Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa
File: ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa (raw, json)
Hash identifier: yXKHk94OdSkiNW8sWzPi0gF7Px9U6IX4myL8LXHi1ic=
Subject key identifier: 00:DE:A5:56:01:4A:72:70:BF:BC:66:9A:E8:E0:1E:85:8D:CD:FD:32
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB93F208761FB17A19E89D40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa
Signing time: Thu 06 Feb 2025 18:14:04 +0000
ROA not before: Thu 06 Feb 2025 18:14:04 +0000
ROA not after: Wed 07 May 2025 17:14:04 +0000
asID: 7029
IP address blocks: 75.89.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:93:f2:08:76:1f:b1:7a:19:e8:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:14:04 2025 GMT
Not After : May 7 17:14:04 2025 GMT
Subject: CN=d6ec24e6-c367-404c-b7db-72e93eaa8006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:19:34:85:aa:94:1d:cf:30:76:d6:6b:0f:
ec:69:da:04:da:90:37:10:c4:80:fb:03:16:f3:ee:
56:58:8f:f7:9d:6a:de:bb:f0:5b:67:11:ad:99:73:
6e:91:25:6a:4a:92:72:6b:63:97:8d:41:cf:ab:13:
a3:fb:b2:42:85:bd:45:49:ad:42:67:96:79:55:24:
ac:5f:27:f0:38:16:77:3a:eb:ed:30:f2:6d:e2:51:
57:1c:ee:c5:ce:a7:61:f6:c5:25:30:9a:6e:1c:e5:
19:35:2b:4d:fc:c8:c2:a1:0d:4f:c5:80:3d:8d:4e:
da:77:2f:2e:6f:f3:b3:61:c9:fe:09:93:cf:11:a1:
93:e1:41:60:45:25:32:9c:d7:0c:ce:bd:31:bf:2b:
f7:27:3a:c1:bc:dc:87:83:6f:30:02:20:5b:b5:d4:
9d:2b:3c:09:a0:76:11:6a:31:15:51:a3:b7:22:8d:
70:74:ef:58:68:23:ca:6c:42:e2:7f:71:08:19:14:
e3:15:65:4c:79:47:12:a1:f7:18:7d:99:55:db:ee:
13:3b:e3:35:ad:13:d7:f9:9e:31:86:76:df:05:d3:
71:93:f2:c5:f5:7b:c0:1e:11:7e:20:8f:fa:f5:55:
e0:c5:51:38:05:2b:b4:9a:a0:ad:9e:4b:82:cd:38:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:A5:56:01:4A:72:70:BF:BC:66:9A:E8:E0:1E:85:8D:CD:FD:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ad:6b:bf:ab:c9:69:22:38:1b:24:19:38:56:ff:cc:1a:ab:
e3:a3:48:12:af:b9:26:c1:e8:d3:24:3e:92:2b:3d:b5:0f:23:
8d:1d:e9:a3:2d:68:c7:96:a3:ed:ef:45:4c:03:48:36:fc:b5:
0c:db:89:4a:ab:34:73:4a:c4:f6:64:17:56:2c:8b:68:3b:3a:
0b:33:4e:0f:bb:7c:f6:23:85:88:93:27:18:fb:5e:38:7a:2f:
fe:f9:37:1b:fe:0a:98:86:23:96:90:63:12:48:19:f5:48:ee:
11:e3:3e:c5:0d:63:ae:3f:fd:94:45:03:25:2a:37:53:d2:e5:
ae:26:c1:04:38:38:7f:02:a8:70:fd:62:5a:3a:be:98:ae:5b:
e7:72:75:cd:65:5c:3c:83:df:8b:be:a1:54:ba:9c:dd:8d:c6:
d9:34:7a:d4:bf:a2:0d:1c:d1:dd:21:03:c6:ef:57:95:45:f5:
a5:cc:62:61:ea:d7:b9:be:fe:6e:e9:5a:59:28:53:64:e5:a5:
55:29:55:9a:47:0d:30:9e:4c:2d:4d:da:d5:7f:e5:6b:7e:01:
f9:fb:33:e8:0b:62:19:63:53:83:3c:e9:3b:7c:7a:86:77:ce:
7d:f8:ca:ff:93:d5:63:1e:d4:52:21:de:4e:42:2f:ee:4b:38:
d2:d6:9b:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk/IIdh+xehnonUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjE4MTQwNFoXDTI1MDUwNzE3MTQwNFowLzEtMCsGA1UEAxMk
ZDZlYzI0ZTYtYzM2Ny00MDRjLWI3ZGItNzJlOTNlYWE4MDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gcZNIWqlB3PMHbWaw/sadoE2pA3EMSA+wMW
8+5WWI/3nWreu/BbZxGtmXNukSVqSpJya2OXjUHPqxOj+7JChb1FSa1CZ5Z5VSSs
XyfwOBZ3OuvtMPJt4lFXHO7Fzqdh9sUlMJpuHOUZNStN/MjCoQ1PxYA9jU7ady8u
b/OzYcn+CZPPEaGT4UFgRSUynNcMzr0xvyv3JzrBvNyHg28wAiBbtdSdKzwJoHYR
ajEVUaO3Io1wdO9YaCPKbELif3EIGRTjFWVMeUcSofcYfZlV2+4TO+M1rRPX+Z4x
hnbfBdNxk/LF9XvAHhF+II/69VXgxVE4BSu0mqCtnkuCzTjo3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADepVYBSnJwv7xmmujgHoWNzf0yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE3M2FjZjYtNjZiNi0z
ZmI5LTg1YzUtYzRhMzJhZmY2NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGta7+ryWkiOBskGThW/8waq+OjSBKvuSbB6NMkPpIrPbUPI40d6aMt
aMeWo+3vRUwDSDb8tQzbiUqrNHNKxPZkF1Ysi2g7OgszTg+7fPYjhYiTJxj7Xjh6
L/75Nxv+CpiGI5aQYxJIGfVI7hHjPsUNY64//ZRFAyUqN1PS5a4mwQQ4OH8CqHD9
Ylo6vpiuW+dydc1lXDyD34u+oVS6nN2Nxtk0etS/og0c0d0hA8bvV5VF9aXMYmHq
17m+/m7pWlkoU2TlpVUpVZpHDTCeTC1N2tV/5Wt+Afn7M+gLYhljU4M86Tt8eoZ3
zn34yv+T1WMe1FIh3k5CL+5LONLWm+U=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:11 2025 by rpki-client