Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa
File: 29937129-8e48-32c7-aae7-869e514cab8d.roa (raw, json)
Hash identifier: Gmnn6UqUPcepQQ/QTfZ/ptT8VEvwodomWvKvS5i4+O0=
Subject key identifier: 4B:44:E3:C4:CC:51:97:70:39:07:C6:B8:2F:D7:E8:72:E4:3A:8F:87
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848252763B28B209BD981B2C500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa
Signing time: Mon 09 Dec 2024 03:31:10 +0000
ROA not before: Mon 09 Dec 2024 03:31:10 +0000
ROA not after: Sun 09 Mar 2025 03:31:10 +0000
asID: 13335
IP address blocks: 104.17.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:27:63:b2:8b:20:9b:d9:81:b2:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:31:10 2024 GMT
Not After : Mar 9 03:31:10 2025 GMT
Subject: CN=d3cd8019-eba4-4366-9eef-f3891f3c400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:a5:89:aa:96:b1:2b:53:5b:3f:d6:4f:38:
e9:eb:cd:2f:eb:dc:d6:41:31:ee:23:73:7a:4c:f0:
ba:bd:8c:bc:fb:f2:8f:07:06:31:e0:a0:d2:d5:34:
28:8a:a5:7a:53:fe:19:fa:87:cd:87:01:1f:b3:7d:
fb:4b:38:ff:1c:f2:88:30:3e:6c:6b:9c:8c:d2:fc:
30:2f:c2:60:32:75:f3:81:49:6b:15:ae:c2:68:54:
96:8d:6b:59:db:1d:f8:ba:8f:66:63:ea:42:11:d6:
7c:63:33:4c:26:38:d8:06:e8:0d:a0:3d:d5:53:67:
13:05:9c:0f:9c:64:2e:ae:40:06:ed:a6:85:32:b3:
0b:90:5c:6f:27:9d:45:32:06:ba:d5:58:4f:20:30:
21:09:75:c2:dd:28:91:ff:6f:2e:96:bd:ba:43:0c:
a2:30:20:42:37:48:65:4b:1a:5e:11:64:bb:ec:f7:
3e:b9:41:eb:db:53:76:c7:54:ba:4b:80:a6:a1:71:
25:7e:59:04:a4:f7:e8:0c:cc:84:e6:e6:f6:da:57:
37:3c:38:21:bd:73:3e:da:cb:a4:7f:0b:b6:b7:51:
cf:c8:41:44:fd:28:39:e2:24:a0:d4:9f:4c:2f:d7:
09:b5:a9:38:b1:a4:ab:ef:80:67:9c:7b:73:dd:42:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:E3:C4:CC:51:97:70:39:07:C6:B8:2F:D7:E8:72:E4:3A:8F:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:0a:cb:57:da:d6:42:5f:46:34:4a:be:0f:dd:a4:04:03:80:
84:32:26:d3:27:1c:da:6f:88:3e:ed:2a:23:e0:c9:65:8c:19:
09:58:3d:2d:2e:fc:ae:c2:7f:1a:1b:be:a9:4c:e4:3d:30:fc:
85:33:43:f0:0c:b2:19:27:a8:81:07:d0:1b:aa:2a:39:ae:22:
c3:cd:69:e1:9d:42:b5:2b:e7:eb:70:3b:f9:ab:ef:05:6e:eb:
3b:49:dd:75:05:76:01:3e:8f:84:28:3d:79:e1:b1:12:f6:fe:
1e:f0:44:36:e4:28:43:d6:7a:ff:f3:f2:78:54:ea:9c:32:c4:
c6:49:d1:c8:d0:5a:7d:a7:ea:e6:72:91:9e:a5:b7:2b:ac:a5:
79:57:64:50:a6:e1:3d:6a:21:d5:16:75:07:57:a5:bc:5f:26:
ba:e0:a3:98:a5:c9:6a:90:69:b2:ab:86:89:9a:7c:bd:c4:3f:
6e:61:55:e2:79:02:a7:89:73:87:b2:87:3d:fd:c0:b0:00:83:
4c:c2:40:03:14:b9:64:1e:fa:8a:1f:2d:89:71:a0:e5:b4:04:
78:03:ef:a0:e2:94:9c:d2:4c:e2:49:be:d9:c8:7d:32:12:38:
3c:fd:c3:ce:48:9a:17:00:c3:a6:a1:90:24:3a:9d:2f:aa:f6:
c2:6d:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:03 2025 by rpki-client