Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39015ca0-ee94-327c-a9a8-a7e457d22c4a.roa
File: 39015ca0-ee94-327c-a9a8-a7e457d22c4a.roa (raw, json)
Hash identifier: RbKtLiIZM6KRQr49+Cre+lssmj5dPDNuhXv8NLCWFko=
Subject key identifier: 64:DA:67:56:28:41:57:D3:60:59:F7:71:5B:5D:E7:3F:17:DB:BD:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F830907383020BD73BE1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39015ca0-ee94-327c-a9a8-a7e457d22c4a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.11.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:30:90:73:83:02:0b:d7:3b:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=163260ed-ac6b-4aa5-9f1d-01947bc05068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:ef:ac:c1:28:b9:b9:b8:f3:12:07:b0:59:
f9:4b:f4:ab:0e:bd:8b:cf:d1:a5:38:23:9b:21:cf:
e1:91:d3:4a:a0:ac:d7:35:8d:95:75:77:3d:b7:8c:
bb:51:46:32:c0:3d:7d:4a:b9:4b:7c:d9:d2:d0:20:
30:90:c8:33:75:6a:70:38:96:a9:d3:65:dd:ce:a1:
8e:42:66:10:2a:fc:e9:e7:1f:aa:49:09:dd:c1:52:
0e:af:a1:7a:49:53:c5:d9:8c:b9:11:3b:c8:e2:7d:
7a:10:6e:ea:4b:86:51:78:04:86:72:ef:3a:27:ec:
55:59:87:fd:95:e1:47:22:b5:75:6f:db:30:e5:82:
4c:07:b8:3a:29:1f:f0:de:c5:88:5c:09:41:ab:2e:
16:e8:ea:90:6e:dc:5d:60:be:46:18:e4:8a:b7:68:
d2:cd:1b:34:0e:f5:b9:16:fb:7f:d9:16:4d:65:a4:
45:c3:95:e3:5a:27:64:bd:1f:e3:69:8b:d5:1a:5d:
9f:02:ed:02:8e:4b:db:39:8b:65:ec:fe:a8:dd:12:
74:cd:3d:b4:43:14:cb:c5:c2:1e:22:de:3c:a4:f9:
ed:7e:2c:15:3c:82:bb:6e:35:37:5d:d6:00:6d:99:
e7:18:92:cf:07:ce:39:1a:d3:84:49:e6:be:1f:4d:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:67:56:28:41:57:D3:60:59:F7:71:5B:5D:E7:3F:17:DB:BD:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39015ca0-ee94-327c-a9a8-a7e457d22c4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.11.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:b5:91:4d:b4:5a:bc:98:17:6f:05:37:49:fa:68:ac:8e:73:
f8:7c:3e:be:8a:e9:b2:47:14:a2:7b:5d:3f:0e:bc:07:6e:82:
12:b3:90:52:33:84:39:29:e0:20:fa:73:cb:c6:f3:e2:6c:ab:
9f:64:a9:53:33:be:7a:e5:a8:84:c1:bf:60:e1:9b:d9:74:3a:
46:45:57:14:1c:eb:6a:6d:e2:8e:90:67:8d:b0:d6:f7:c4:59:
1e:25:6a:e4:03:68:4e:8c:64:a4:09:aa:24:57:d2:d8:91:a1:
0c:cc:1a:a5:f6:ea:31:64:09:67:db:ea:6d:bd:4b:b1:72:f1:
5d:d1:78:6b:a5:60:6b:f1:73:c0:a3:77:3a:0b:32:dd:c7:6d:
51:6e:d9:f2:57:c4:c6:cd:0b:b5:a5:c1:0e:17:90:18:50:07:
59:20:cd:49:3d:d6:90:8e:cd:2b:0d:b3:25:09:7e:f1:55:63:
9a:41:8a:bc:33:b5:99:36:02:96:25:60:d7:d1:f8:00:64:ae:
c5:08:29:48:b8:3d:35:f2:81:9b:e1:f8:03:7c:de:dc:32:88:
d3:59:d7:2a:4f:9c:58:99:91:b3:df:17:ec:28:5d:0c:a9:63:
aa:01:0c:c5:eb:ce:ab:e1:d6:65:4d:46:c7:be:2d:4b:cc:23:
6d:ca:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:02:54 2025 by rpki-client