Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: CE6ZXrohrGAPPkRZc2ByogF1HxOlohm2p7bvZWTNjbk=
Subject key identifier: 3A:F4:A1:82:E3:8E:18:68:16:4E:FF:E9:B3:51:CB:5C:73:3B:BA:56
Certificate issuer: /CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
Certificate serial: 4B2836337E36CDB6F5227AC3A28ABA1B70A28B46
Authority key identifier: 7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Mon 23 May 2022 15:16:55 +0000
ROA not before: Mon 23 May 2022 15:11:55 +0000
ROA not after: Mon 22 May 2023 15:16:55 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:28:36:33:7e:36:cd:b6:f5:22:7a:c3:a2:8a:ba:1b:70:a2:8b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
Validity
Not Before: May 23 15:11:55 2022 GMT
Not After : May 22 15:16:55 2023 GMT
Subject: CN=3AF4A182E38E1868164EFFE9B351CB5C733BBA56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d1:98:25:74:7f:52:e2:3d:e8:be:1a:28:d3:
21:6e:16:a0:07:c9:10:c2:a9:64:99:cd:cc:b0:c2:
9b:8b:85:a5:37:74:72:1b:f2:bc:15:e2:73:46:41:
80:62:0c:80:b8:03:81:45:98:62:47:31:73:ee:88:
d3:36:2b:24:56:45:09:c8:e0:5c:d5:a1:32:dc:bb:
72:16:e7:3f:cd:b5:18:86:b1:64:01:5d:e6:57:a1:
8d:a0:39:10:a0:0e:c5:40:93:3e:72:7a:0f:1e:9f:
2c:40:df:29:68:53:8d:10:1a:bf:70:08:a1:65:70:
e7:9e:67:0d:12:bb:32:56:f1:44:39:37:33:10:2c:
bf:a2:8a:f4:9d:5b:bc:d4:31:66:12:c5:1d:28:e0:
ba:e3:ac:6b:de:3b:13:75:ff:87:b0:42:06:38:c0:
3e:4c:78:ed:8b:ff:f7:e6:e5:67:98:5f:16:88:0d:
27:a9:6c:6a:f2:2c:5f:89:0f:98:0f:4a:12:5f:e1:
c3:c5:d4:89:0a:15:f2:12:b5:1d:79:f9:dc:7b:2d:
48:da:b6:0d:02:b8:26:78:b8:f8:ca:e6:b3:7c:ee:
de:f2:35:cb:19:95:bf:1d:0f:47:2e:c6:d8:ab:be:
20:45:f8:6e:a4:ba:ed:45:53:fc:61:be:d6:fe:85:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:A1:82:E3:8E:18:68:16:4E:FF:E9:B3:51:CB:5C:73:3B:BA:56
X509v3 Authority Key Identifier:
keyid:7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/7ABFEE56338664B923FD189ABEA84BABF692BB07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:6c:3f:5f:4c:6a:66:e3:67:09:16:9f:0b:ab:9b:31:33:75:
21:c8:9d:1c:6a:96:6b:8c:33:a8:26:12:96:3a:e2:60:87:70:
da:01:e0:3a:37:10:95:da:24:d5:f0:6d:ed:98:ff:73:ef:ed:
2f:8d:61:f1:79:1a:f9:96:dc:01:3f:b2:8b:01:58:69:96:02:
23:66:72:5d:80:3e:49:b3:2b:68:f5:b2:77:07:fb:e0:7a:ad:
1d:09:02:37:b5:f9:db:2e:e0:dc:85:e9:86:c5:30:98:97:c2:
98:a3:15:cc:74:f2:a3:83:d2:9d:97:3c:b3:9b:d4:7e:bf:7a:
a4:c4:65:e9:08:f5:b3:c7:c0:84:41:5d:ad:20:0c:8b:b9:78:
ac:16:0f:50:fa:08:bf:94:be:d9:46:79:0f:e7:e7:1e:41:67:
39:2c:b1:ef:11:47:de:4f:09:71:0f:08:71:03:17:c4:d4:5c:
0b:40:f9:7d:c8:23:f9:e4:2f:12:39:6e:9e:06:df:56:5a:8b:
ec:db:00:15:5b:f0:e1:2d:48:b2:9e:85:ca:1e:ce:32:4e:58:
9d:20:7f:04:70:29:3f:6b:e8:39:28:8b:c5:e7:df:69:0b:a8:
37:09:08:95:72:1d:34:63:b5:3a:63:db:6e:66:1f:02:c9:eb:
3b:a4:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org