Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc477b6-1479-39be-a975-3f44ebfc40a8.roa
File: ffc477b6-1479-39be-a975-3f44ebfc40a8.roa (raw, json)
Hash identifier: f9CBsliSdpo53pPVhB+574fRICp6tA0LjDIvrTEYJOY=
Subject key identifier: 67:59:EB:A6:8D:95:16:E4:20:72:66:91:06:61:4B:FF:70:03:32:37
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848854B654306A85C8CF6692F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc477b6-1479-39be-a975-3f44ebfc40a8.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.221.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:65:43:06:a8:5c:8c:f6:69:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=89edd1d8-44ab-4e5b-8af3-97e24fa0d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:87:ae:19:79:0a:5f:98:4a:fb:8c:9f:51:
a0:d8:db:bd:c4:b9:c6:03:9d:e0:c5:26:db:2e:29:
47:8b:82:5e:86:39:2d:8c:41:df:89:2f:4d:ef:ba:
34:69:4c:3e:c4:f0:c7:c1:77:85:a7:8a:12:df:b6:
46:2d:60:12:ab:6f:f5:98:67:5d:e9:a9:9e:56:e3:
13:6d:74:61:fd:ed:22:a6:10:3b:15:e0:71:a2:86:
41:a7:25:d6:cb:16:1b:1e:ed:04:c2:c8:86:df:10:
e1:83:f2:96:0e:b4:db:dd:a4:c3:79:1c:34:23:42:
d9:28:b0:c6:0e:79:ed:2a:ed:57:b0:da:d7:02:bf:
c1:2d:77:7c:ea:63:f6:ac:e5:00:d4:b0:31:78:ff:
83:1d:d8:b7:e5:5d:89:e0:25:2b:4c:fa:06:e6:1b:
a4:e0:bc:d3:40:83:ad:3f:4e:8b:1e:9a:b2:eb:cb:
3f:4e:62:be:cb:95:c6:85:96:cd:e6:e4:42:33:e2:
e3:a1:7c:dc:58:62:fe:c8:6f:85:1f:c6:97:da:68:
b4:ee:d0:32:b5:8e:b5:3b:70:45:0a:d3:b5:78:02:
62:c4:39:ce:a4:92:4e:8d:c3:74:c8:c4:91:0a:df:
6c:a1:bd:81:15:96:e7:07:6d:47:d5:38:31:2b:cf:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:59:EB:A6:8D:95:16:E4:20:72:66:91:06:61:4B:FF:70:03:32:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc477b6-1479-39be-a975-3f44ebfc40a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.221.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:98:1b:6b:2b:22:ff:5a:d8:4d:50:2f:1d:e7:1d:75:08:5c:
5d:a8:70:4d:b4:9f:93:47:52:79:97:0e:b2:08:60:1d:ef:70:
89:ce:fc:91:76:f9:a0:04:eb:c3:3a:c7:79:70:d7:22:93:f3:
ac:4b:78:6e:7b:bd:12:0b:0f:a9:ae:33:d8:ef:f6:ea:45:96:
2e:f0:76:4b:ef:f0:8f:fc:9a:c1:46:75:0d:69:fc:32:bd:d6:
73:6d:49:03:3a:d3:38:31:2f:b0:4e:0f:4d:9e:08:65:c7:8f:
57:12:60:df:88:d8:a3:cd:5f:bd:3e:2d:9a:27:fc:fc:0d:f0:
b0:26:38:63:bd:b7:b3:c4:5e:04:7e:00:51:c1:c5:f2:8b:52:
f0:01:5b:f3:6b:59:ac:61:65:0d:95:c3:d1:1c:73:b1:27:7f:
07:e2:6a:b0:e6:36:c5:ec:f0:9b:1b:67:cf:2b:eb:06:06:52:
2f:99:89:66:b0:48:0f:0d:c7:3a:d2:ff:43:8c:46:8e:f1:ae:
67:c1:82:35:ec:97:11:08:a7:a0:d4:f6:33:51:0e:c8:d6:bd:
e9:a6:a8:fb:df:74:ef:e0:4b:ce:35:36:fd:9e:59:9c:a4:16:
f3:fa:87:f8:a1:51:d8:12:b7:9e:00:6f:97:6a:65:63:f1:b9:
aa:c7:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:57 2025 by rpki-client