Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa5ac950-f0b7-3de2-babe-47750b8f4e59.roa
File: fa5ac950-f0b7-3de2-babe-47750b8f4e59.roa (raw, json)
Hash identifier: bppd12JdqnUFK9pGJMz9Tv9eK1oP64bYJIAw4lPc5j0=
Subject key identifier: C4:02:C3:25:5E:9C:2B:C7:F5:34:54:98:5D:10:D5:9E:F2:DF:90:07
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847ED6BD33B400689180C140700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa5ac950-f0b7-3de2-babe-47750b8f4e59.roa
Signing time: Tue 19 Nov 2024 04:23:47 +0000
ROA not before: Tue 19 Nov 2024 04:23:47 +0000
ROA not after: Mon 17 Feb 2025 04:23:47 +0000
asID: 7029
IP address blocks: 75.117.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:6b:d3:3b:40:06:89:18:0c:14:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 04:23:47 2024 GMT
Not After : Feb 17 04:23:47 2025 GMT
Subject: CN=a1d3dbeb-8cd8-4b23-b0ad-7a5337c6b23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:e1:66:bf:41:19:4a:3b:25:84:f7:df:f2:
f7:56:dd:cf:03:a8:49:db:4f:eb:5b:c0:d7:dd:fa:
f6:e3:39:c8:93:f2:9f:89:cf:45:8d:c2:22:e6:73:
62:a9:17:7f:6c:46:c6:4c:3d:2a:00:92:8d:3e:67:
b9:96:9b:5f:83:90:c0:fe:a5:09:33:04:0e:8b:09:
7f:00:8b:15:39:40:4d:48:fa:6a:44:04:19:6f:fa:
b4:b5:78:c2:1c:1f:6c:9b:6e:a0:44:c0:91:18:2a:
84:15:dd:34:5b:16:a3:30:da:97:1c:34:bf:3b:40:
c3:7f:e3:64:7a:db:6e:0d:cf:c3:31:7c:37:2e:73:
71:ed:dd:41:06:4f:20:9f:ad:d3:f6:79:a1:df:1d:
ff:d0:9c:1b:64:14:23:a8:11:dc:3e:1f:61:78:b6:
7e:ae:91:58:9a:6d:ef:bf:5a:fb:02:53:18:1f:d5:
67:3f:85:65:ee:21:33:b8:f7:50:e5:1c:34:bb:94:
45:97:07:92:da:7a:03:90:f9:d7:08:7c:cf:e4:03:
a3:b2:75:9a:44:b2:40:f8:cd:d8:02:e0:a7:bf:45:
88:a9:f8:76:d0:72:0e:ae:13:ff:61:e9:42:53:1c:
4c:db:a2:27:04:58:34:7d:0a:21:eb:b3:31:a6:be:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:C3:25:5E:9C:2B:C7:F5:34:54:98:5D:10:D5:9E:F2:DF:90:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa5ac950-f0b7-3de2-babe-47750b8f4e59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:67:e4:f9:47:2b:be:ce:8f:a4:e9:e4:5b:df:c5:3e:71:08:
95:31:34:a4:a9:a0:30:04:6d:43:76:fa:aa:6f:56:a5:91:b9:
38:b4:22:ec:74:1d:23:a0:ad:62:97:c6:04:cb:5e:af:fe:e0:
ac:39:d2:87:d6:a9:84:99:f5:64:f9:87:c6:57:f5:b8:95:55:
18:f4:a7:77:f0:e0:dd:79:be:12:17:c4:e1:a0:77:02:07:e9:
b8:8b:10:92:0f:66:2f:4d:57:b4:0b:89:2d:2b:44:12:0f:9a:
8e:3b:12:23:17:59:85:47:e8:74:aa:dc:f8:d6:ed:9a:ce:f4:
9c:67:32:38:54:6c:6a:ed:6d:ce:ae:6f:6c:db:e8:60:fc:47:
77:2f:64:60:b0:bd:b0:d0:38:16:41:b3:be:06:b5:c1:35:6a:
a0:a2:c3:59:09:cc:7c:14:e3:bd:c2:51:c7:c3:a6:5b:3d:51:
41:41:71:70:87:b6:55:8c:6e:90:ba:9f:7e:04:0c:25:7d:6b:
a3:f6:5a:46:11:c0:84:ce:29:b8:b8:26:4c:58:cf:79:cd:a1:
cd:60:e4:25:3f:2a:5d:68:9e:ac:72:11:50:a6:a6:d9:0c:83:
9c:20:f7:9b:8d:dd:48:2e:9f:e9:47:32:ef:95:b5:db:93:da:
e4:cc:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:52:04 2025 by rpki-client