Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: kJpkBK7xnAtEylosuHgxz9nJmdVIsazEEjIcMBGRswM=
Subject key identifier: CD:D3:0C:D0:F2:FD:15:AB:78:E6:BD:65:BF:67:0E:61:68:A4:37:CB
Certificate issuer: /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial: 5529454D8CE1369875DB3880033C58A3E17E7401
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time: Wed 01 Jun 2022 18:50:42 +0000
ROA not before: Wed 01 Jun 2022 18:45:42 +0000
ROA not after: Wed 31 May 2023 18:50:42 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:29:45:4d:8c:e1:36:98:75:db:38:80:03:3c:58:a3:e1:7e:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Validity
Not Before: Jun 1 18:45:42 2022 GMT
Not After : May 31 18:50:42 2023 GMT
Subject: CN=CDD30CD0F2FD15AB78E6BD65BF670E6168A437CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:5a:09:eb:7c:89:0d:b3:8d:5c:81:8e:d8:
3c:6d:da:6b:03:d1:f8:d2:39:f2:f1:33:42:e7:61:
20:be:47:97:5a:4d:22:6c:4c:0d:a2:ac:fe:02:09:
9e:57:8f:f3:88:65:4c:c5:6d:45:a3:70:dc:30:ea:
a3:7d:6a:3d:3e:53:33:41:f4:e2:73:60:90:2c:d8:
10:3c:25:f1:ac:36:04:3e:c0:1f:b8:23:10:f9:d8:
05:46:71:69:00:e9:8f:49:15:52:bf:21:18:e2:97:
49:79:78:fd:aa:7e:eb:2a:11:30:15:9c:8a:e3:73:
51:6f:f1:ee:7a:b6:aa:5c:58:48:6f:44:f1:12:fc:
bb:e2:d2:05:bf:26:78:08:25:b4:5d:65:93:de:e4:
43:13:69:0f:30:9e:2f:f7:87:05:a0:4e:c0:73:85:
a6:f9:5e:6a:90:14:3d:a2:37:04:13:c8:63:f0:cb:
3c:a8:8e:9d:e6:be:3a:30:8f:2b:81:a3:a4:52:c2:
c8:36:93:6a:6b:5c:e6:ab:66:33:53:0f:c8:52:bc:
00:51:27:b7:7c:b8:ec:9a:82:7a:ca:56:d3:b7:f6:
d9:9c:bb:be:68:28:35:75:63:6c:f5:ee:be:f6:c8:
bf:d8:4f:b9:e0:7d:33:ba:29:bf:43:dd:80:2a:2a:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:0C:D0:F2:FD:15:AB:78:E6:BD:65:BF:67:0E:61:68:A4:37:CB
X509v3 Authority Key Identifier:
keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
97:85:c1:33:d7:1c:c8:f4:8a:a8:81:c4:b5:b1:0c:37:c2:ae:
ce:f7:1a:12:da:39:eb:f7:86:08:4d:ec:3b:bd:f1:90:e2:01:
c6:a4:af:01:14:f5:31:c5:44:d1:4b:85:a1:78:d8:21:11:78:
93:a4:e1:75:21:48:3b:f1:3e:6c:50:a3:fa:5c:a5:6b:73:cb:
02:a6:8e:a4:33:c6:91:71:f4:35:c0:06:f8:a1:bd:0a:c4:f0:
c2:16:ae:48:b0:47:54:10:1f:2d:bd:51:c2:a8:3b:b6:6d:5c:
c2:ef:82:e8:e5:b3:87:0f:54:f7:76:00:a3:1e:44:a1:42:57:
8d:07:28:9a:be:a4:ff:14:1b:dd:3d:a5:4c:29:48:2e:51:4f:
bf:f7:e6:2d:83:2f:9e:23:cc:85:68:d7:e1:c5:e4:97:bc:dc:
2d:91:91:4f:88:8e:99:3a:44:a0:7e:9d:e7:cd:ec:45:92:5b:
7f:2a:13:16:b2:98:04:c9:be:d9:e8:7a:5a:96:7a:fa:a4:8d:
41:cf:e2:17:ba:2c:c4:22:1c:91:75:c9:68:b2:fa:db:c9:4b:
67:38:5e:2e:55:76:f0:f7:de:38:36:9b:ad:f7:5c:c2:ab:0b:
16:37:14:64:5d:f8:5e:75:57:52:35:c5:54:c5:ae:3f:d2:20:
99:9f:06:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org