Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa
File: a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa (raw, json)
Hash identifier: XvbKD82YZOlwN+ZdxanM8+g94jrOV0gtvUc9MFld38c=
Subject key identifier: 1B:3E:FB:09:54:8E:CB:B7:92:ED:86:9C:00:AD:E0:AA:0A:0F:3B:71
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2111F75CF9006FD972A5700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 75.90.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:1f:75:cf:90:06:fd:97:2a:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=d6fc0adc-6833-4404-9a8d-d69d3e09e73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:23:9b:89:7d:28:3c:bc:91:43:8a:ae:e5:
47:f5:58:91:d9:e6:8a:da:b5:fa:8e:d7:59:17:87:
e8:e1:ae:a7:7b:b1:63:eb:bf:ad:53:35:94:8b:cf:
53:6c:4b:7b:4e:f5:d7:15:07:22:37:8a:b5:44:16:
8e:1e:1a:e3:1e:8f:25:b7:92:98:72:c8:3b:46:29:
da:88:0d:cc:72:96:23:55:86:27:6c:03:20:11:d9:
c2:38:b9:9e:04:eb:26:79:c6:7e:ce:de:c4:b8:87:
61:42:f5:40:03:66:ae:40:b9:24:0d:c4:a0:0b:33:
1e:43:59:b0:ac:23:0c:b0:e9:65:fa:97:99:eb:f7:
6a:b8:15:06:c3:89:c9:94:57:c5:b4:a7:fe:cf:2c:
e1:14:dc:de:8b:fb:fb:56:df:b1:f7:bd:61:10:93:
fc:18:42:0d:0d:01:57:16:fd:d4:4e:74:d8:a0:6c:
9e:e3:b8:3b:25:78:77:da:20:b8:08:14:77:b0:43:
14:a2:67:ab:c5:19:84:49:a7:2a:90:6d:d3:56:5e:
ec:6c:78:51:16:57:01:29:77:d5:cc:33:38:de:e4:
97:88:ea:a7:7a:bf:a0:3b:49:db:ce:0b:5e:23:3c:
34:70:ad:be:8e:10:2f:69:a4:51:38:a2:f8:01:76:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:FB:09:54:8E:CB:B7:92:ED:86:9C:00:AD:E0:AA:0A:0F:3B:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.90.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:5e:5e:50:fd:ee:10:36:30:6e:de:10:42:99:6e:0e:a8:a9:
0d:8b:e1:38:9f:ba:26:fd:2a:6b:c6:44:f0:07:9c:12:5b:6c:
d3:84:fe:2c:3e:98:58:fd:da:18:8f:78:ef:8c:7c:3a:fa:38:
81:ad:d6:a7:27:02:42:eb:fc:0d:8c:5c:74:bb:d9:30:c4:33:
3f:1c:e6:01:a1:b4:85:94:74:97:01:33:cf:2d:04:2a:b8:92:
3f:30:cf:94:a5:17:90:93:45:65:ee:2e:8b:1a:08:35:5c:38:
b8:af:30:21:14:f5:0a:cf:a5:fa:19:82:70:a0:c1:bd:56:90:
78:26:e2:82:65:cc:7e:a2:73:4d:da:ae:20:23:4b:a6:97:04:
4b:16:10:65:cd:41:68:ea:93:26:da:81:31:76:c9:d2:d8:23:
9f:63:74:69:93:5b:1c:64:8f:10:eb:58:10:59:03:10:74:cf:
e0:c5:a2:04:94:27:ba:47:ea:87:65:a7:b8:f4:08:0a:05:38:
2e:ad:56:a8:c2:a9:8a:ba:20:48:1c:dd:75:d1:e0:8f:e3:57:
ea:7c:ee:de:6e:36:b7:1b:76:e0:91:94:b0:00:21:f7:3e:ce:
7a:85:fe:71:e0:26:12:eb:65:ae:84:00:88:07:42:c2:a4:06:
18:09:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:27 2025 by rpki-client