Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa
File: cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa (raw, json)
Hash identifier: WKX+BfFXg0Ep2QcQZvkslRbUJPZPMmfE8KwELQCZ8BM=
Subject key identifier: 4B:E9:67:8C:55:2D:4D:94:E6:EB:40:AE:70:F1:0E:C6:8D:8E:6E:F9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA6F018FAC0B485B35D028
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa
Signing time: Thu 20 Feb 2025 18:15:55 +0000
ROA not before: Thu 20 Feb 2025 18:15:55 +0000
ROA not after: Wed 21 May 2025 17:15:55 +0000
asID: 7029
IP address blocks: 75.88.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:6f:01:8f:ac:0b:48:5b:35:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:55 2025 GMT
Not After : May 21 17:15:55 2025 GMT
Subject: CN=04222a2e-9684-4c74-92cb-89f198bc24eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:43:8c:49:cc:9a:77:ab:5e:bd:35:9f:db:
d0:d9:6c:56:95:59:d7:11:b6:c6:38:ed:62:1e:c8:
21:ef:23:cb:f4:12:8e:fa:e0:62:c0:ca:a0:32:0f:
42:84:48:91:fe:4a:1f:84:5f:2c:96:51:94:7d:ee:
23:11:45:06:25:e2:5f:37:25:e4:d9:71:85:55:52:
4d:c7:96:87:9a:11:34:2c:18:5a:a2:dc:fe:73:d4:
45:ce:98:d6:bd:96:b2:a6:1b:d6:1c:2c:03:b7:eb:
ea:61:fb:7e:07:78:57:11:a8:02:e3:15:ac:d3:93:
05:e7:87:04:51:dc:a6:47:63:88:90:8f:17:9f:01:
5c:7c:70:e6:3f:a4:26:15:31:2d:73:bb:48:fa:8a:
76:1f:95:ab:25:57:c3:03:48:4b:a2:e3:c3:16:60:
15:23:7f:37:42:ac:53:62:b8:72:ae:74:f4:d7:64:
ba:47:4f:f9:10:2b:c9:64:a1:3b:c6:46:3a:f0:56:
e7:88:71:80:31:59:c0:8d:6f:03:c4:9f:33:99:63:
93:6a:69:76:19:32:cd:c5:e6:11:de:8a:34:e4:74:
a8:8a:15:ae:91:5a:5d:5e:ee:9b:a2:b7:dc:e0:b4:
11:fb:ee:ef:56:fc:07:38:55:c9:bd:9e:0d:2e:d2:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:67:8C:55:2D:4D:94:E6:EB:40:AE:70:F1:0E:C6:8D:8E:6E:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:28:45:9f:72:4f:06:48:1e:c8:11:7b:c7:e4:85:e7:ab:64:
38:24:ae:38:b4:04:08:f5:18:e2:87:f7:46:bf:7e:51:7d:02:
df:5c:ba:8f:41:0f:d0:8d:5f:a0:a3:df:b5:17:2b:96:b4:72:
0e:e7:56:80:2e:4f:2e:1b:f1:25:e5:b4:22:b1:46:f9:d6:16:
75:bb:17:7b:2b:3b:67:e3:f2:18:bc:a5:42:24:25:82:72:95:
77:1c:62:ae:16:6f:22:50:76:7c:0d:7b:b6:01:c2:96:f0:bb:
07:0e:a4:80:2a:33:96:8b:78:6d:4c:fe:66:fc:fe:ae:ec:66:
44:b2:9c:b3:1a:00:01:5c:fa:a3:af:7f:92:67:25:52:74:7b:
84:64:10:12:74:54:6b:54:1c:57:0f:2e:0f:a6:3a:6b:ba:74:
ad:02:d3:04:52:9b:9c:17:52:58:6d:df:df:de:86:35:75:8c:
25:ae:ef:5d:92:05:86:b3:ea:e3:bd:fc:54:de:47:b3:2a:b8:
9a:07:e1:28:e6:cb:e6:6b:dd:63:01:b8:03:8c:ee:85:fd:99:
fc:64:af:34:ca:5f:03:54:10:72:4e:b9:67:e0:ea:33:ba:bc:
02:3f:bc:94:87:a7:36:dc:07:fa:09:43:f7:b1:4c:7b:77:76:
06:96:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:35 2025 by rpki-client