Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03c513a9-5739-3c5a-89a8-0cb4b6d01b3a.roa
File: 03c513a9-5739-3c5a-89a8-0cb4b6d01b3a.roa (raw, json)
Hash identifier: TPyzH4CHTQ760F6x6F25xZ1mlGs6kInoGZa0MWIZc34=
Subject key identifier: 2B:9E:1D:76:29:71:57:DA:FE:6D:A1:F3:27:A9:C1:97:C0:21:1F:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1438C23568E21D9ABD3C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03c513a9-5739-3c5a-89a8-0cb4b6d01b3a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.223.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:38:c2:35:68:e2:1d:9a:bd:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=47facbe0-bb07-46fa-a86f-cf7029df51c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:f2:55:27:da:da:14:4b:5c:e5:d1:ca:42:
33:84:88:b5:95:46:9c:b9:08:75:9a:93:9f:bf:1c:
34:2d:07:9b:79:3c:92:9e:e6:32:c7:fd:06:cf:46:
3c:9d:9a:35:e6:4c:89:a0:d6:dd:7a:ff:d3:36:b0:
74:b3:02:83:55:37:74:b2:e1:94:18:fc:e9:10:f2:
1a:77:6c:9b:4c:0b:0f:2b:c2:36:cc:cb:17:29:cc:
35:05:b1:bd:54:2e:90:9d:4f:63:fe:6a:c7:d7:b7:
f4:c6:71:89:0c:07:1a:c8:11:6e:d0:68:08:3e:f1:
86:14:45:67:99:cf:51:ea:43:5a:6e:28:b5:26:6f:
bd:99:06:1d:80:76:61:9f:b8:94:81:b2:49:ec:1d:
8f:ad:53:7b:55:3a:82:3a:11:0a:70:82:94:64:87:
47:89:0c:ce:28:ee:53:dc:4e:b4:de:18:7a:33:96:
fc:eb:34:5e:9b:f1:49:79:d8:e0:db:00:20:60:06:
65:8c:cb:45:14:af:f8:9d:26:f5:0c:ae:61:cc:94:
d2:fd:1e:75:11:94:dd:f6:84:57:bc:ef:6c:38:f4:
a7:ae:35:e4:f8:9b:ea:5e:75:55:6f:7b:ce:a8:d8:
e8:10:07:e5:e0:3f:6e:43:79:6e:70:fd:bd:a7:5e:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:1D:76:29:71:57:DA:FE:6D:A1:F3:27:A9:C1:97:C0:21:1F:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03c513a9-5739-3c5a-89a8-0cb4b6d01b3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:97:7a:08:1b:78:f4:43:99:b3:06:7c:b2:d1:7c:11:7d:a3:
cf:e5:f0:1c:82:d6:cd:a2:5f:55:6d:6f:bc:c9:5d:30:63:ab:
6e:7e:57:ed:e6:e6:9b:6d:e7:48:7a:d2:e1:f9:71:99:32:54:
14:3b:c5:74:f9:f9:e0:4d:1a:55:97:34:01:05:4c:94:51:16:
34:45:50:c1:0e:65:2d:e6:53:3b:9e:f0:71:ee:ff:1b:13:b5:
8c:bf:37:3f:51:44:3c:56:cc:76:12:85:f0:67:4b:66:37:ca:
9b:03:9c:ab:c0:bb:c5:ed:7c:d8:f8:3d:6f:f8:7f:0d:95:a3:
51:b2:63:d6:4d:38:ad:4d:39:7c:b4:d0:87:37:09:1e:5b:e4:
9e:f6:5b:a3:b8:33:0a:e1:b0:d2:a3:bd:91:50:ee:43:7e:51:
ca:d7:0c:52:14:5c:d3:e7:ec:2b:ac:c9:7e:de:74:0d:32:e0:
fe:bc:e5:18:83:5b:43:37:2d:36:dd:97:0b:66:cf:c4:29:e6:
d2:b7:b7:08:63:f9:23:45:b4:6a:33:77:88:fc:3d:b1:21:ca:
25:a6:a4:40:35:08:1a:68:64:54:15:2c:1b:95:c1:6e:fd:25:
f6:e1:5f:8b:ad:88:97:38:4a:0d:b9:f4:93:cf:a9:78:76:dd:
b0:cd:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:56 2025 by rpki-client