Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ed3efa1-575c-3af6-91dc-949a7dff834a.roa
File: 9ed3efa1-575c-3af6-91dc-949a7dff834a.roa (raw, json)
Hash identifier: wf53KxcsLhrlfNh8Ae7Dxu4J/bIJFWKPzCFbbdoXqv0=
Subject key identifier: D5:33:CE:53:AF:72:29:D9:E8:E9:7B:60:2B:BA:67:C6:A5:FF:45:DA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC7ADF147AF9EA861CBC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ed3efa1-575c-3af6-91dc-949a7dff834a.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 75.88.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c7:ad:f1:47:af:9e:a8:61:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=48bce9ee-3b2c-40f8-ba9d-7ac04bf06137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:74:97:ff:3e:1b:d1:e1:cc:76:23:78:bb:
ce:70:d5:07:b4:a8:0a:e4:e9:3d:f3:6d:6c:4b:97:
5f:32:5e:5f:14:0c:20:18:f5:6c:0b:7e:92:59:a0:
91:cc:9c:0f:93:73:fa:6b:17:68:19:00:10:d6:84:
c8:a7:b3:1a:75:99:c1:60:1d:56:7d:d5:fd:e7:b8:
dd:6b:3c:9e:a3:e9:19:38:f3:aa:56:92:3c:28:3d:
9a:a8:ea:87:25:a1:3e:a6:7b:6c:0e:b8:d3:6e:40:
87:ee:aa:af:13:c0:b4:4d:9d:38:e1:90:1a:e8:12:
fd:36:96:46:6a:1c:b0:ed:00:22:50:85:00:78:9e:
13:c1:75:3e:fb:2d:4b:c4:83:6f:72:88:5c:81:ca:
37:65:dc:64:8a:80:b7:e6:58:11:5d:b4:49:8e:9c:
96:50:6b:6a:b3:57:63:f7:67:5e:a5:93:c1:83:6d:
23:67:46:47:35:c0:b8:92:19:c3:1e:95:1f:15:04:
63:d1:be:7c:bf:ee:ba:7e:d7:4d:9f:95:06:78:69:
c4:0a:a2:30:f7:b9:c3:70:7a:af:29:c5:30:2b:ee:
76:7a:af:46:2e:dc:d2:ec:6d:47:94:31:91:da:9d:
d6:0f:17:fb:a2:09:eb:a5:71:f8:bf:86:6a:0e:15:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:CE:53:AF:72:29:D9:E8:E9:7B:60:2B:BA:67:C6:A5:FF:45:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ed3efa1-575c-3af6-91dc-949a7dff834a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c2:db:bc:5c:d6:95:ec:14:dd:eb:a8:07:f5:59:cc:41:a2:
25:20:b5:e0:7b:72:ee:d7:6d:89:a7:75:5a:34:64:e2:69:72:
aa:e5:9c:db:8c:eb:3f:1d:34:a7:e1:11:c8:5f:ed:41:34:9c:
78:c2:36:09:8f:01:d0:66:03:99:e1:87:e9:09:15:88:34:51:
3b:b9:44:f9:9e:b6:3a:28:ea:cd:7b:45:92:fc:b7:c4:9f:31:
a4:60:33:22:55:6e:7b:85:e0:36:98:bb:a9:e3:b4:55:af:4b:
bb:eb:1f:80:6d:16:e2:ea:aa:ad:38:81:1c:f1:fa:d4:23:8b:
03:bf:fd:b7:10:da:d6:12:15:b8:70:80:25:1b:1c:f5:73:5b:
e1:e3:af:47:c2:5a:96:6e:1c:79:48:8f:68:94:80:97:7e:72:
68:05:88:70:2c:92:92:b4:ca:3a:0b:b3:25:9e:c0:59:5c:5e:
07:9a:f1:eb:75:95:18:ab:33:92:48:c4:a5:3b:e0:a1:8c:44:
5e:fe:f2:24:46:39:75:e1:d2:29:09:8c:af:33:dc:91:cc:1b:
c1:3e:e4:83:73:e0:08:d0:e1:37:ef:da:32:dd:6f:ea:58:fa:
4e:f5:21:24:99:a4:af:4d:39:39:27:26:4c:d0:70:7e:cd:00:
28:6f:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:39:02 2025 by rpki-client