Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/117e8eda-dd0a-3781-aa09-d6fb4d5b3656.roa
File: 117e8eda-dd0a-3781-aa09-d6fb4d5b3656.roa (raw, json)
Hash identifier: /h+P0jkROkQF78XpCAo4yc4v1DcJ3IxcfZwmsnPFfeg=
Subject key identifier: BE:AA:17:79:8C:04:73:08:68:0B:61:EB:D8:49:B6:FE:F0:75:00:B0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848CDE11CC313AF78EF5022FD38
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/117e8eda-dd0a-3781-aa09-d6fb4d5b3656.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.249.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1c:c3:13:af:78:ef:50:22:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=be0baa91-470a-47f8-bc8d-c0c5f3d03ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:bd:e2:e3:aa:c7:b3:b4:76:1a:32:4b:97:
9d:41:02:e6:44:bb:7b:d9:32:f4:af:c4:c5:7c:e0:
43:f7:a0:d1:98:3e:f9:f9:ab:e9:60:14:cc:a2:c9:
6f:d9:3f:f6:33:58:9b:da:a7:95:db:2c:d7:f9:12:
f5:86:57:14:92:a1:f0:fe:dd:24:f7:54:dd:37:23:
85:4b:9f:89:ff:ae:79:63:db:b3:3c:c4:ea:b0:2b:
8a:61:ef:a4:c3:9b:39:71:04:17:2d:64:b8:e9:15:
89:df:4e:e3:4d:e6:c2:f6:e9:e7:18:4b:fb:cf:dc:
88:f9:00:f1:d9:a4:57:48:f5:e1:f5:14:12:e8:6b:
e1:1e:75:17:11:fb:9f:58:2a:bd:67:ab:41:b9:8f:
58:7f:4e:62:5c:b1:e9:52:c7:f5:f0:b1:5e:19:11:
c6:8a:61:db:17:13:c5:a7:10:49:1b:30:67:23:fa:
69:2f:a0:09:d1:cd:87:01:05:d7:f4:06:40:48:28:
2b:a7:55:ea:f1:ca:cb:f7:59:6b:e0:35:de:5b:a2:
45:87:96:5d:0d:10:8d:88:57:29:a4:5d:d8:be:14:
55:5a:21:e7:32:4a:70:29:ec:4e:74:cf:3f:f5:7a:
cc:63:a9:18:4d:df:53:1f:da:f3:72:df:b1:e8:55:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AA:17:79:8C:04:73:08:68:0B:61:EB:D8:49:B6:FE:F0:75:00:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/117e8eda-dd0a-3781-aa09-d6fb4d5b3656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.249.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:59:48:f4:2f:00:ef:d9:e8:8f:73:0c:a3:c7:28:de:4d:0a:
d6:2e:08:5f:e7:37:ea:87:a8:20:90:25:6d:10:57:86:eb:79:
b5:5c:2b:62:41:a6:a1:05:f9:67:bb:fa:bc:b9:59:a1:76:e4:
23:c2:35:d8:20:bd:ea:5a:3f:d1:75:8c:bb:8c:f6:4d:08:5d:
b7:c7:a5:7c:86:10:20:cf:46:59:67:a2:13:a8:45:ae:cd:47:
24:c7:07:c9:c2:64:52:c0:7b:53:81:91:d5:08:37:9a:cc:89:
76:06:fb:00:dd:35:d7:22:0c:7f:fc:89:bf:9b:91:53:38:35:
cf:ce:ec:47:54:b4:e6:99:bc:c5:99:fc:58:b6:bd:5b:7b:54:
78:93:3d:26:e2:78:27:c2:e5:c0:91:f7:0a:41:f4:63:b3:b9:
02:63:97:88:99:15:93:a0:d3:63:e7:9b:07:20:a8:b5:20:42:
08:f0:9d:3a:a8:60:23:7d:15:66:a1:ac:dc:75:1b:c2:76:84:
8a:38:3b:57:c8:b2:65:0b:ac:7e:92:37:fc:fa:c0:7c:64:fe:
8f:46:92:1d:f9:86:6e:a6:d5:cd:f0:68:b3:72:86:48:56:a3:
f2:48:79:92:9b:59:8c:40:43:48:0b:d8:87:5b:22:8a:f2:cd:
11:ee:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:28 2025 by rpki-client