Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8995cc6-ea8d-3f0b-a734-6f3c624c63a4.roa
File: b8995cc6-ea8d-3f0b-a734-6f3c624c63a4.roa (raw, json)
Hash identifier: 2gcsQhvEpiK9toxJ/MtCmJuIxj6u1sKYQmvmYjdA9bQ=
Subject key identifier: 5B:8F:94:F6:DB:DF:35:24:C8:5F:08:A0:67:60:4F:82:61:AD:82:54
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285846434AE072CDC2EE99C245FA40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8995cc6-ea8d-3f0b-a734-6f3c624c63a4.roa
Signing time: Wed 19 Jun 2024 13:00:34 +0000
ROA not before: Wed 19 Jun 2024 13:00:34 +0000
ROA not after: Tue 17 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.88.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:43:4a:e0:72:cd:c2:ee:99:c2:45:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 19 13:00:34 2024 GMT
Not After : Sep 17 13:00:34 2024 GMT
Subject: CN=7f7f36fc-5d91-4bad-a319-9ca1a6b49c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:e4:e8:3d:19:11:79:cf:1b:ea:f6:38:db:
6b:75:b4:05:d2:8b:04:07:43:67:fb:db:61:a8:e5:
f1:83:7c:2f:2e:0c:56:43:bd:8c:81:99:21:38:f0:
02:ed:b9:78:6c:fc:d4:1f:5f:50:88:56:60:14:39:
a3:6f:1c:6f:97:5d:0f:5b:95:a9:57:81:d6:ac:b5:
61:f5:f1:f2:9a:88:96:be:12:9f:21:36:9c:b0:0e:
f4:59:77:31:d6:24:9c:4b:79:07:51:2f:b7:36:bd:
98:a3:7a:19:c1:45:8e:85:bb:a0:76:b4:b4:6c:db:
f4:2c:e9:fa:30:63:ef:86:70:60:5e:20:7d:e3:40:
82:55:a2:a8:fa:e8:86:55:27:fb:6e:06:b4:73:9d:
f3:ae:c6:d2:fe:2a:42:3a:e8:24:94:dc:1d:71:a7:
7b:31:64:8a:c6:53:14:3c:99:cf:93:54:ff:18:49:
c8:30:e5:c5:e2:05:89:18:8a:6d:50:88:70:9b:ce:
73:06:ae:93:4e:77:7d:7d:df:b3:19:a9:1a:f1:cd:
9f:9b:2c:6f:49:82:06:6f:9b:69:43:eb:73:66:7e:
10:a3:91:89:47:91:12:db:2f:98:87:7d:ea:03:6a:
4b:2a:b0:6e:29:d3:8b:ff:30:78:42:ac:a3:0a:13:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:94:F6:DB:DF:35:24:C8:5F:08:A0:67:60:4F:82:61:AD:82:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8995cc6-ea8d-3f0b-a734-6f3c624c63a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:28:93:9b:d7:9e:3a:86:0a:61:04:fa:7d:93:96:cb:6e:c0:
2a:fe:45:40:4c:fe:6c:eb:ce:e0:77:29:e0:59:68:25:5c:a3:
a1:d1:c5:ea:94:84:5a:b9:28:b8:36:77:8d:e4:d3:7a:b6:53:
9f:cf:93:55:d3:91:ea:b6:44:e7:ff:9d:46:db:d1:44:6f:85:
7a:07:6b:d1:98:f4:0f:a5:0f:b6:fa:48:6d:c6:48:57:48:6c:
bd:cc:ae:9d:3c:21:80:41:21:24:63:86:76:54:7c:95:e7:36:
55:1a:cf:b4:70:b7:6b:0a:7a:47:65:e2:ae:bf:71:bf:7b:17:
29:1e:1f:26:b8:f9:f0:a1:1f:c4:68:98:be:04:27:7a:25:9c:
0c:c8:47:7e:3c:23:75:b1:25:ed:42:35:9a:0c:43:1d:f1:ba:
05:40:46:41:48:76:b8:d3:c7:d8:c8:47:83:0f:1b:f3:75:0b:
78:86:2d:3e:97:33:83:c4:6e:e0:18:14:eb:d2:97:f5:f3:b8:
c2:7a:36:0e:c9:45:56:d5:4b:21:2b:06:10:a4:b5:e7:9e:98:
c8:6b:62:7e:e9:cb:52:44:d6:06:66:bd:b0:33:f9:c9:34:fb:
13:8a:c7:90:ad:d4:c7:b3:29:52:87:92:10:06:56:8b:07:d6:
c1:90:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:17 2025 by rpki-client