Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/432460f0-221f-3e7a-896a-f18de5f0fe4f.roa
File: 432460f0-221f-3e7a-896a-f18de5f0fe4f.roa (raw, json)
Hash identifier: WVlkGqy9i9i981+xNEXfm+UgNzQgSWkhmSQbNt0npeM=
Subject key identifier: 44:45:53:19:7E:72:01:99:2C:CB:01:CD:15:3E:89:DA:11:D2:C8:07
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FE038F9482C83809E400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/432460f0-221f-3e7a-896a-f18de5f0fe4f.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 75.88.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fe:03:8f:94:82:c8:38:09:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=88e918df-c426-46fd-ad46-5ad26c91737f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:56:c6:e9:7a:f4:ee:21:7d:fd:5f:92:2e:
1f:bd:f1:d6:11:12:83:77:f2:82:9d:8b:8f:f6:98:
da:76:58:ea:18:9b:8b:41:3a:a0:d1:81:81:1f:c2:
d9:5f:ac:04:da:19:c3:7c:b8:e0:7d:c7:40:85:f4:
63:96:f2:a6:b6:da:9f:9f:29:ae:5f:69:36:fc:38:
82:03:ed:0e:e2:b2:bb:b7:1a:8d:56:58:a9:7a:17:
8b:68:1d:54:78:b8:cd:7e:f0:cd:9b:17:f2:25:7b:
c9:df:98:9d:7a:6b:c6:39:8e:46:a3:e6:2a:b6:64:
e5:59:25:47:06:d8:2e:fe:ca:96:80:8f:57:63:3b:
04:35:13:51:60:62:ee:3c:ba:c2:9c:53:b7:e6:f7:
86:47:14:74:0e:ce:d1:b4:d7:e3:22:03:13:67:d4:
91:f8:48:64:ee:8b:30:f7:01:b4:df:39:d5:8f:30:
cf:a5:04:fa:41:db:5d:06:49:d7:c0:26:8b:5c:4c:
0f:ff:2e:01:51:9c:9b:b5:c1:a3:1c:a7:65:ae:90:
20:95:0c:85:b2:90:58:95:4e:9f:11:b0:01:c6:42:
af:8c:0e:11:a3:23:f4:59:30:a7:86:77:4c:de:56:
5e:84:82:c2:4e:bd:d3:aa:fa:17:6b:75:37:47:dc:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:53:19:7E:72:01:99:2C:CB:01:CD:15:3E:89:DA:11:D2:C8:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/432460f0-221f-3e7a-896a-f18de5f0fe4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0a:8b:c7:a6:c3:a6:20:48:e9:29:ce:03:2b:d2:9f:c4:91:
0a:65:36:49:7e:fc:8c:3c:9e:9a:b0:48:af:2a:82:ef:0d:70:
55:3c:38:0e:74:e3:59:89:11:56:45:86:2d:cd:b8:6b:5e:62:
b8:d7:8c:57:c2:0e:f1:ad:c7:a1:4c:f3:c7:ff:d0:53:91:83:
a0:df:e6:cb:ae:af:ea:bd:79:3b:be:69:fb:aa:d9:14:28:85:
6f:5a:45:08:88:ab:16:b9:dc:05:3d:a8:10:ec:34:46:13:7a:
ba:5d:eb:c9:19:90:c0:31:e6:83:8f:fc:5a:91:4c:5e:82:9f:
7c:0e:49:aa:67:5c:47:67:c1:79:09:c4:57:63:33:3e:10:da:
9a:02:e1:a7:31:fc:9c:d9:cf:fe:6d:88:70:21:b5:13:c3:47:
e0:7c:8b:02:bb:fa:1a:79:b2:2c:b7:9c:d6:9f:2b:99:ca:e3:
db:fa:ed:4f:4c:13:ba:9f:d8:6b:dc:46:54:71:9b:60:69:bd:
05:fd:4f:e2:bb:34:03:6d:fc:a3:88:35:0b:a8:14:1e:e5:40:
d5:dc:a3:d8:49:18:4e:57:88:0a:d0:27:ee:b9:d0:52:30:f2:
ee:57:37:67:fc:74:9c:7f:b2:ae:99:65:37:6f:87:cd:07:84:
93:05:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:52 2025 by rpki-client