Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: wqT7gnF4/nVhfhPGwzBoqlkriFtoQSQuPIOMGfAYBh8=
Subject key identifier: 20:B6:28:D6:55:5D:43:85:29:A7:B2:7D:AF:AD:C4:97:5B:E2:DD:3E
Certificate issuer: /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial: 41DADA8AB349F05F8D5E8416CB3831A20F076C4C
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 09 Feb 2024 22:35:19 +0000
ROA not before: Fri 09 Feb 2024 22:30:19 +0000
ROA not after: Fri 07 Feb 2025 22:35:19 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:da:da:8a:b3:49:f0:5f:8d:5e:84:16:cb:38:31:a2:0f:07:6c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Validity
Not Before: Feb 9 22:30:19 2024 GMT
Not After : Feb 7 22:35:19 2025 GMT
Subject: CN=20B628D6555D438529A7B27DAFADC4975BE2DD3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:9b:2e:23:d2:5d:13:98:b7:fe:0e:11:c6:
94:f7:7d:81:aa:d6:73:6b:77:5e:4c:7b:0f:63:f0:
ba:c2:da:34:6d:b4:b7:83:6b:05:fd:97:26:6f:46:
0f:c4:4e:8d:c5:68:eb:35:24:bb:6c:ab:9d:cf:31:
3e:4c:03:7b:c4:e9:9c:c3:e7:bf:b7:96:09:79:b7:
2f:f3:22:c9:8f:c0:f4:eb:55:73:49:ce:d4:83:a6:
16:c7:fb:99:e9:df:0a:24:2e:a4:44:8e:9f:bf:76:
6e:8a:88:c4:2d:c8:4c:6f:43:12:87:b2:11:69:c4:
4e:72:fc:fa:3d:af:53:a6:0e:47:af:22:4d:d8:5f:
2a:64:70:65:cf:8d:67:2b:42:59:cf:24:f3:ea:10:
74:79:4a:cf:32:d2:67:77:bd:9d:96:15:ca:27:a2:
9a:12:e3:3e:9b:8d:bb:79:f0:e2:5f:6d:4b:fd:1e:
24:11:23:04:a2:d9:65:92:90:d6:64:08:75:02:f3:
a5:f4:ec:b4:d9:3b:c5:52:27:c7:80:9b:c5:26:e8:
aa:9e:7e:b0:ae:df:66:9b:f5:12:e4:c5:ce:fb:94:
fc:7b:8f:0b:be:c7:bc:a4:7b:9c:c5:be:67:dc:7f:
2f:7a:24:c0:c7:71:3d:b0:a9:3f:08:83:d5:3b:73:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B6:28:D6:55:5D:43:85:29:A7:B2:7D:AF:AD:C4:97:5B:E2:DD:3E
X509v3 Authority Key Identifier:
keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5a:b3:ae:ec:05:5d:a7:47:ab:77:73:f2:c7:5e:7d:58:d4:
21:53:b5:73:31:62:b9:72:45:05:d8:5e:a7:e5:04:2c:13:29:
c6:93:d0:33:3d:80:ed:b1:f1:42:a6:f2:7d:59:7b:c0:e0:07:
1c:fc:15:ee:e3:59:2d:2a:69:85:1f:f0:2a:05:37:2b:3b:52:
b0:c8:4d:34:58:b8:ec:1a:22:ce:4f:40:08:c3:43:41:fa:9d:
29:8d:6d:02:7a:22:4c:52:31:9d:f3:be:75:c2:04:77:8e:3f:
d6:a8:1c:e1:6e:60:0d:ad:40:4c:5d:bb:0e:b8:da:35:28:91:
72:ef:f7:79:cf:3f:07:99:0d:16:18:3f:fc:28:da:d1:62:33:
50:35:0a:21:85:7d:b2:6e:f5:3f:04:88:03:bb:72:29:41:7d:
d7:ea:5b:a3:d0:71:26:5d:0a:b1:4d:ca:ac:0d:98:79:e0:e0:
8b:b5:f1:98:70:02:13:e6:3e:1a:60:fb:9e:ef:c6:09:84:2b:
e5:69:6c:d2:09:b0:9d:c6:22:ef:77:e0:d5:d4:00:45:6f:dd:
d6:4a:51:db:56:17:85:0e:5a:96:b6:5d:06:cf:e4:68:d8:3f:
b5:1c:c0:65:b9:52:cf:0f:05:5b:e1:83:cb:0a:d5:37:c2:75:
4a:27:1b:63
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUQdrairNJ8F+NXoQWyzgxog8HbEwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmZmNjJkNWEyMGI3ZGM2NjM3MzhhMDcx
Zjc1N2QwM2JiYWRjZmQzMWEwHhcNMjQwMjA5MjIzMDE5WhcNMjUwMjA3MjIzNTE5
WjAzMTEwLwYDVQQDEygyMEI2MjhENjU1NUQ0Mzg1MjlBN0IyN0RBRkFEQzQ5NzVC
RTJERDNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7USbLiPSXROY
t/4OEcaU932BqtZza3deTHsPY/C6wto0bbS3g2sF/Zcmb0YPxE6NxWjrNSS7bKud
zzE+TAN7xOmcw+e/t5YJebcv8yLJj8D061VzSc7Ug6YWx/uZ6d8KJC6kRI6fv3Zu
iojELchMb0MSh7IRacROcvz6Pa9Tpg5HryJN2F8qZHBlz41nK0JZzyTz6hB0eUrP
MtJnd72dlhXKJ6KaEuM+m427efDiX21L/R4kESMEotllkpDWZAh1AvOl9Oy02TvF
UifHgJvFJuiqnn6wrt9mm/US5MXO+5T8e48Lvse8pHucxb5n3H8veiTAx3E9sKk/
CIPVO3O8twIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCC2KNZVXUOFKaeyfa+txJdb
4t0+MB8GA1UdIwQYMBaAFP0fzXySKbC+dA9b2rX05rHWBqTiMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkOTAwMTc0YjkyNWM0LzAv
RkQxRkNEN0M5MjI5QjBCRTc0MEY1QkRBQjVGNEU2QjFENjA2QTRFMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzlkMTRmMzE2LTkyMmQtNDk3ZC1iZTU0LWZhODBmY2ZiOWUxNi9mY2Iy
MGY1OTY2ZmY2MmQ1YTIwYjdkYzY2MzczOGEwNzFmNzU3ZDAzYmJhZGNmZDMxYS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZDkw
MDE3NGI5MjVjNC8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACVcJkwDQYJKoZIhvcN
AQELBQADggEBACBas67sBV2nR6t3c/LHXn1Y1CFTtXMxYrlyRQXYXqflBCwTKcaT
0DM9gO2x8UKm8n1Ze8DgBxz8Fe7jWS0qaYUf8CoFNys7UrDITTRYuOwaIs5PQAjD
Q0H6nSmNbQJ6IkxSMZ3zvnXCBHeOP9aoHOFuYA2tQExduw642jUokXLv93nPPweZ
DRYYP/wo2tFiM1A1CiGFfbJu9T8EiAO7cilBfdfqW6PQcSZdCrFNyqwNmHng4Iu1
8ZhwAhPmPhpg+57vxgmEK+VpbNIJsJ3GIu934NXUAEVv3dZKUdtWF4UOWpa2XQbP
5GjYP7UcwGW5Us8PBVvhg8sK1TfCdUonG2M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org