Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: LoSWWUcnYMe0yBTYm1R0Jscb6tod8FVRqAkaCTmzoYo=
Subject key identifier: 9F:A2:5D:D6:00:08:BF:1A:08:BD:5E:79:90:39:EB:91:96:8D:59:3E
Certificate issuer: /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial: 1FA46991424A2333A90490572005472527333CC9
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time: Wed 11 May 2022 17:43:29 +0000
ROA not before: Wed 11 May 2022 17:38:29 +0000
ROA not after: Wed 10 May 2023 17:43:29 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a4:69:91:42:4a:23:33:a9:04:90:57:20:05:47:25:27:33:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Validity
Not Before: May 11 17:38:29 2022 GMT
Not After : May 10 17:43:29 2023 GMT
Subject: CN=9FA25DD60008BF1A08BD5E799039EB91968D593E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:42:73:fe:cc:ad:1e:68:87:a8:d7:6f:df:
82:f4:06:81:9f:cb:d8:21:39:b1:be:72:81:7c:31:
2c:67:21:ac:16:3e:d6:2e:b9:72:1c:73:65:d2:79:
1d:b6:de:11:e7:f3:11:fd:fc:d4:a7:af:e3:5b:e7:
c0:6b:3f:1c:6f:b3:8a:68:c3:80:79:fd:84:7d:f4:
9b:80:0d:a6:3f:7e:1a:12:71:37:38:87:8d:31:fc:
b5:e4:4c:da:e2:8e:85:5e:d9:ed:eb:03:d4:8d:b2:
a7:8b:d1:4f:c4:98:a4:51:48:d2:9a:01:37:d3:14:
9e:2d:8b:c6:60:9f:ce:90:b1:7f:77:9f:c4:c7:d0:
4f:e5:7f:8c:3c:71:ec:29:30:3b:bd:51:6a:94:79:
64:00:5f:06:91:e9:4a:0a:f3:da:96:34:0a:49:ed:
c5:6a:cd:f8:c0:b7:97:61:d9:11:23:72:87:7d:07:
43:ba:be:59:9e:d1:6c:4c:17:37:71:6e:44:8c:6e:
b2:e6:45:b4:2b:35:a6:3c:65:e2:f2:0e:0a:be:db:
ef:e3:9e:ab:4f:a0:a8:8a:b6:70:79:ab:25:ed:9c:
04:f7:00:d9:d3:b3:68:9c:2a:1e:a3:9a:76:40:e2:
eb:2b:f3:9d:a2:15:f9:ed:b2:f0:ab:8b:82:d1:84:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A2:5D:D6:00:08:BF:1A:08:BD:5E:79:90:39:EB:91:96:8D:59:3E
X509v3 Authority Key Identifier:
keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ee:36:e8:3e:38:db:4e:5f:ca:80:fe:45:7b:81:86:2b:98:
90:e3:49:91:dd:3f:7f:03:c1:14:04:a4:8d:b7:05:9e:0e:da:
d6:b3:14:79:a4:e4:52:18:58:d3:96:81:81:fa:c4:4c:7c:d2:
00:4c:16:bd:3c:91:61:96:0d:6c:57:1d:f2:51:77:90:52:b3:
da:a6:8a:0f:fd:69:32:ba:e0:2f:5a:08:26:1b:6d:bc:c3:ca:
c7:00:ed:17:d2:59:15:d9:21:3d:aa:b1:f2:be:14:79:eb:b1:
e3:6c:71:4d:91:e4:c2:d6:8a:3b:07:b7:c1:b2:3f:53:7f:51:
df:32:5e:ee:f7:de:1a:7e:78:02:90:1b:9f:e9:b2:ef:71:e8:
ed:ae:1f:99:36:97:38:1d:65:48:18:c1:ba:a7:52:55:18:3a:
88:72:be:44:4a:d6:e2:a7:e8:c0:5e:9b:4d:83:4a:27:2a:2e:
e2:76:5f:4c:6c:93:72:af:4e:f8:40:e1:41:9b:a6:db:b0:32:
55:62:3c:79:b6:9b:e4:2f:f2:e9:e7:d8:b4:18:b6:64:03:0a:
95:d4:b7:fa:9e:7a:18:bd:ba:eb:9b:e1:20:78:c6:bd:c0:00:
ee:9a:4b:a3:8f:6a:ea:c0:c9:66:8c:d7:20:14:48:08:bf:f2:
ba:c4:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org