Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9043475-a280-3c00-b38d-02c8c24b1de4.roa
File: e9043475-a280-3c00-b38d-02c8c24b1de4.roa (raw, json)
Hash identifier: IunAzzN8CGL1hxFUUlqq7PdXRkiZnvQq2TRKvjFaEI8=
Subject key identifier: 18:BE:E9:A9:6F:32:88:62:5B:2E:D3:6F:64:FC:D2:E2:8B:8C:F7:41
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581B042FF609E8EC63E1B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9043475-a280-3c00-b38d-02c8c24b1de4.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 75.105.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:b0:42:ff:60:9e:8e:c6:3e:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=41e921a8-7105-4557-8438-1a9c9643a2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d4:f0:e1:b5:cb:c5:9f:29:ef:a8:63:59:fb:
de:6e:10:32:b3:db:e6:21:1e:36:49:57:33:31:14:
b8:7a:61:62:a8:61:ef:8b:d3:5a:1e:1d:95:78:a4:
cf:9a:4d:1c:d7:9b:38:5b:b0:b2:e8:20:c2:84:e7:
e8:1d:51:34:fa:1c:a3:b3:57:a9:7c:b0:23:b4:c2:
49:0c:13:0d:3a:23:0b:02:c8:6d:15:f3:ba:38:bc:
81:ff:05:6b:12:2a:3d:f3:2e:d8:e5:a5:52:2b:eb:
41:ee:8b:f7:ac:19:19:58:a7:60:a3:c8:68:e5:48:
98:b7:21:18:33:f5:50:ca:1b:02:81:e4:45:27:1e:
30:36:10:d1:70:e6:93:b5:62:da:0b:86:35:ad:b4:
8a:fd:77:93:c0:ef:d3:09:7c:f9:76:fe:d9:c1:2b:
1f:a3:7b:be:be:ed:95:a2:30:44:a8:07:e0:95:51:
e5:44:af:7d:59:25:6c:7b:0e:c4:29:39:c6:3b:d4:
95:d2:1d:07:54:6f:a9:bd:38:53:83:75:e3:b0:76:
3f:4e:c1:a5:01:16:67:17:5d:bb:c2:35:69:0d:f7:
e3:97:ad:eb:18:fa:2e:5f:8e:45:38:05:47:b9:bc:
d4:a5:1b:e8:94:a4:99:32:0c:b7:0f:b7:14:35:b9:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:E9:A9:6F:32:88:62:5B:2E:D3:6F:64:FC:D2:E2:8B:8C:F7:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9043475-a280-3c00-b38d-02c8c24b1de4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.105.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:61:7a:27:9c:5f:fa:18:58:c7:d7:c2:fc:81:31:86:06:87:
1a:31:87:6e:f3:30:1d:03:b9:c4:92:17:9e:f8:f4:1a:31:b7:
fb:bd:eb:43:59:c2:32:25:ca:d8:64:7d:f1:2a:fc:e5:f0:df:
74:c3:30:a4:e5:7d:ab:74:b3:bd:9e:3a:60:98:7e:f3:14:1c:
ac:79:58:d7:2e:cf:3e:17:4f:c9:c0:a2:00:82:64:0e:0c:e8:
36:27:f2:cc:54:5c:c3:5e:f6:d6:5d:d5:b3:f5:e9:cc:36:1a:
65:1e:b7:89:2c:0c:bf:ff:37:4a:64:d3:f0:5a:38:68:9f:9b:
da:85:dd:53:7b:ec:3d:a2:48:4d:aa:9f:77:94:83:f2:67:8a:
57:d5:0d:75:99:3b:0c:f5:ae:a8:fa:23:70:dc:21:84:6c:cd:
29:e9:1c:24:7a:2e:99:ef:c6:b0:c1:cd:fd:a8:f1:d2:d7:07:
8f:85:59:4b:3c:61:cf:d7:bf:b8:4b:58:3f:d4:c7:60:1a:ec:
33:32:1a:92:c6:59:f0:de:fc:6d:d4:df:06:f1:95:19:5d:46:
49:37:32:a2:e8:fb:57:a9:2f:dd:34:be:cf:1f:e1:2c:3c:99:
cc:9f:54:a2:23:dc:4c:e2:51:c6:9f:1e:39:71:eb:da:43:a2:
78:a6:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:03 2025 by rpki-client