Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93872e04-e548-3bc8-892d-811790425735.roa
File: 93872e04-e548-3bc8-892d-811790425735.roa (raw, json)
Hash identifier: wEtRMUnwDtKNqvK36MygVO8IHlFgC/d82gfzKhUykC4=
Subject key identifier: 09:44:38:67:72:4A:32:80:44:0A:FA:13:37:DF:C3:8E:3F:A2:23:26
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F935F19FAAB248D0CF71C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93872e04-e548-3bc8-892d-811790425735.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.32.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:35:f1:9f:aa:b2:48:d0:cf:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3befa5e2-3c20-49e6-90cd-fe8aaa1cefe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:00:c3:bb:58:f2:23:91:91:6b:34:4a:da:
af:12:72:28:cc:b4:7f:0b:e6:b2:e2:f8:a2:81:a4:
b1:bd:2a:a5:4f:20:c9:18:72:e2:cc:7f:77:c5:0c:
40:11:6c:26:53:89:24:3b:bb:89:b5:a2:95:fb:95:
fc:3c:14:84:ed:c7:20:d8:b1:e2:2b:12:89:51:96:
db:e5:48:5a:44:79:57:69:4d:d0:e4:70:e9:7d:47:
94:5f:d6:bb:26:d3:d4:76:28:96:aa:68:5e:f0:6b:
cb:88:91:a3:bd:e0:a5:f8:6e:e9:05:54:a9:e8:a3:
b5:f9:6c:68:a0:de:9b:d3:f0:5e:bb:e1:7b:aa:cb:
61:a3:4f:14:8a:dc:7e:29:e1:de:1c:33:38:3a:a3:
94:75:8b:7c:24:19:ae:4e:fc:0d:ac:82:69:e7:c3:
05:69:8b:d9:80:8b:6c:35:f8:7c:0d:e8:bc:7c:5b:
0b:15:6c:cd:5b:b2:86:a5:aa:9c:61:ba:6c:0b:be:
e5:ce:db:2c:1f:13:9a:60:d4:61:e6:9b:e6:4c:1f:
a4:d8:6d:10:d8:4b:4f:9a:3b:63:15:5c:61:81:93:
d6:3f:ba:97:c9:80:31:fb:79:f4:0e:55:23:1d:e1:
ca:2c:40:9b:42:2a:14:f2:c1:dd:41:e7:37:9a:95:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:38:67:72:4A:32:80:44:0A:FA:13:37:DF:C3:8E:3F:A2:23:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93872e04-e548-3bc8-892d-811790425735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:be:df:6b:6c:81:ed:6b:6d:16:38:f7:fa:a1:43:ef:85:2b:
4b:9d:f9:10:e8:7d:34:09:87:64:2a:d7:2c:6c:e8:4a:7b:b8:
3c:03:64:12:a1:c0:d5:32:35:71:06:bb:18:9d:93:0f:ea:9c:
67:aa:53:fc:cc:83:39:a3:29:8d:db:d0:13:94:10:28:e7:f1:
a2:2e:00:2a:91:29:f5:37:a4:44:08:8a:a9:c9:5a:24:2a:47:
2e:38:f3:d3:4c:11:f6:fb:cd:c0:46:06:2d:b7:31:96:ae:03:
91:a5:43:b0:b8:29:2b:58:2e:eb:fe:fb:56:68:bd:a0:47:a2:
e8:f9:df:14:3d:d7:a3:83:6e:af:ef:6a:b1:68:c1:c7:60:ae:
7f:ed:d4:2b:e0:2b:cb:e8:77:c5:17:66:a6:15:d6:fe:9d:83:
3e:40:97:aa:9d:e7:51:d2:d1:de:41:55:7e:8d:fa:1d:5d:72:
f3:a2:46:bf:5c:12:46:33:38:34:c2:a3:69:0d:9f:45:37:cd:
dc:b4:04:d9:1d:5b:a5:9d:9c:e8:62:2f:77:2b:30:8b:dc:ac:
44:48:ca:bf:48:09:da:9a:9e:fa:c7:30:ad:bb:a3:7e:13:09:
5d:22:45:c8:df:44:50:6b:c6:d3:07:6b:bf:c0:81:5c:25:fb:
e9:68:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:17 2025 by rpki-client