:53:5c:0f:02:
6d:1a:fb:f0:16:13:ca:c9:34:a0:ab:fe:da:19:c3:28:e1:cb:
f9:9b:71:97:ab:26:ff:a6:d3:a0:dd:84:bc:b7:72:58:de:61:
f3:a3:2b:2e:20:97:92:54:da:c8:83:ac:3b:11:e7:39:f2:fd:
c3:b9:62:71:03:8f:97:ce:19:68:e1:2f:f2:78:21:dd:06:92:
16:68:67:78:bf:c1:c6:fe:bc:e0:6f:d6:b6:3a:c6:34:bb:b5:
2d:9b:68:37:40:b7:7c:9e:f2:e7:ec:29:3d:85:58:1e:7f:7d:
64:3f:a9:ec:be:28:b7:bd:16:8f:92:21:07:70:06:b3:1e:4e:
6a:ee:fc:c2:45:82:e4:4c:b0:2e:6c:0c:20:b1:e9:31:c6:17:
64:ee:94:64:9b:07:23:02:03:22:df:3c:b7:b6:e6:d5:e3:fe:
81:46:b8:2b:0c:ed:56:d6:8e:f8:ef:24:63:b2:50:d4:ae:9c:
21:9d:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org