Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa
File: 2740e1e0-7980-3707-b098-f21fdbd6be0f.roa (raw, json)
Hash identifier: n2zdccCH8sLKLeiTmNsxA5YKoKRrik50+UI6R7gumJs=
Subject key identifier: 7E:F1:24:B9:FD:34:FE:12:60:BE:E6:0C:8E:8B:B0:33:4B:BD:5A:29
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FB74722495663C5797180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 75.88.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:b7:47:22:49:56:63:c5:79:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=cf8abee1-9840-4327-823d-b4b611c714cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:ae:e6:d0:43:fd:33:52:31:7c:51:ee:cb:
57:df:6a:ca:5a:d7:ca:d4:e1:93:1b:50:d8:51:86:
34:96:7b:5b:77:30:ca:3f:81:45:fa:b4:0d:8c:79:
c3:83:2c:71:c7:9e:6c:84:9b:de:b0:c0:93:62:14:
b6:a8:75:70:f4:8e:2d:3d:a8:c9:5c:bc:b2:54:45:
00:e6:20:8f:1d:71:3f:47:5b:0f:1c:34:21:07:ba:
65:ec:f2:97:23:b5:9f:1d:b4:6c:22:41:96:4c:2c:
c1:05:72:d6:83:15:5f:5e:b2:66:23:ee:47:87:a8:
4c:8d:fe:34:07:9d:a6:aa:74:68:4b:29:fa:57:cc:
f0:df:2e:c2:d8:5e:64:b9:78:df:da:39:d7:5b:97:
8b:a7:45:61:75:7a:cc:ee:c1:c1:a3:24:25:c9:cc:
33:98:ff:1b:98:aa:d4:75:7f:12:db:81:54:5c:20:
a3:1d:6b:e7:28:e1:8b:fd:7d:30:52:26:1a:4b:a0:
68:8d:c1:3b:42:1b:54:1b:91:40:6d:8b:97:c7:ac:
fd:46:fc:40:a3:e5:3d:d1:99:8a:b7:4a:c3:7e:f0:
05:3c:96:d5:57:ad:c4:56:6e:d3:b3:d5:a8:dd:c6:
e1:40:5c:f9:f0:83:ac:b3:2e:7b:20:60:80:f3:6b:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:24:B9:FD:34:FE:12:60:BE:E6:0C:8E:8B:B0:33:4B:BD:5A:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:28:66:ee:ab:d8:ae:5b:9c:d8:b0:be:4a:f3:64:e2:0a:77:
68:6b:03:58:0c:3b:4b:fb:62:f5:36:6f:19:0e:f3:9f:d3:81:
30:6b:d5:6d:fc:63:4b:89:2b:39:d0:1f:d9:38:f7:86:5e:18:
db:66:fe:ff:5a:96:55:e1:bf:5f:d2:a0:64:be:b5:e3:80:a8:
60:d9:66:8d:42:dc:53:0c:70:bf:95:be:af:b7:21:17:83:14:
58:61:9e:29:c1:64:60:c3:8e:35:54:9c:7f:3d:aa:18:95:b7:
0a:db:a6:db:e0:63:9a:e7:ea:e3:69:e9:f5:3f:a3:f3:ff:88:
97:29:94:4b:18:bd:3b:fc:96:ac:6d:c1:e5:2b:2a:d3:9d:b4:
5d:2f:64:92:d0:e5:d0:e2:da:85:e9:1b:5f:a8:80:f3:b9:02:
59:1d:fe:b3:5e:6f:de:f6:89:c5:45:79:b1:c3:2e:56:74:0b:
1b:5a:d5:47:e3:ad:32:fb:b6:a3:de:c9:a6:fe:68:24:bd:f2:
8c:23:7e:b5:e9:cf:b7:15:fc:66:a3:70:54:08:16:7c:64:0d:
5a:b0:6c:15:f3:b6:93:31:30:c1:00:2b:c3:59:df:75:3b:33:
5b:02:5d:e3:0f:df:e4:59:e7:e0:db:dc:78:28:31:1c:28:12:
f0:f4:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:16 2025 by rpki-client