Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcce29e2-45af-3d42-b020-c10daae5860f.roa
File: bcce29e2-45af-3d42-b020-c10daae5860f.roa (raw, json)
Hash identifier: LCr5slRR5agge//b17Bz13Gwf+zRO6rlt6RC+ogLW2o=
Subject key identifier: 68:F4:06:6D:E7:00:23:71:20:A8:C8:88:B4:6A:34:E0:04:90:FE:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB56F0962DFB868800F2F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcce29e2-45af-3d42-b020-c10daae5860f.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 75.89.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:6f:09:62:df:b8:68:80:0f:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=436b1923-9171-472f-8f95-7a259b9677a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:7c:c0:97:57:35:b8:35:23:86:df:40:61:
cd:8f:ab:0a:63:1d:0f:84:f9:64:a1:14:13:29:49:
38:7c:90:81:d6:5b:bd:65:6d:fe:84:3f:a7:b1:fe:
76:5f:66:02:a1:9f:7d:3b:e9:36:7c:da:aa:7b:12:
b6:33:00:87:20:81:e4:f7:c7:36:b0:85:ad:9a:31:
d3:5a:42:68:c8:e3:44:9b:72:1e:d9:05:d3:30:13:
41:34:d1:84:af:22:1e:a3:c8:92:e0:f2:b9:87:15:
15:86:bf:5a:2f:9f:bb:bd:12:f1:a8:54:97:99:02:
51:33:01:4d:3c:32:71:a9:36:10:a8:69:f1:9e:e7:
03:59:e1:46:b5:12:16:f0:07:d3:7b:13:9c:83:ed:
f9:56:fe:1b:d0:62:53:5e:01:a2:06:d4:92:eb:1e:
4b:dc:9d:04:53:5e:31:ae:0f:02:11:26:4f:17:69:
86:77:0b:0f:c5:9a:77:2f:38:f1:e2:ad:8d:84:96:
c7:15:0c:80:8c:68:dd:b6:9f:5d:49:fe:04:99:d9:
c0:de:de:98:92:1f:e9:fd:42:cd:65:bf:b7:2a:76:
60:e7:11:3e:a1:9f:dd:08:5a:d2:7c:ae:bc:de:b9:
a6:3c:4c:1a:23:1e:44:c2:2d:de:3c:13:01:d3:d4:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:06:6D:E7:00:23:71:20:A8:C8:88:B4:6A:34:E0:04:90:FE:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcce29e2-45af-3d42-b020-c10daae5860f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:96:56:06:35:cf:a5:90:46:10:7e:77:01:a2:c1:47:fc:c9:
5d:f0:5b:91:79:bb:34:d9:75:95:e1:35:4a:ee:2f:20:1d:ce:
20:29:21:b4:5e:3e:0a:12:4e:61:3d:5c:af:09:a8:ef:8d:75:
3c:0d:21:f3:16:17:93:7c:df:d2:38:f8:4b:8d:93:dd:cf:c6:
59:bc:d8:e4:5e:23:74:52:91:9f:ff:61:ce:af:66:87:bf:ef:
b4:53:2e:f2:ed:bd:ce:f2:8c:ce:d2:7c:85:95:1d:41:f0:20:
1f:c9:2f:29:90:d8:10:75:26:6f:3d:73:eb:eb:91:a3:45:69:
b5:38:fb:f5:fc:aa:8b:70:04:4a:b1:6a:e8:28:a7:32:e6:f0:
db:79:7f:3b:be:bd:ca:d9:65:3f:6a:0b:7f:29:68:e6:3d:d2:
d9:79:33:39:f3:35:aa:37:4e:03:09:0f:11:dd:3f:d2:62:da:
fb:28:8f:fa:e0:2e:e5:3c:75:16:4c:ca:40:41:a1:78:cb:97:
c7:c0:29:f9:4e:c6:0c:df:35:99:91:d0:96:a6:79:0a:df:63:
7d:23:25:6e:00:1a:80:f9:e0:bf:4a:7f:a3:cf:62:a3:89:16:
6a:8b:f2:76:53:4c:92:61:44:1a:2c:0a:77:1a:ed:67:29:97:
fb:47:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:13:45 2025 by rpki-client