Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b89a6365-8e78-393e-bb31-7d79d69262a9.roa
File: b89a6365-8e78-393e-bb31-7d79d69262a9.roa (raw, json)
Hash identifier: iRqi+DZ7uxOlbeTrKzp6DHt0pzDsQp5eDYiEPMQG6zA=
Subject key identifier: 95:44:C0:53:C7:5D:EE:C0:80:5B:6D:4A:52:0B:5D:90:B1:67:93:0A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847FB1A2C1170806AA2BAB93000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b89a6365-8e78-393e-bb31-7d79d69262a9.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 7029
IP address blocks: 75.88.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2c:11:70:80:6a:a2:ba:b9:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=d5aa2702-9bd2-494f-a640-915139c9c413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:ce:7b:f0:fc:27:fb:03:e9:e5:ac:56:6a:
5a:b5:1c:34:0e:bc:3b:c7:20:31:07:a4:81:ce:8d:
a1:30:c8:98:88:13:0c:d9:ee:11:3c:02:c9:5c:87:
ed:c0:2a:7a:62:6f:74:87:60:79:9c:b2:ad:f7:bc:
f8:a1:96:04:04:c1:11:15:b3:6a:0e:e4:1b:c9:8f:
b2:65:90:09:b5:fc:65:ed:fb:cf:40:00:8d:87:71:
4e:28:b8:da:f1:ca:c1:67:92:32:59:d2:07:ce:f4:
88:a8:a0:11:ba:63:cc:54:01:a1:ef:30:fb:a7:75:
09:43:b9:83:ff:5e:a3:36:78:24:b9:29:cf:69:7a:
46:eb:78:38:7a:72:e6:b8:f6:27:5c:3b:a2:e6:c6:
7e:2b:db:46:90:c8:4f:b3:d9:ed:66:48:ff:7b:93:
8d:85:f3:f2:1a:cf:aa:8d:c1:1f:18:34:50:52:49:
9d:f8:83:c1:1d:da:a6:2c:7f:23:b2:5e:b0:65:d4:
e6:95:d0:a3:de:27:b3:34:b6:89:80:e7:87:b1:0b:
f9:87:7a:e3:da:ea:72:8b:48:a7:3c:55:58:8d:ba:
0b:ee:f1:07:35:a4:d8:4b:e7:20:04:1e:cb:1c:04:
ec:cd:30:41:7b:3a:11:1e:62:e1:19:f4:03:98:d8:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:C0:53:C7:5D:EE:C0:80:5B:6D:4A:52:0B:5D:90:B1:67:93:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b89a6365-8e78-393e-bb31-7d79d69262a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:52:cd:9e:ff:d4:ce:80:7c:15:7a:b4:fc:a9:b6:4f:31:d6:
ed:f9:ec:7e:c5:8e:fe:85:8f:b9:1a:08:c8:88:d1:c4:50:ad:
4b:8c:53:73:70:34:fd:ab:04:9b:ea:1f:13:dc:34:4d:af:f7:
49:c7:01:de:4f:f1:12:f2:fd:c0:93:75:10:5b:7a:28:ef:32:
1a:89:b5:c9:84:11:23:b7:43:21:74:07:81:03:11:50:5f:d8:
06:d8:77:4f:d9:38:07:f9:7c:a5:84:5c:fd:d1:4b:ae:bb:1f:
da:ee:26:03:e7:c6:56:8a:8c:8f:0b:41:d0:d7:92:df:b8:ac:
e7:63:05:65:d8:a5:c3:ae:69:af:ef:73:e5:f3:3f:bb:ba:cb:
9b:cd:64:6a:35:0a:01:58:ca:a5:67:11:db:72:d7:e1:c3:96:
8d:65:f3:e2:63:7a:4e:fe:52:c8:ef:cd:71:a1:c7:5e:a0:cc:
33:08:08:a2:66:a7:cf:4a:23:db:93:69:30:e3:b1:fa:2f:e4:
cd:0e:e8:a3:88:c1:72:15:df:62:21:5a:dc:c6:eb:b1:a7:ff:
3f:57:8c:ea:10:b7:ca:7f:c0:9c:0e:34:77:e8:74:e8:a7:b8:
19:9e:25:27:60:84:d1:68:8e:a1:36:19:55:71:cf:ad:d1:9d:
29:bc:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:55 2025 by rpki-client