Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
File: c243a375-2e4b-3391-8643-ce860578a4b0.roa (raw, json)
Hash identifier: Z616UWDvqi9TvfneJ8Bqgxxz5mfWdYy/dpu60eWMkXk=
Subject key identifier: 58:1D:A5:25:B2:02:DF:B2:03:29:92:31:CA:86:81:43:92:3C:57:75
Certificate issuer: /CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
Certificate serial: 010D0C9F432858493ED3D22A4B6857222368C000
Authority key identifier: 38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 18632
IP address blocks: 104.200.192.0/20 maxlen: 24
107.182.32.0/20 maxlen: 24
170.75.128.0/20 maxlen: 24
2604:3600::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d2:2a:4b:68:57:22:23:68:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=b32a0285-58ca-4c17-919b-1a9688fa412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:11:63:c2:ca:c9:0b:ec:96:1f:19:84:18:
85:53:f7:f6:10:5d:00:9d:80:49:0e:11:f6:4d:4d:
0c:74:05:e9:7f:b8:20:6c:15:66:16:3f:d8:f4:1e:
cc:04:dd:31:73:9e:00:be:29:91:22:20:17:66:36:
c2:a6:8c:66:af:a0:40:d9:65:07:8e:b0:34:8a:8a:
7e:95:3b:5a:93:ab:ca:36:78:fd:46:a2:2f:3e:b2:
c0:ff:9e:96:0c:52:22:df:f1:6a:6f:ba:79:72:ce:
48:fc:07:0c:a6:cb:23:2f:9d:48:8b:ef:d0:a8:9f:
d6:b8:f3:8b:eb:a7:55:71:8d:32:b8:0b:11:de:50:
5a:3c:50:73:e8:4d:e6:ca:06:eb:ec:84:a5:6f:07:
18:f0:54:71:e2:f2:7b:cb:0f:9b:cb:6b:fe:39:14:
15:af:97:a6:41:17:16:e0:73:c3:b2:3f:69:18:c4:
93:f9:9d:69:5c:7f:e1:22:d8:1c:ab:cc:62:30:69:
c4:53:23:b4:8f:5a:9b:6c:7d:f2:22:c2:05:fb:bb:
1c:74:6e:98:e7:65:15:ed:93:7c:cb:2a:ba:ac:ec:
7d:80:96:d0:8c:33:80:12:a7:3a:5e:9f:88:f8:d4:
c4:04:2d:d5:29:26:e8:fd:93:23:e9:4a:f8:c9:3c:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:A5:25:B2:02:DF:B2:03:29:92:31:CA:86:81:43:92:3C:57:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl
X509v3 Authority Key Identifier:
keyid:38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.192.0/20
107.182.32.0/20
170.75.128.0/20
IPv6:
2604:3600::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:45:fc:f3:05:7f:8f:b1:7c:31:fd:b6:d4:eb:dd:21:17:d5:
5d:05:6e:43:82:92:4c:7e:2d:38:db:4e:54:f1:37:26:f0:51:
e4:80:a5:5c:d7:c9:58:cf:f8:7a:4a:4a:56:dc:b8:b6:f0:69:
5c:ea:13:86:20:8f:94:53:bb:13:d6:fa:01:21:e0:d9:57:3e:
5c:84:26:71:73:b9:c5:20:cd:94:2b:0a:59:5f:f4:bc:cd:cb:
6b:bf:89:b9:84:44:3f:38:0a:2a:27:be:cf:39:d3:e7:90:c2:
ff:d8:43:d6:20:da:27:39:36:75:cc:a4:d0:04:60:c7:76:c9:
84:af:a1:5b:ff:07:1d:49:ae:a5:a4:83:4c:9f:20:0b:8f:e1:
ab:43:b1:5d:a5:69:48:41:b1:fe:6c:d6:f1:35:a0:fd:f0:0d:
c5:f6:3a:9f:57:16:80:2e:12:f8:49:0e:b3:cd:06:90:a1:0b:
47:25:19:e9:2b:fb:b1:ba:a4:7b:54:a9:12:51:27:ad:e2:b0:
45:13:7d:98:58:4b:81:21:09:ab:d1:96:da:fb:e5:5d:b5:7d:
70:56:d2:8a:0c:da:de:1b:78:f5:a8:3f:cb:04:d3:23:ab:0d:
da:62:ed:eb:86:33:06:ac:a6:28:bd:ac:cd:df:2b:ed:6a:98:
b0:17:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:54 2025 by rpki-client