Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6ca4ff-98fb-3236-bc94-8f5d47ef1db0.roa
File: 8b6ca4ff-98fb-3236-bc94-8f5d47ef1db0.roa (raw, json)
Hash identifier: Ti0Dz/n+Cmx92eChkdXk4cG4AANmg/mV7krX3W3pxls=
Subject key identifier: 5F:31:5E:0E:E4:49:FB:84:5C:69:3F:9E:BA:1B:D3:A8:CB:0A:E8:25
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FFD275992C8EA810B9BD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6ca4ff-98fb-3236-bc94-8f5d47ef1db0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.32.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:fd:27:59:92:c8:ea:81:0b:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ef1d5bab-925c-43c0-89da-575b0c609085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:b6:d5:18:97:37:1e:25:38:66:31:33:59:
75:a6:7d:05:df:ee:2f:39:91:ca:13:79:91:db:93:
57:07:55:18:db:13:4b:38:e8:bd:82:80:21:5a:4a:
ee:c0:6c:97:aa:48:6d:33:2e:b5:1f:b1:c1:c3:c0:
6b:6d:71:a4:3c:61:c4:66:69:1e:aa:c9:54:66:f6:
92:e5:fd:03:c2:3a:91:c2:56:13:9d:ba:2c:cd:4f:
61:30:af:df:26:f5:1e:bc:53:90:ac:86:79:27:90:
aa:ad:53:3d:31:a2:2c:06:0b:82:a1:86:de:a5:2c:
57:ab:ff:13:84:35:32:17:a7:a8:36:76:c6:0f:3c:
f9:e5:c9:9f:a7:be:a2:3e:1d:19:29:c2:92:3a:66:
6f:79:6d:d1:d8:bf:bf:74:f5:a5:95:ae:53:3d:4b:
97:81:f8:38:0d:4e:32:a7:3d:5a:5f:44:da:13:15:
a7:b1:5c:51:95:95:f9:8c:3c:aa:ec:cf:1f:35:30:
3d:a4:58:0c:40:3e:6f:b5:eb:8a:2e:41:83:d5:47:
e0:f7:3b:69:b9:1e:79:5b:5f:63:bb:bb:a5:c8:d8:
41:0a:67:c7:05:a0:73:13:db:81:c7:93:39:16:bf:
d4:73:ca:0e:ce:ae:0c:9c:ec:80:79:a8:b4:31:f8:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:5E:0E:E4:49:FB:84:5C:69:3F:9E:BA:1B:D3:A8:CB:0A:E8:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6ca4ff-98fb-3236-bc94-8f5d47ef1db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:da:f4:d4:1c:61:75:f8:81:98:35:81:b1:7e:1b:59:d3:17:
c2:ce:40:df:3f:99:96:7d:fb:75:db:c7:09:0b:e9:16:02:23:
42:77:f7:c4:3a:3b:cd:9c:c0:7d:bb:c8:e7:1b:ea:1d:28:28:
b7:b3:da:88:72:36:f0:be:ee:bc:a1:5b:db:b0:e5:82:ea:be:
02:98:cd:c0:c8:0d:35:dc:d2:3f:5b:d0:71:83:20:b9:8d:07:
c3:26:07:15:e8:2d:1d:b4:e3:45:4b:c3:94:7e:df:10:9b:82:
0e:48:e5:c0:e2:f1:5f:d9:d4:b0:f3:f8:23:e0:31:ff:f9:c8:
73:63:96:ee:82:2f:8a:e4:1d:14:e6:95:c5:c7:13:33:73:0d:
c8:c0:25:55:57:fd:bd:c3:ca:cf:ef:f8:6c:4e:7f:b6:f6:c7:
ef:a2:4d:77:e5:24:f3:7d:8f:3f:c4:63:de:59:bc:81:e3:d6:
ff:37:6a:dd:bf:a0:56:0e:60:ec:4e:d7:16:f8:69:0e:c6:73:
0b:04:07:8a:4d:a2:79:2b:15:66:db:c3:50:4c:4b:4e:4e:35:
b3:0f:66:cc:6e:eb:7d:95:e8:85:e9:b1:ff:13:fc:fd:53:6a:
25:0d:a6:38:fc:51:d5:ce:6a:67:99:f5:2d:1c:21:63:9a:75:
93:b1:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:13 2025 by rpki-client