Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier: 3lOxzfynvHgk41ijb0IjTsX1JjwHNL7fDlTguPeNxME=
Subject key identifier: C0:36:65:7E:DB:AA:FB:B3:24:30:FF:CF:FF:CE:A2:DC:4C:3E:8C:FB
Certificate issuer: /CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
Certificate serial: 0BCC52F209103E393353A4A2F56C1926E2D1FB4C
Authority key identifier: EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
Signing time: Wed 30 Aug 2023 20:09:56 +0000
ROA not before: Wed 30 Aug 2023 20:04:56 +0000
ROA not after: Wed 28 Aug 2024 20:09:56 +0000
asID: 399970
IP address blocks: 149.112.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cc:52:f2:09:10:3e:39:33:53:a4:a2:f5:6c:19:26:e2:d1:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
Validity
Not Before: Aug 30 20:04:56 2023 GMT
Not After : Aug 28 20:09:56 2024 GMT
Subject: CN=C036657EDBAAFBB32430FFCFFFCEA2DC4C3E8CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:47:88:d5:6f:3c:a6:cc:7b:c6:3b:5a:d2:
59:33:98:39:ec:c7:cf:81:a4:18:58:48:e4:dd:93:
9a:26:ee:80:6f:c5:21:6b:68:87:47:1e:36:71:14:
dc:a1:a3:c1:ed:b0:93:f1:da:89:27:a8:67:1b:ff:
a5:fa:05:b2:c6:67:12:c2:7f:df:14:4f:8b:95:fc:
13:f0:df:5f:d0:23:60:6b:c9:b8:30:fb:2e:7c:e3:
64:35:4c:20:e6:2c:f8:34:4c:52:a5:0f:f9:98:1f:
b2:af:df:a7:cb:00:fe:2f:d5:46:e8:33:36:25:aa:
4c:df:3a:c2:b9:77:1d:29:2e:5d:40:87:df:2f:9e:
a0:7a:05:e8:54:6c:a5:9c:9b:b2:e6:0f:86:5f:67:
36:37:79:3f:1b:43:13:df:01:3e:f3:c6:04:a1:4a:
9f:23:f7:69:ca:86:7f:39:16:34:52:3d:cc:3e:e7:
5a:20:ca:3c:88:8f:6e:58:62:8e:e2:7e:25:ff:37:
6c:93:e9:0d:b7:98:fa:5e:2a:62:23:06:6c:f5:92:
1e:3b:58:17:25:1e:4a:a5:d0:e1:c2:8e:ba:7b:cb:
96:69:96:19:10:93:40:9a:f0:b9:81:90:9d:4a:3b:
53:20:aa:6f:15:5e:8b:cd:56:86:b9:fd:79:59:41:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:65:7E:DB:AA:FB:B3:24:30:FF:CF:FF:CE:A2:DC:4C:3E:8C:FB
X509v3 Authority Key Identifier:
keyid:EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/EF13C213784664D4684119614B2AF58530A084C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:21:29:54:be:54:53:dc:f9:e7:20:ed:69:99:6b:cb:28:aa:
83:29:c1:90:05:13:a0:80:70:bb:14:f2:cb:93:2a:8c:a8:bd:
b0:c5:32:45:4d:99:7c:22:1f:fb:f3:ad:52:e8:b8:20:c1:68:
70:64:4f:4c:d5:7d:60:77:08:fd:19:87:af:05:0f:6c:21:94:
56:9c:5a:7d:b6:28:91:50:40:42:64:c9:54:4a:56:ed:52:4c:
aa:50:92:39:aa:55:24:70:bf:ba:1e:09:b2:fd:bf:b3:ad:81:
be:43:b5:8e:73:a7:63:26:d5:fc:e5:f0:6f:92:89:b7:6b:85:
97:d2:52:0c:e6:25:48:27:25:ac:80:4c:e2:b2:b8:1e:5e:bf:
5e:77:37:7c:0b:98:c7:60:7a:5a:f5:e3:b2:a4:9e:1c:ff:30:
7b:fa:7d:95:30:75:01:85:11:70:79:63:23:ae:ea:15:ad:32:
fb:cd:98:08:e6:62:cc:b3:2a:0d:90:07:49:07:35:97:fc:ed:
71:b2:d3:00:fd:3b:20:d3:78:8c:13:29:c4:c3:82:0c:a6:b7:
9c:c2:a6:45:30:14:41:39:1f:fb:d7:99:5d:2f:9c:b3:ef:16:
4d:3f:89:f4:51:14:c8:b4:15:be:82:b2:05:c3:ff:e4:87:e2:
00:93:13:82
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUC8xS8gkQPjkzU6Si9WwZJuLR+0wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjZjYzNkMmViMmYwOWI0MmQ0NDU2MGY5
NjJmODA0ZDAwMzJjNDg2YjcwHhcNMjMwODMwMjAwNDU2WhcNMjQwODI4MjAwOTU2
WjAzMTEwLwYDVQQDEyhDMDM2NjU3RURCQUFGQkIzMjQzMEZGQ0ZGRkNFQTJEQzRD
M0U4Q0ZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BlHiNVvPKbM
e8Y7WtJZM5g57MfPgaQYWEjk3ZOaJu6Ab8Uha2iHRx42cRTcoaPB7bCT8dqJJ6hn
G/+l+gWyxmcSwn/fFE+LlfwT8N9f0CNga8m4MPsufONkNUwg5iz4NExSpQ/5mB+y
r9+nywD+L9VG6DM2JapM3zrCuXcdKS5dQIffL56gegXoVGylnJuy5g+GX2c2N3k/
G0MT3wE+88YEoUqfI/dpyoZ/ORY0Uj3MPudaIMo8iI9uWGKO4n4l/zdsk+kNt5j6
XipiIwZs9ZIeO1gXJR5KpdDhwo66e8uWaZYZEJNAmvC5gZCdSjtTIKpvFV6LzVaG
uf15WUHWvQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMA2ZX7bqvuzJDD/z//OotxM
Poz7MB8GA1UdIwQYMBaAFO8TwhN4RmTUaEEZYUsq9YUwoITFMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODllMDJlOGIwMThhNDgwZWM3MTU3OTlhLzAv
RUYxM0MyMTM3ODQ2NjRENDY4NDExOTYxNEIyQUY1ODUzMEEwODRDNS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzgwN2U4M2IxLWM4MmUtNGI4ZC05ZTJlLWEzZGM0MTlmYTk2NS9mY2Iy
MGY1OTY2NmNjM2QyZWIyZjA5YjQyZDQ0NTYwZjk2MmY4MDRkMDAzMmM0ODZiNy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg5ZTAyZThiMDE4YTQ4
MGVjNzE1Nzk5YS8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGVcJowDQYJKoZIhvcN
AQELBQADggEBAKohKVS+VFPc+ecg7WmZa8soqoMpwZAFE6CAcLsU8suTKoyovbDF
MkVNmXwiH/vzrVLouCDBaHBkT0zVfWB3CP0Zh68FD2whlFacWn22KJFQQEJkyVRK
Vu1STKpQkjmqVSRwv7oeCbL9v7Otgb5DtY5zp2Mm1fzl8G+SibdrhZfSUgzmJUgn
JayATOKyuB5ev153N3wLmMdgelr147Kknhz/MHv6fZUwdQGFEXB5YyOu6hWtMvvN
mAjmYsyzKg2QB0kHNZf87XGy0wD9OyDTeIwTKcTDggymt5zCpkUwFEE5H/vXmV0v
nLPvFk0/ifRRFMi0Fb6CsgXD/+SH4gCTE4I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org