Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a674bd0-d92e-3d1c-a3e7-9d4ff8ae6dc1.roa
File: 0a674bd0-d92e-3d1c-a3e7-9d4ff8ae6dc1.roa (raw, json)
Hash identifier: Bv+QMLI7V5tcUr1NG0btQ7/OXGZZU+ScqJ+9yyFKsmI=
Subject key identifier: F7:20:42:63:14:3D:6B:FA:67:DA:46:56:26:B2:24:2D:9D:7D:B9:30
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848256225F3C89D2DF4C213D900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a674bd0-d92e-3d1c-a3e7-9d4ff8ae6dc1.roa
Signing time: Mon 09 Dec 2024 05:29:33 +0000
ROA not before: Mon 09 Dec 2024 05:29:33 +0000
ROA not after: Sun 09 Mar 2025 05:29:33 +0000
asID: 13335
IP address blocks: 104.29.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:62:25:f3:c8:9d:2d:f4:c2:13:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:29:33 2024 GMT
Not After : Mar 9 05:29:33 2025 GMT
Subject: CN=4b41e08e-352a-442a-be61-f690343015e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:74:9d:ee:5c:3c:f6:25:5a:27:a2:a4:e7:
26:25:0b:cc:61:96:48:e8:89:93:0b:72:b9:a5:64:
42:fd:57:74:c8:27:89:ac:43:e6:c8:0d:63:8b:d7:
60:f7:a7:eb:8f:8f:aa:ff:58:cb:bd:e2:bf:7c:97:
1b:04:61:7c:6b:8e:3c:0d:a7:c9:6d:46:9e:bc:d4:
e5:9b:14:18:4e:7e:5a:47:b0:ac:b1:01:45:9e:63:
f7:c9:0b:44:46:ad:d8:0b:b8:b4:ee:ed:6e:8d:49:
17:ca:5d:1f:3e:19:49:a6:61:e7:e5:63:a9:42:16:
ce:b1:3a:b6:da:82:a1:38:0c:2a:21:e0:53:27:02:
38:9e:56:32:c8:70:16:53:95:12:88:2b:4a:13:3e:
5a:69:95:80:71:c3:fb:27:a2:9e:d5:23:09:22:ae:
9d:16:3d:f5:90:c5:cc:58:a3:f7:e7:56:6f:0f:d5:
e8:c1:f6:ee:ce:84:f6:b6:b9:ba:52:1f:55:0f:38:
41:57:98:3e:cb:73:be:58:32:c1:0b:e1:72:49:32:
59:ee:f5:94:ae:32:4e:a4:57:be:c1:24:70:ea:01:
c6:dc:fd:4d:46:dc:10:95:e9:6a:68:ae:07:8f:5f:
d6:0a:02:69:fc:55:bf:fd:14:6f:a4:85:0e:be:df:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:42:63:14:3D:6B:FA:67:DA:46:56:26:B2:24:2D:9D:7D:B9:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a674bd0-d92e-3d1c-a3e7-9d4ff8ae6dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e7:d9:ae:d7:26:e8:83:9b:12:6a:44:5e:09:f0:61:d9:ea:
af:1b:80:cc:2b:d6:29:bc:90:c1:64:31:7a:34:cf:76:db:7e:
ad:74:63:c6:25:5f:9a:94:b5:1c:8e:00:3e:18:a1:5a:b2:d8:
a0:1b:a2:1d:c3:50:25:cd:5c:11:e6:bd:23:c3:6c:c7:3c:6a:
ac:9a:6f:7f:42:18:bc:c3:4f:c5:da:ae:c2:71:eb:1d:54:9d:
1a:4d:db:26:9a:a8:22:c8:94:3c:7c:fb:30:44:9d:1c:aa:06:
ba:b8:7a:68:6f:21:63:56:15:8e:01:0b:68:82:83:36:b9:e5:
ee:7f:b5:94:c1:e8:48:e3:ad:99:38:e2:44:10:43:1a:7c:6b:
8c:b6:74:02:a9:53:ea:bb:9c:9e:9d:2a:51:db:8e:06:f1:da:
a2:13:47:9d:60:6e:bb:88:5d:ec:be:80:84:5b:e6:36:f0:cd:
98:b9:40:e7:7c:37:4a:dd:57:64:93:ac:5e:4a:4e:56:ab:d8:
e7:72:74:27:56:39:72:8f:b3:60:82:1e:b2:84:bd:14:af:9d:
91:7c:52:29:84:f9:27:e4:e5:54:2e:49:af:45:95:3c:fd:73:
f5:5c:d6:f4:e2:3f:9b:c8:98:57:a2:4c:51:11:81:aa:13:72:
c9:56:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:24 2025 by rpki-client