Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cb9bbea-3b43-307c-928a-58b7cc76e080.roa
File: 9cb9bbea-3b43-307c-928a-58b7cc76e080.roa (raw, json)
Hash identifier: Klra7IoLa4vjxcUsWI1lGLmmYdJeH+AfVSIj1wXMWwc=
Subject key identifier: 27:EB:8A:C2:05:0F:9D:26:93:D1:0F:E3:98:33:2A:D7:09:55:10:0B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D7162F8C4EDECA0564C2384
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cb9bbea-3b43-307c-928a-58b7cc76e080.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 75.117.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:62:f8:c4:ed:ec:a0:56:4c:23:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=ae0c63ad-f4e5-436f-8f2e-29a4030ab143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:47:ef:f6:a1:0c:ff:5b:ce:8c:1b:92:fe:
f7:b9:4a:5e:66:dd:68:b4:42:46:ad:07:0c:d2:6e:
74:b7:39:b5:2b:8e:ee:ad:fe:ae:f1:f1:ab:9a:96:
35:90:ee:10:c7:b5:d1:7c:1d:bb:5a:f9:94:4e:4e:
f2:f1:c3:ed:3b:73:3e:d5:dc:3a:b1:db:04:c8:a3:
cc:b9:82:2f:86:0a:4b:a7:fd:fc:fd:a6:41:f0:fa:
57:16:ff:de:2a:93:22:4d:4d:a2:ec:0a:b0:0f:9e:
80:e8:35:df:b0:2b:ba:3c:56:0f:7b:49:5a:4b:57:
f5:a3:38:25:52:50:1c:41:98:c5:ea:5b:8d:f9:94:
42:cd:f2:2f:e6:a3:eb:6a:e8:46:3d:9a:c8:1f:1f:
99:80:ef:20:a3:e8:6b:6b:fb:17:2e:c4:bd:65:6f:
04:be:c6:2c:8d:f2:e5:ba:3c:03:e0:56:a8:04:5a:
33:79:ad:4e:ad:4a:35:70:9b:6c:d6:d5:90:d6:51:
b0:8c:86:26:0e:66:f0:6c:ac:24:ac:66:8a:db:76:
57:b5:17:f0:fb:b7:88:64:87:57:34:7c:75:ff:4a:
fc:89:27:f1:42:a7:6f:72:92:37:12:7c:4b:e8:28:
77:f2:a3:58:29:0c:e6:79:9c:5f:2b:6e:e3:1b:e4:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:8A:C2:05:0F:9D:26:93:D1:0F:E3:98:33:2A:D7:09:55:10:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cb9bbea-3b43-307c-928a-58b7cc76e080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d8:40:8e:25:23:8a:5d:cb:59:43:a4:27:de:d0:d2:3e:50:
06:ab:f5:59:71:b0:5d:d1:a9:b6:a7:1c:44:64:f3:66:4d:e8:
19:d7:0a:0f:eb:d0:2a:59:65:dc:15:08:23:07:f6:32:c1:71:
97:58:ef:72:d6:08:3d:32:89:05:d2:91:03:b7:ff:a2:b3:86:
d0:6c:06:8e:e8:57:11:29:24:58:6a:c5:fb:d4:22:6b:a4:f1:
69:eb:51:7b:b4:91:95:98:2f:42:56:e6:29:3f:e3:f7:7c:3a:
b6:a9:5e:c7:0b:d6:15:28:2e:c6:e2:06:3f:85:0f:28:66:85:
c9:8d:65:bd:99:33:8d:e4:0b:9b:25:b1:db:82:44:d6:85:bc:
0c:69:c0:74:d7:17:77:ad:79:bb:f8:49:7e:0b:0b:2a:78:72:
5b:7e:a0:22:a4:2a:a6:13:d9:5c:6c:10:cd:fe:4b:7b:f4:38:
d3:ee:c5:59:e4:cd:a8:88:cd:ef:b7:b0:51:67:07:2c:c9:ce:
2c:3d:87:d8:a2:f2:b9:90:d0:dd:80:0c:71:e8:c6:ee:03:0b:
c3:db:03:b0:67:27:23:d3:14:4d:99:be:c9:fd:0a:d5:6e:7c:
f7:42:00:7a:be:40:1b:8c:8d:98:5c:23:b9:50:1c:49:c6:75:
d7:84:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:11 2025 by rpki-client