Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21f05498-3fcb-333e-b852-eeea0ca97209.roa
File: 21f05498-3fcb-333e-b852-eeea0ca97209.roa (raw, json)
Hash identifier: pZzikX4NdawHzawEVsvh5AJo8WScyozLa05x32L7oi4=
Subject key identifier: 14:3F:CC:54:60:D0:E2:0A:A3:F3:F2:CA:51:9C:77:E8:E8:25:60:59
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482562D45AABDE4B62755EB300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21f05498-3fcb-333e-b852-eeea0ca97209.roa
Signing time: Mon 09 Dec 2024 05:30:56 +0000
ROA not before: Mon 09 Dec 2024 05:30:56 +0000
ROA not after: Sun 09 Mar 2025 05:30:56 +0000
asID: 13335
IP address blocks: 104.29.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:62:d4:5a:ab:de:4b:62:75:5e:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:30:56 2024 GMT
Not After : Mar 9 05:30:56 2025 GMT
Subject: CN=c1f43abe-6c62-4b6d-8f03-23e179677e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:be:c7:00:69:37:ca:74:37:a3:14:99:bc:
1f:15:c5:e8:a5:41:25:6a:bd:f8:0d:e8:3f:86:90:
17:16:2b:36:bd:c7:21:9a:13:0f:aa:8a:24:a5:d2:
05:21:c1:ec:a7:d5:77:20:39:ac:9a:72:4d:43:d4:
e6:62:75:c1:bd:06:fe:57:19:73:22:27:e2:53:47:
92:e1:01:1e:d0:28:42:65:5d:30:59:83:04:f5:41:
45:0b:98:06:ec:7f:f3:ab:0f:f1:07:4b:67:3a:b8:
09:8d:f2:71:e8:d3:1d:8e:19:96:c1:9b:8b:a9:73:
31:7c:c2:1c:f4:86:8b:1a:57:6c:f2:7b:9e:80:26:
e2:ca:89:3b:94:ce:7c:c0:90:75:8d:66:25:85:e4:
00:9d:8f:72:b8:b8:9c:e8:2c:bb:f8:84:79:99:a2:
ed:3f:26:d6:2c:f9:19:43:36:8b:17:f6:a0:09:7b:
ab:60:b5:cd:f7:ae:55:67:fb:1c:45:6b:7c:9c:62:
7d:56:cd:8e:f5:60:b5:6e:a3:1f:18:d6:d0:02:a1:
1c:3d:b4:c8:cc:31:13:99:f5:19:cc:2e:8c:22:c5:
b4:16:b0:ac:ac:df:74:0a:bc:9b:b1:a0:c0:dc:b1:
8d:44:70:f0:b4:3e:1b:dc:fd:c8:2c:fc:23:0f:a3:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:CC:54:60:D0:E2:0A:A3:F3:F2:CA:51:9C:77:E8:E8:25:60:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21f05498-3fcb-333e-b852-eeea0ca97209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d4:94:6b:b4:a1:3b:97:28:0b:d3:63:53:ce:a2:9d:56:b0:
48:c2:8a:e4:0c:52:2c:4b:c1:e5:9d:72:31:ed:58:87:a8:da:
44:bc:1a:40:29:97:ff:0f:d3:1f:88:56:02:59:08:1d:83:72:
f8:af:46:b0:15:f3:26:b9:fd:55:c0:b9:fd:56:ef:6b:bd:4f:
23:a3:01:a6:6b:a5:0f:dc:22:d3:1b:61:75:e6:93:82:f4:51:
3b:d9:0f:22:8b:77:4b:7c:18:89:da:78:c6:85:e1:4f:59:0c:
03:ab:97:c8:e8:49:ec:29:ee:bc:c3:33:17:81:49:5a:88:70:
b7:56:1a:c2:a8:e0:88:2c:5a:2a:2a:e6:7a:a1:a1:d5:5d:56:
5f:58:7f:a5:b6:53:16:c7:fb:37:d7:4a:0d:48:74:dd:45:76:
99:7d:22:fc:48:6d:da:df:32:13:a7:0e:16:71:ea:e5:fc:a0:
fe:2a:89:86:8f:a2:21:85:eb:0f:55:bf:8c:99:fb:ba:88:8e:
50:2f:dc:e5:ef:3f:2f:f9:90:1e:0e:ca:9a:87:e2:a2:ab:2b:
bb:7e:3a:1c:89:90:c0:97:d2:5e:65:78:3e:19:9f:8b:82:46:
46:62:4e:65:de:dd:71:e9:1c:a6:c2:87:46:b0:da:f2:31:fb:
e1:b0:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:40 2025 by rpki-client