Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa
File: 06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa (raw, json)
Hash identifier: MF8xvU1DkJRPiHhgDztwOI7iZjzEOdgGynUp+bj3g4U=
Subject key identifier: C2:0E:AA:FD:51:21:23:C3:10:33:6B:89:C7:04:6C:F4:4E:32:85:B0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848256214827D9F1C5DCBCDBD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa
Signing time: Mon 09 Dec 2024 05:29:25 +0000
ROA not before: Mon 09 Dec 2024 05:29:25 +0000
ROA not after: Sun 09 Mar 2025 05:29:25 +0000
asID: 13335
IP address blocks: 104.29.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:62:14:82:7d:9f:1c:5d:cb:cd:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:29:25 2024 GMT
Not After : Mar 9 05:29:25 2025 GMT
Subject: CN=0b84decd-9cbc-42f6-89fb-c450edcf18eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:98:c4:b9:3d:aa:f0:1a:ff:07:e5:68:c6:
0c:62:76:38:f4:89:e0:a2:c5:90:44:d3:04:b0:8e:
95:5b:75:d3:95:5a:aa:38:ef:91:50:8c:f3:e9:20:
b4:49:dc:2b:1f:95:e9:f5:0f:30:97:82:7d:d6:56:
e8:6b:f2:25:a8:5d:1d:0a:32:f4:6c:b2:b3:75:55:
a3:bd:a9:41:23:86:89:0d:ec:f7:2b:34:21:23:15:
99:a1:aa:cf:d3:06:74:a4:d0:a3:d2:96:ec:ea:7d:
3c:88:43:39:f4:95:a8:74:86:01:88:30:3f:4e:e7:
ce:03:c4:04:a9:6b:1a:48:8b:10:85:5d:73:79:dc:
72:4d:fa:10:f1:6a:3c:9e:d3:36:a5:1c:36:14:e1:
06:4d:83:bd:06:d6:a8:c3:73:33:2f:76:d2:f2:f1:
e5:c5:d1:3c:a6:f5:f8:c9:01:f9:a6:3c:78:95:b9:
28:96:45:36:ec:da:93:d9:64:7b:b4:1f:f4:2a:bf:
f5:d9:ce:6b:c6:21:ef:af:77:2b:50:00:e3:b0:eb:
83:a2:68:c6:fb:13:96:bd:5b:70:5f:65:2d:d6:20:
da:0b:12:d5:d6:c7:4b:d2:4a:1c:05:0d:00:12:55:
30:eb:f5:67:c3:03:f4:16:1a:6c:d0:e3:a4:67:f5:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:AA:FD:51:21:23:C3:10:33:6B:89:C7:04:6C:F4:4E:32:85:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:5a:2b:bf:68:56:86:94:af:2e:f6:6f:be:3b:a8:8b:50:6b:
be:66:40:80:83:31:35:11:de:4b:cf:ac:a8:38:08:a6:7c:80:
03:fe:84:45:52:28:ea:1f:9a:63:ea:3f:3e:3a:dc:2b:6a:10:
0b:1d:18:35:be:9d:6c:ae:f1:6f:08:14:b9:93:34:cc:f7:b6:
92:e3:19:c3:50:4e:f6:d6:0f:b3:7e:0d:06:1d:a5:b4:0a:bd:
24:6c:d5:bc:88:3d:b6:5d:08:4b:15:90:04:08:41:c7:b4:87:
e5:06:99:ee:35:33:2b:1c:d2:b8:dc:40:1e:b2:57:fd:0a:47:
59:de:cc:c7:bc:b1:58:9b:12:dc:a5:e6:13:c3:b5:9b:c1:a1:
98:59:6c:de:8b:d4:9b:b8:05:16:73:95:fa:58:06:0b:23:fc:
c3:c8:34:c1:48:fd:a9:97:d8:dc:80:77:88:04:78:30:31:66:
9c:2c:96:4b:a5:70:fd:e7:3d:6d:a8:e5:62:77:ff:d1:4a:a6:
2b:1c:cd:60:d6:54:d4:3a:aa:5b:c8:aa:a9:7f:da:7b:f1:df:
2d:d9:93:cb:77:fc:24:61:ff:61:01:a5:e3:59:47:66:ea:5f:
a5:2f:39:d0:fe:ce:55:c2:2d:58:b6:66:4c:ac:49:64:b5:5d:
ca:9e:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:38 2025 by rpki-client