Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/3c51e165-5f41-3f57-87bd-1612c15cfe00.roa
File: 3c51e165-5f41-3f57-87bd-1612c15cfe00.roa (raw, json)
Hash identifier: d3Y5vvLtxoskITf9IvjIxvt5N1FjrHiv5fySM3dgGio=
Subject key identifier: 56:04:E5:7B:B0:3F:7A:7E:15:82:85:5A:E0:CF:DB:5E:1F:0E:EC:3E
Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial: 010D0C9F43285848A6CB6AF18DFFC799B2E31F80
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/3c51e165-5f41-3f57-87bd-1612c15cfe00.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 23477
IP address blocks: 104.232.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6a:f1:8d:ff:c7:99:b2:e3:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=0780717e-e0bb-4fce-9643-810e9bd33e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:20:f4:92:20:e4:08:f9:cd:36:19:e5:4d:
68:15:ea:0f:ac:8d:02:19:cf:26:aa:ff:47:86:a2:
92:1f:84:c2:b1:66:04:e8:eb:1d:5d:92:2b:37:4a:
42:2a:2a:34:c2:f9:11:0a:e6:da:37:e2:e8:65:35:
65:29:9b:4e:4d:b0:40:0e:3c:89:d4:c5:81:17:ea:
c7:4a:c4:05:a3:48:8f:a0:fe:e0:e0:57:90:96:5a:
6f:cc:41:90:bc:32:98:af:a5:87:0c:dc:25:37:30:
8d:8b:a3:ea:ae:e6:83:f5:27:12:74:0d:d3:5b:25:
e8:ac:d7:6b:73:bc:07:ac:98:c4:4d:78:56:19:e0:
83:27:8f:5f:b8:d1:4b:df:97:8d:01:16:dd:37:68:
02:6e:c7:49:fd:34:99:73:d6:18:3e:e8:bd:dc:32:
ce:1a:d1:ee:34:dd:92:49:4d:46:3e:e2:46:3f:dc:
b1:7b:11:2d:b9:b5:9a:9f:81:39:3d:ee:d3:c8:2e:
42:e6:3a:6a:22:db:db:1c:b8:39:9e:98:8b:14:14:
dd:41:34:21:df:93:cd:0c:0a:9d:4f:43:27:d1:a6:
ef:d4:b8:cc:20:5e:d0:17:04:2f:fa:31:0e:31:d7:
43:83:36:09:24:c0:15:63:50:bc:53:4d:67:a4:9c:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:E5:7B:B0:3F:7A:7E:15:82:85:5A:E0:CF:DB:5E:1F:0E:EC:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/3c51e165-5f41-3f57-87bd-1612c15cfe00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
X509v3 Authority Key Identifier:
keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:77:4d:b6:ef:c0:f3:0e:b5:a3:25:49:9a:fb:7e:de:b2:6a:
a3:ff:e2:05:cd:a5:79:14:3e:5d:88:89:fc:0a:40:31:1e:e6:
fa:e7:e3:5b:b8:02:dc:6d:80:6b:16:9e:ce:32:68:8b:32:04:
0d:de:4c:86:ce:51:46:17:cd:b6:2b:d1:7c:1a:47:fd:e3:c9:
7b:02:5c:fb:9b:09:13:af:02:2c:3a:83:90:02:33:a5:8c:ef:
a4:0c:ab:23:de:9b:c6:4c:ff:b8:a4:67:f1:9e:0d:5b:2d:3e:
e1:cd:95:9c:8a:fc:f2:73:15:1e:36:ff:c2:44:a9:ec:fd:c4:
96:f4:05:86:25:00:ee:f6:97:1f:cd:e9:af:e7:d3:1a:a6:ca:
4b:e4:5d:ef:60:0a:dc:a7:03:d8:2b:b8:60:0f:12:db:fe:68:
79:26:7f:88:0f:96:13:1a:c4:c8:68:16:d6:09:78:aa:ec:e9:
e1:2d:f9:bf:df:40:42:43:80:e7:1a:8e:3b:a1:3e:cb:07:04:
66:e5:13:37:82:43:02:71:a0:4d:f4:0c:01:c4:22:19:4a:fb:
8d:f4:91:60:eb:f7:cd:eb:9c:6f:a0:6c:49:9a:30:c1:80:97:
fb:56:d4:96:7b:28:c3:d5:f4:32:72:29:22:65:c0:c9:f8:56:
ad:32:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:44 2025 by rpki-client