Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: pTu0Yo3M22opU6pqiODLC7PNiJ5X7rmhcWtUNQDlxmo=
Subject key identifier: 2B:D3:6C:C1:6B:E7:59:5A:86:B4:9A:81:6C:4A:64:EE:F1:C2:78:39
Certificate issuer: /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial: 347BCE8C67EBBF028855CEFEC981EB78253752EB
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Fri 09 Feb 2024 22:35:18 +0000
ROA not before: Fri 09 Feb 2024 22:30:18 +0000
ROA not after: Fri 07 Feb 2025 22:35:18 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7b:ce:8c:67:eb:bf:02:88:55:ce:fe:c9:81:eb:78:25:37:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Validity
Not Before: Feb 9 22:30:18 2024 GMT
Not After : Feb 7 22:35:18 2025 GMT
Subject: CN=2BD36CC16BE7595A86B49A816C4A64EEF1C27839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:45:a8:e2:b2:4c:a8:b7:91:89:d0:13:f7:
fd:bb:29:7f:28:f3:52:d4:ae:e5:36:c8:64:c0:fd:
4a:e1:8b:c6:47:70:b9:ab:1c:13:63:d2:8e:fc:2a:
bf:5c:b4:40:e4:ed:61:10:86:0f:cb:c0:54:09:13:
60:a0:ae:dd:99:24:53:c3:b1:b6:8c:06:4e:36:c9:
76:df:90:74:55:45:ee:b7:06:fb:38:f8:bb:e0:4b:
17:30:88:e6:2f:36:5c:09:1e:93:f7:d2:a7:3f:3d:
c5:54:79:13:9a:11:49:96:2e:74:76:2c:08:53:f3:
30:6a:9c:7b:6e:de:87:a6:67:5e:af:e9:5b:71:1a:
64:94:cb:64:80:7e:35:d9:12:c4:70:f6:0f:cf:d2:
ce:45:3b:d9:5e:20:f7:03:7e:b5:d1:ee:cd:c8:77:
ce:6f:82:0c:f4:2c:38:3a:54:16:1d:fb:81:3f:c7:
43:81:4a:5a:1f:67:94:e3:ea:56:37:77:ce:af:e5:
5b:d6:5b:7d:b8:93:74:e7:c7:00:4a:9c:b6:a2:d5:
e4:16:f4:a6:85:bb:3b:7c:f1:d7:f9:0c:28:1b:6e:
73:91:a0:ff:fe:50:77:cf:b1:2c:99:c5:f8:7a:fc:
54:20:b2:90:a8:35:99:00:54:65:b4:37:c1:4a:9b:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:6C:C1:6B:E7:59:5A:86:B4:9A:81:6C:4A:64:EE:F1:C2:78:39
X509v3 Authority Key Identifier:
keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
21:28:7c:a8:0d:95:8e:c5:b5:a4:fd:cd:40:e7:89:8c:b8:92:
66:bf:12:56:5e:45:30:47:1c:bb:e5:a9:a4:d1:0d:82:8c:17:
76:af:5b:6b:cc:63:97:32:ae:bd:9e:79:9a:55:54:f6:98:b6:
11:49:3e:10:ae:d7:a2:b7:9f:1f:3b:3d:a0:35:1d:95:ef:10:
2d:29:d1:74:be:89:b9:5a:e3:db:ed:8b:54:35:06:94:bb:ad:
a3:bc:fd:1b:04:d6:f8:63:da:f7:f0:cb:b7:f5:84:50:4f:69:
69:f2:88:cb:04:ca:7c:42:2b:d0:e5:02:b6:b0:d9:49:f8:af:
c1:a4:7a:69:4b:a3:b5:af:13:da:62:70:54:30:95:86:51:26:
04:23:ba:c1:68:99:ec:e7:6d:bb:e0:d9:a7:6c:37:db:27:ce:
4d:e7:f9:b9:d4:77:bf:26:df:7f:3e:0f:15:4c:a2:89:6a:74:
0b:33:35:69:97:cb:3c:db:40:34:b9:1f:97:07:1c:25:e3:d8:
a8:4a:15:e2:96:88:23:10:18:6b:71:f4:5c:33:37:dc:9a:2c:
28:69:cf:2e:ff:ca:9c:36:1a:ec:e7:6f:c8:89:32:68:2b:1b:
0b:38:4e:60:8f:1d:1b:72:e4:74:52:4e:1b:40:3d:57:a1:05:
17:ff:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org