Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier: 9RnNqIRpW6ghST3AjxbCLKvQ9XYReA8a2h0dcwsMsSk=
Subject key identifier: E7:CB:D6:53:46:96:B0:D8:36:BB:A2:DF:87:B4:4A:D3:84:6A:87:E2
Certificate issuer: /CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
Certificate serial: 4920BC4F9E291E86D9D3436C78BBE00E90EEF30E
Authority key identifier: EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time: Wed 30 Aug 2023 20:09:56 +0000
ROA not before: Wed 30 Aug 2023 20:04:56 +0000
ROA not after: Wed 28 Aug 2024 20:09:56 +0000
asID: 399970
IP address blocks: 149.112.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:20:bc:4f:9e:29:1e:86:d9:d3:43:6c:78:bb:e0:0e:90:ee:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
Validity
Not Before: Aug 30 20:04:56 2023 GMT
Not After : Aug 28 20:09:56 2024 GMT
Subject: CN=E7CBD6534696B0D836BBA2DF87B44AD3846A87E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bd:33:d4:a9:5e:6c:84:da:e7:e4:f7:75:63:
fb:93:22:2b:b7:a8:b9:d9:b5:51:c5:55:db:2a:e6:
83:98:44:0b:21:b3:09:7d:89:16:f8:1a:ab:24:38:
de:7a:8e:a5:23:2f:03:ad:e1:c5:7d:2d:3e:0f:54:
87:38:75:48:6f:dc:e1:06:00:f5:11:ce:01:e9:02:
fc:c2:28:0c:26:e8:cb:ef:0f:9b:7f:29:68:b9:a5:
f4:0e:c0:77:7a:f0:ea:66:26:38:27:55:e8:d9:59:
b5:ae:00:66:96:d3:8e:21:4e:07:f7:b9:4c:c2:af:
3c:9f:2c:56:4f:f0:f9:ab:8f:70:be:a5:02:d3:fd:
1a:99:f1:bf:95:6d:26:92:b5:79:d7:6e:69:97:8c:
5f:03:97:98:20:23:f1:82:79:14:84:65:e6:e0:1d:
88:0e:9e:94:f7:7d:12:70:c6:39:b1:01:b3:fd:40:
7e:9a:90:48:58:1c:c7:b9:c5:d7:a0:10:cd:55:5b:
e5:db:17:f9:c0:bf:db:53:61:02:02:16:ce:fd:cd:
ef:2f:34:ce:e8:e2:0b:66:34:af:f2:cb:dd:b1:89:
ca:85:f7:5b:1b:39:6c:c1:df:c0:96:99:be:f8:8f:
b6:36:6d:1f:c5:0b:76:65:27:d3:dd:90:b2:a9:5c:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:D6:53:46:96:B0:D8:36:BB:A2:DF:87:B4:4A:D3:84:6A:87:E2
X509v3 Authority Key Identifier:
keyid:EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/EF13C213784664D4684119614B2AF58530A084C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:84:ea:2c:fd:4a:b4:55:ab:63:dd:2c:07:11:dd:2f:65:4e:
26:0b:53:46:b9:27:86:9a:29:de:2b:fb:a4:39:09:98:75:4c:
d0:78:71:dd:05:41:9b:ef:1a:d9:66:df:cf:57:3b:ff:e1:11:
75:02:97:08:26:54:72:72:b7:39:49:36:fa:4c:a1:05:11:4a:
1c:85:43:33:f2:ae:33:84:39:1d:f8:e9:eb:bd:be:3a:54:88:
5f:cb:c1:fb:5f:77:54:5e:49:2f:72:f1:a3:c7:e0:e0:71:3f:
30:f3:20:07:80:f4:59:d9:23:f0:f5:57:62:f0:7b:bb:47:f1:
b7:7d:d8:84:c7:23:dc:e3:ec:4e:b2:58:52:33:20:42:57:c2:
5d:75:0c:1c:71:af:31:d0:f9:49:9e:a5:98:1a:3d:ec:80:d6:
0f:c1:86:7e:61:8a:37:fa:9c:60:57:43:ff:81:82:e8:de:61:
0d:f6:dc:af:a5:d4:89:1f:28:c3:cc:10:68:19:3a:7f:23:72:
03:a0:34:3f:ac:c3:78:a0:2d:58:0b:45:25:ad:d1:ed:cc:a1:
05:cb:f4:d8:31:dc:af:c6:86:10:cd:2a:cd:55:f6:c9:d6:a5:
7a:17:a1:75:4d:19:6d:d7:09:b5:58:49:8e:6a:02:67:7c:5f:
da:e6:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org