Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0588724-e7ee-3388-ba55-cabad9db94c5.roa
File: c0588724-e7ee-3388-ba55-cabad9db94c5.roa (raw, json)
Hash identifier: jedrYEp1g1DrGHgm/wyFKepn6qlj4vNLHqG3GBCC3+Q=
Subject key identifier: 6E:05:FA:10:0C:BB:59:3E:06:EB:AB:C1:B7:7C:3D:46:DC:60:DF:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849218417D45C64EE77AB34BF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0588724-e7ee-3388-ba55-cabad9db94c5.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 33656
IP address blocks: 73.24.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:17:d4:5c:64:ee:77:ab:34:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=34fe3eb0-b4db-4726-83da-ff9a260f02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:90:93:c6:48:4e:b8:7a:58:2e:83:55:31:
af:2a:f7:c4:0f:e0:64:17:ac:34:2b:02:c3:6c:88:
1e:65:ea:8f:af:a1:3c:9d:5a:b7:54:f7:91:63:ae:
00:bb:4a:6c:bf:3a:2a:62:cd:53:a7:02:0d:ed:6a:
fc:09:6b:55:ee:f2:00:72:ce:a9:5e:00:1f:04:bd:
81:82:77:58:68:e8:b4:b9:f6:c3:e7:f6:96:71:25:
f6:38:1b:ce:94:87:c8:17:04:ed:ff:a3:8e:3e:13:
70:95:a8:59:3a:4f:b5:65:13:75:1d:ac:67:7a:18:
26:e4:a6:5b:9f:36:60:67:8e:5d:3b:6f:32:84:57:
87:f9:d3:b0:ac:04:64:d6:5a:5b:3c:fb:65:7a:29:
1e:27:59:d9:89:9d:1e:3c:2a:cd:d8:6d:6e:89:46:
05:19:e4:6d:69:79:bf:d0:45:89:8a:2f:75:34:0d:
57:c9:17:a2:40:61:c5:03:5a:7a:ba:68:84:b1:87:
9e:40:08:d6:52:d8:f0:43:6a:ce:cf:47:10:57:cb:
d5:5b:98:58:6a:6b:33:1c:88:e9:63:bb:d0:ba:2c:
14:e3:bc:1f:89:ef:c5:aa:4f:9f:f8:fe:87:ac:46:
02:b3:79:5c:aa:d3:90:61:ad:6c:f7:79:76:28:86:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:FA:10:0C:BB:59:3E:06:EB:AB:C1:B7:7C:3D:46:DC:60:DF:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0588724-e7ee-3388-ba55-cabad9db94c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.24.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:68:19:07:1b:08:3b:e1:e0:25:60:23:36:27:a3:f5:62:1f:
89:7e:2a:ec:8a:4e:3b:58:84:00:98:df:d0:c3:e4:02:72:d0:
f0:f8:19:b2:a9:f2:c9:b0:1c:af:01:af:69:3d:f0:c7:70:9f:
f3:0b:4a:9f:d8:88:fe:5a:da:c9:0b:6a:fc:24:d9:48:77:15:
92:d7:94:fe:3b:4f:2f:53:65:7c:93:a4:68:df:43:70:f5:06:
16:88:c9:64:b1:f1:7c:46:2b:ae:3c:9c:c2:49:be:f5:c2:51:
41:ec:c7:94:46:72:cd:32:ba:d1:d8:f8:ba:1e:2e:de:08:c1:
70:1f:1c:2b:ab:f4:ca:b2:a3:ce:26:2d:b7:8c:d8:7f:c0:3e:
e3:93:ad:65:9c:40:5d:e7:23:73:98:51:07:13:d2:e7:50:6c:
7f:86:2e:f4:18:9d:ac:b0:50:95:c4:4a:d6:f2:0a:40:82:84:
d0:c9:7d:f6:a6:c5:a8:27:a4:92:f4:76:03:17:0c:a1:6b:78:
11:89:32:a9:7b:67:f1:66:0b:c4:fd:51:e3:b0:28:35:4f:f5:
cd:97:57:b1:6c:71:b0:b8:9e:bd:04:68:5d:15:a6:97:42:ee:
5f:64:eb:af:f6:28:c9:39:4e:7c:e6:9b:b5:52:25:6e:ee:49:
0a:3a:42:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBfUXGTud6s0v4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MzRmZTNlYjAtYjRkYi00NzI2LTgzZGEtZmY5YTI2MGYwMmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCQk8ZITrh6WC6DVTGvKvfED+BkF6w0KwLD
bIgeZeqPr6E8nVq3VPeRY64Au0psvzoqYs1TpwIN7Wr8CWtV7vIAcs6pXgAfBL2B
gndYaOi0ufbD5/aWcSX2OBvOlIfIFwTt/6OOPhNwlahZOk+1ZRN1Haxnehgm5KZb
nzZgZ45dO28yhFeH+dOwrARk1lpbPPtleikeJ1nZiZ0ePCrN2G1uiUYFGeRtaXm/
0EWJii91NA1XyReiQGHFA1p6umiEsYeeQAjWUtjwQ2rOz0cQV8vVW5hYamszHIjp
Y7vQuiwU47wfie/Fqk+f+P6HrEYCs3lcqtOQYa1s93l2KIYG0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4F+hAMu1k+Buurwbd8PUbcYN+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzA1ODg3MjQtZTdlZS0z
Mzg4LWJhNTUtY2FiYWQ5ZGI5NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSRggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtoGQcbCDvh4CVgIzYno/ViH4l+KuyKTjtYhACY39DD5AJy0PD4GbKp
8smwHK8Br2k98Mdwn/MLSp/YiP5a2skLavwk2Uh3FZLXlP47Ty9TZXyTpGjfQ3D1
BhaIyWSx8XxGK648nMJJvvXCUUHsx5RGcs0yutHY+LoeLt4IwXAfHCur9Mqyo84m
LbeM2H/APuOTrWWcQF3nI3OYUQcT0udQbH+GLvQYnaywUJXEStbyCkCChNDJffam
xagnpJL0dgMXDKFreBGJMql7Z/FmC8T9UeOwKDVP9c2XV7FscbC4nr0EaF0VppdC
7l9k66/2KMk5Tnzmm7VSJW7uSQo6QiE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:34:11 2025 by rpki-client