Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa
File: 3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa (raw, json)
Hash identifier: rFYFlaZ0gOVU+ya1pMd+XQoj8ambgMyBEAXYiRosh5s=
Subject key identifier: 20:2A:62:E6:3F:33:8B:F3:FB:7C:8D:DA:08:02:80:55:93:DA:07:6A
Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Certificate serial: 010D0C9F432858487E50684F9FB3D8868201BB40
Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 13438
IP address blocks: 104.232.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:68:4f:9f:b3:d8:86:82:01:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=059f0c53-defc-42b2-9037-caf4b3ac6fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:1b:c0:fe:b7:e4:6e:0b:89:61:f8:0c:a8:
b8:b7:f3:05:31:25:93:97:3b:c1:be:f4:18:5b:e3:
5e:6a:f2:eb:13:93:98:d4:f6:97:a7:32:f9:71:6e:
f5:a9:f8:ec:d3:4d:af:76:d7:5b:9b:be:78:24:42:
72:89:5d:61:f6:02:db:06:69:e3:57:42:52:de:ac:
81:82:02:09:e1:b6:54:08:96:c8:9c:57:e3:59:7f:
76:46:b2:95:22:94:d5:07:36:9d:0b:d4:88:5c:88:
b3:e4:ab:4d:53:f6:7c:44:15:2d:58:66:b5:ca:94:
cb:43:7e:0c:a8:e9:e6:8e:5c:b3:ac:22:63:f6:c7:
64:fd:dd:70:84:af:48:bf:ff:48:eb:ae:92:73:3e:
37:5a:45:ed:c2:5b:0b:ce:c1:ae:7e:0c:47:04:66:
f2:32:4c:e4:f0:4e:a1:b0:ca:06:b6:46:a0:3a:f0:
ea:df:1c:3e:24:7f:a6:16:c2:60:c6:c8:06:d3:19:
ec:97:78:f9:d8:bd:59:11:a8:8e:be:a4:72:d2:22:
8d:ab:f5:91:e4:dd:a5:8f:4f:d5:c0:17:b3:62:ba:
38:66:a1:23:70:6a:2a:8b:6b:8a:bf:fe:ee:a1:d6:
5a:7b:bc:6d:6c:94:3f:00:ce:ec:30:95:85:b5:e6:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:62:E6:3F:33:8B:F3:FB:7C:8D:DA:08:02:80:55:93:DA:07:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl
X509v3 Authority Key Identifier:
keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:64:9b:b1:ba:06:4a:bf:f2:26:3a:26:66:5d:fa:ed:55:82:
34:da:88:49:30:b2:d3:eb:7f:c0:5f:2a:65:84:f0:6a:cc:e5:
f8:26:11:13:42:50:f2:2a:c4:97:42:e1:ef:c7:6e:ef:61:f4:
34:41:90:9f:05:12:2c:12:5d:72:eb:65:7c:28:29:86:23:12:
b3:5e:23:5d:dd:bf:8f:1b:21:6a:e3:46:b8:a7:0a:a7:7e:5a:
94:70:85:d5:64:1d:8b:79:13:9b:1a:e4:62:86:0e:96:ef:71:
69:13:c1:e6:05:a6:7e:f8:26:e7:4a:7b:4d:ff:27:8d:d6:9a:
8c:e0:d5:b1:a4:b8:44:cb:55:37:12:b1:89:f1:89:26:86:f6:
42:9b:bb:db:11:38:b8:8e:60:14:75:a7:2d:b7:40:10:ee:b3:
ef:3a:c5:93:50:c9:07:2c:6f:b7:f1:bd:3f:33:c1:97:87:26:
73:c2:56:06:33:0e:6b:d2:ac:15:c7:13:05:6b:45:10:f6:45:
66:5d:9c:f5:95:28:ae:c6:52:92:55:c1:2c:fa:b4:14:b1:c8:
f7:b7:4d:fe:bd:42:39:10:7b:c1:1d:3c:86:8e:30:25:1a:10:
71:69:ca:40:09:78:58:18:4b:c5:69:4c:7a:89:e4:39:0e:7f:
a9:4c:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:14:59 2025 by rpki-client