Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: 2GnifbBp0ZJDJNJq12WLSxbwzHB+gV9D/z20xdME9x8=
Subject key identifier: D5:8E:C1:63:ED:31:1A:74:58:29:EF:88:6B:6E:BB:B1:69:26:90:BE
Certificate issuer: /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial: 3B0BD0763924DAFA52B371FCD3358DD786B73823
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 09 Feb 2024 22:35:19 +0000
ROA not before: Fri 09 Feb 2024 22:30:19 +0000
ROA not after: Fri 07 Feb 2025 22:35:19 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:d0:76:39:24:da:fa:52:b3:71:fc:d3:35:8d:d7:86:b7:38:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Validity
Not Before: Feb 9 22:30:19 2024 GMT
Not After : Feb 7 22:35:19 2025 GMT
Subject: CN=D58EC163ED311A745829EF886B6EBBB1692690BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:01:da:36:cd:83:64:db:cb:a9:41:54:00:
25:e7:dd:e1:54:03:50:e6:0b:15:3f:37:8c:eb:3f:
de:00:e6:02:ed:9c:6d:cf:b1:0e:c1:7f:81:36:16:
17:84:8b:d2:b0:3a:18:d3:bc:f1:86:6c:3b:14:c7:
22:c5:dd:21:62:72:d8:da:d2:2d:05:0e:5b:eb:2b:
98:78:67:f8:83:75:10:6f:d1:10:c7:10:0a:ee:ba:
8e:0a:8b:cc:42:b8:1c:26:39:d7:e6:23:03:3b:04:
ad:b6:b6:1e:a1:00:58:0b:20:e5:66:98:4c:fe:31:
cf:55:42:35:60:02:59:11:05:a2:75:16:b2:72:f7:
3f:4a:66:ff:18:ff:d2:11:a7:fc:3f:32:53:53:ea:
19:c1:cf:45:aa:9c:53:18:31:be:d4:ae:e7:f3:1e:
42:89:fa:90:a5:3b:83:a7:9c:9e:d4:7d:a0:37:70:
33:af:3d:78:98:6b:ec:1a:47:96:cc:2e:33:ba:bc:
45:24:68:d3:87:44:d5:6d:af:01:df:00:21:5c:61:
e0:56:5e:4b:7a:d1:8d:c7:2e:67:bf:6b:a2:9a:73:
f5:1a:e4:48:66:94:af:ec:d6:fb:8b:16:f6:83:7f:
0c:9e:57:e4:bd:ec:cc:74:e9:2d:5b:b7:ef:df:5d:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:C1:63:ED:31:1A:74:58:29:EF:88:6B:6E:BB:B1:69:26:90:BE
X509v3 Authority Key Identifier:
keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:73:06:cd:90:b0:c5:f3:38:56:c6:d9:42:cf:f4:26:9b:7c:
06:16:3a:cf:60:85:80:c3:3d:37:c9:18:59:9a:a8:db:7e:cd:
de:75:5d:11:44:9e:ed:5e:27:e6:d7:11:50:10:7b:14:2c:2e:
fa:47:88:f4:13:8e:e2:9a:3f:ce:e5:47:69:eb:e7:3f:56:86:
81:e2:b2:3a:a1:cd:a4:80:93:dd:e1:08:74:de:8e:24:d8:9f:
bb:6f:d1:bc:c4:62:aa:c7:d8:64:5c:9a:83:ad:93:29:2e:eb:
7a:12:56:f6:34:7e:6e:32:f6:e8:d4:74:63:5e:a8:b3:7b:23:
9d:d4:4a:5e:16:40:e6:62:e2:4c:49:a1:29:b7:2f:e3:a5:34:
0e:c8:13:bd:8d:70:68:86:ab:3c:2f:86:82:41:b7:06:be:9a:
70:e4:88:a1:ac:35:c8:bc:60:29:63:a5:0e:cc:14:c0:b1:f3:
69:0b:4b:c2:63:4c:75:d1:53:eb:2b:4b:ff:64:2c:29:ef:ac:
d6:23:4e:2e:55:44:74:fa:82:f2:61:0d:8f:7f:35:0a:94:a3:
1f:3f:f8:ce:0c:67:2a:45:a1:0e:9b:15:b5:18:62:5e:ef:0d:
cd:f8:74:7b:02:84:74:80:d3:87:c3:2e:5f:f0:fd:1e:fa:a5:
7e:d7:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org