Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa
File: ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa (raw, json)
Hash identifier: Pl2kJr5S5x14+sG9BFNY+ufVksaDgLqBG7qN99SRDUc=
Subject key identifier: FB:2F:29:92:F1:5C:5D:C0:CE:95:00:6A:8C:25:04:88:7F:FE:99:9C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CECD2257609E4ADEF96FEF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa
Signing time: Fri 07 Feb 2025 21:56:44 +0000
ROA not before: Fri 07 Feb 2025 21:56:44 +0000
ROA not after: Thu 08 May 2025 20:56:44 +0000
asID: 7029
IP address blocks: 75.117.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ce:cd:22:57:60:9e:4a:de:f9:6f:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 21:56:44 2025 GMT
Not After : May 8 20:56:44 2025 GMT
Subject: CN=6f1b6cb8-a8ab-480c-a8fa-4779c65510ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:20:d5:30:85:34:05:a0:34:d4:11:ab:36:
41:df:5b:66:f0:90:51:c3:be:4a:8e:4f:d0:c3:e4:
b4:72:8c:c1:cd:8c:25:8b:ee:ee:d4:cb:2f:e9:11:
ef:06:8f:1a:b4:a2:9d:4e:b6:6b:26:29:0f:83:e5:
5f:2b:b5:28:2d:f1:3a:5e:e2:e6:16:68:da:5b:43:
1b:3b:7a:f9:59:7d:01:68:a0:df:69:dc:75:95:71:
2e:15:e0:f1:b1:e5:dc:4d:08:5c:da:e1:71:70:82:
39:4b:22:74:77:54:fc:54:7b:2a:b0:5a:81:5d:96:
7a:db:44:8a:4b:44:6c:b4:39:5c:b3:63:20:77:d7:
39:9e:ad:d0:1f:1e:db:5e:4d:d1:21:7b:55:1b:52:
76:01:bb:eb:06:cc:c0:53:2a:32:24:15:e4:02:13:
6b:99:be:60:1a:6b:10:7b:6d:79:37:bf:77:b3:a4:
65:c6:e8:ab:20:83:5a:4f:1b:50:f9:15:41:50:9b:
f4:5c:29:50:e4:66:ee:16:cd:0b:8f:1d:ba:4f:7e:
5a:74:c3:4e:8a:cc:c8:15:01:63:1d:9f:52:70:2a:
2f:4b:c4:c7:e2:43:dc:ff:70:e7:cd:1b:00:2b:c7:
d6:43:4b:1a:cf:cb:1d:66:e2:e0:4c:80:05:ee:03:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:29:92:F1:5C:5D:C0:CE:95:00:6A:8C:25:04:88:7F:FE:99:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4c1c33-8bd9-35fd-8dca-5c86db695444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:3c:57:a1:29:bb:18:1a:e0:be:ee:48:f8:5b:73:7e:24:31:
82:3a:d8:ed:bd:b9:0a:a2:54:cd:8a:ba:cc:4c:80:89:ad:18:
2e:9f:7b:80:42:be:e4:22:fd:73:03:d9:c0:03:bc:8e:f6:28:
64:45:39:8e:0f:04:bb:f3:42:e0:74:39:e3:f0:55:6a:cc:08:
8a:3b:94:0e:22:2a:56:07:3a:09:1e:30:73:70:4e:c6:f0:2f:
26:2b:c9:95:12:06:61:d1:c5:7e:da:7f:be:c9:4b:e5:ca:25:
8b:31:2f:66:2d:6f:f5:ed:17:a7:e7:9e:7d:88:dd:bf:53:5e:
af:dd:61:23:28:e6:67:91:37:6a:eb:f8:e5:52:c0:98:2d:11:
f5:2c:a9:82:a3:9d:54:fa:3d:f6:bd:69:d2:e5:c0:10:dc:43:
cb:f3:87:14:b5:44:b6:7b:53:53:c2:df:14:24:7a:33:cf:d1:
23:16:5f:03:e0:05:99:c6:2b:ae:00:cc:6b:da:e3:87:34:cc:
9f:45:14:09:79:06:d4:bf:9e:7f:48:79:d9:30:78:78:4b:f1:
87:b3:99:56:2f:ee:c0:2e:a8:5f:59:1a:1f:bf:25:21:03:b2:
0c:08:46:5c:55:81:f5:b2:b0:2e:b0:30:f6:68:57:55:9c:66:
27:cf:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:38:02 2025 by rpki-client