Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa
File: 126dd560-3b8f-36a3-82c0-bc110b196871.roa (raw, json)
Hash identifier: xlV4/3uzq6yHMvQW+bZ4xNSJJWg6hmtRTaFYlFCVbuQ=
Subject key identifier: A9:9C:79:EB:13:81:33:3F:7D:D4:2B:43:10:00:15:35:60:F7:FF:F4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848DA710349D3AF50F7AFDBAF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 75.88.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:71:03:49:d3:af:50:f7:af:db:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=21e43294-18b2-48b6-8dc3-81532ab9b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:a8:9a:88:71:d7:59:fb:ec:c2:67:85:72:
e5:76:72:80:af:19:a0:a2:e3:5f:c5:46:66:e7:4b:
b7:2c:64:05:e2:4d:a9:c4:29:0d:20:14:3e:76:7a:
52:22:e5:fa:ef:29:dc:fb:ed:f9:9c:dc:e0:fb:e7:
b1:ab:9e:21:ce:ee:f8:6c:1d:15:f5:a4:a4:83:d2:
c1:9d:14:86:ee:d8:89:56:f4:88:c2:19:0a:85:b4:
18:8d:32:93:5f:f9:35:2b:ed:02:0d:48:62:8e:00:
c2:e3:ac:f4:0f:52:ee:af:18:3e:57:02:75:a2:59:
95:ae:6c:f8:cd:ca:82:be:0e:b5:17:b5:6c:2d:e7:
ff:d9:e0:64:71:c5:11:ea:47:2a:84:23:0d:f6:45:
49:22:0c:47:12:6d:5f:3c:e5:bf:25:6c:ec:51:9f:
b9:55:0a:a3:47:9f:0a:9a:79:a5:5f:7d:fb:16:a9:
f1:a8:ff:3f:5a:9b:13:04:0a:53:56:aa:9f:96:40:
36:13:ba:9e:84:b3:b7:8b:25:6f:c9:c8:a2:a4:83:
7b:e0:c8:f5:13:5f:ab:f8:30:76:6e:2d:15:d4:f3:
1e:3e:f8:8e:e3:43:9f:91:2d:87:ad:4f:2a:c8:40:
2c:48:90:4e:36:50:53:74:b9:dc:9b:3a:b2:64:88:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:79:EB:13:81:33:3F:7D:D4:2B:43:10:00:15:35:60:F7:FF:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:f9:b9:ce:f4:cc:c0:c1:fe:2e:10:78:25:2e:d5:91:08:f6:
4f:ad:3d:5d:58:ad:88:82:cf:82:5f:37:db:1d:de:b9:15:13:
c2:50:39:43:6f:a4:15:1f:d3:e9:42:c0:7f:0c:43:3f:fa:46:
41:a6:7e:1a:d1:7d:82:e0:e6:ad:95:4d:eb:54:4b:11:d8:94:
48:f3:7f:c7:f1:23:2d:82:ba:8b:1d:74:37:88:85:60:0c:5b:
a5:e4:63:58:c0:ea:a9:02:21:7c:bc:67:15:aa:6f:0c:63:69:
bb:2f:ab:fc:07:5a:9e:8a:a2:a9:bc:d6:62:3c:a9:df:72:0a:
75:11:6f:60:9c:e3:4f:49:0b:5b:63:cf:ed:f2:6e:5a:74:86:
1c:69:4a:ab:2f:6b:0a:c8:a4:13:0e:4e:4a:6e:40:28:7c:d1:
38:29:21:eb:e2:84:4c:7b:78:45:00:bc:85:bb:6e:6c:63:d1:
2b:6e:40:6a:51:4b:61:08:de:e1:19:8d:87:32:9d:d5:9f:8a:
aa:ae:02:b4:51:d0:88:e4:27:4d:8d:6c:eb:f1:37:46:d6:11:
ce:59:8f:02:d3:ba:7d:89:ed:26:09:e6:41:82:23:9c:bf:79:
88:f5:ca:80:bf:c1:f4:2d:02:ad:88:34:50:13:02:1a:dd:00:
74:07:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:57 2025 by rpki-client