Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93872e04-e548-3bc8-892d-811790425735.roa
File: 93872e04-e548-3bc8-892d-811790425735.roa (raw, json)
Hash identifier: Rn5evcMcRbrA+tYk3+zLck5+SikM+HgBl92j/bMP0+E=
Subject key identifier: 03:E6:35:C2:3E:3A:63:6A:F2:69:44:B1:60:E9:02:83:D5:0D:5E:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144000314ABC2CE07CAA7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93872e04-e548-3bc8-892d-811790425735.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.32.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:00:31:4a:bc:2c:e0:7c:aa:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ae4224ab-ee1e-4de7-9731-4df77a239860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:e5:79:99:49:88:74:55:86:06:84:a9:be:
70:60:5c:b8:e4:e0:e2:9f:91:a3:0a:51:59:28:26:
de:e0:09:d0:9b:4c:d2:5c:52:98:ab:c7:68:bc:11:
98:88:cf:52:f8:99:71:05:61:e3:6f:b3:cd:a4:d5:
65:30:9b:e8:e8:81:d3:fd:fe:d9:16:ec:25:3a:cd:
1b:80:6f:b5:a1:da:c0:e4:9e:9e:8c:1c:58:b4:68:
99:24:d0:b7:bf:fb:29:29:00:d5:dc:46:52:92:cd:
c8:3b:86:a9:1f:16:98:c7:ce:d7:71:db:e9:83:db:
97:2f:3a:ff:a0:5e:6c:bd:7b:88:c3:38:08:d0:ee:
d7:23:d8:18:20:e9:54:d9:fd:68:b1:37:4f:4f:a4:
f6:ae:f6:70:9d:1d:72:d3:4c:b8:f9:46:b3:15:15:
a5:78:e4:1e:59:0f:39:86:26:2c:13:d3:f6:7f:d4:
a8:2d:6b:e7:a8:86:2a:5f:bd:18:5a:8c:5a:45:16:
84:ba:87:fa:a0:c8:60:88:96:13:15:30:38:75:ac:
33:9d:5c:82:ce:55:ee:fe:57:18:f2:1a:7a:e7:8e:
ca:a3:08:3d:a7:9d:4a:ec:52:ee:78:74:5b:b2:47:
ff:e5:bf:68:95:4d:38:56:c2:41:4d:df:92:ec:40:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:35:C2:3E:3A:63:6A:F2:69:44:B1:60:E9:02:83:D5:0D:5E:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93872e04-e548-3bc8-892d-811790425735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:70:32:f3:c5:a2:11:9a:ef:55:db:a9:e6:8b:f6:e4:79:14:
06:a9:9f:dc:35:8d:21:70:b4:c6:4d:ff:bb:f1:1e:39:d5:19:
a9:55:a9:9c:70:1d:08:49:c6:5c:d4:31:d6:c0:fd:a9:9e:5e:
1d:d7:40:9e:fb:08:8d:fc:b3:82:2e:5f:e9:5d:a6:6b:b7:b2:
46:bd:ce:f4:b2:b4:0f:d0:96:41:03:e0:c0:1d:89:ef:b1:ea:
f4:06:bc:c4:a2:2d:87:35:58:81:b5:ec:6b:ad:a0:6b:d8:c2:
ed:4e:e8:8d:80:8a:7c:88:3e:b8:9a:e2:12:3c:35:b1:53:cc:
0d:88:48:b6:d2:22:27:ae:fd:bc:57:47:76:6b:ac:72:e1:f8:
ff:14:4a:7b:8e:7f:27:c7:08:e3:a0:10:fc:8d:46:2c:b7:ec:
83:39:3e:39:9a:ad:8b:cd:fc:92:25:dc:21:8a:69:78:01:ea:
07:d1:9e:17:6f:65:ca:dc:d8:d9:a1:0f:65:ac:91:7c:38:e3:
bd:d9:b4:54:b3:b7:1c:41:fa:c3:5c:c8:e5:6b:21:84:07:47:
bf:4f:53:c5:7c:b1:ed:c3:44:74:ca:ec:ad:4c:2a:6c:82:2f:
8a:35:ab:8b:f0:40:9c:e8:23:93:5f:51:ab:bd:0a:3f:1c:5d:
72:54:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:29:03 2025 by rpki-client