Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa
File: 2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa (raw, json)
Hash identifier: ryaUbcBMQ9lwnl27BLKsDD645369jdKaojJrnqOnut8=
Subject key identifier: 77:2E:08:9E:DF:86:67:2C:EC:6F:1F:E9:D4:2E:E5:7E:6D:42:50:2F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482560DABE4A10B0BC167C9D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa
Signing time: Mon 09 Dec 2024 05:26:57 +0000
ROA not before: Mon 09 Dec 2024 05:26:57 +0000
ROA not after: Sun 09 Mar 2025 05:26:57 +0000
asID: 13335
IP address blocks: 104.29.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:60:da:be:4a:10:b0:bc:16:7c:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:26:57 2024 GMT
Not After : Mar 9 05:26:57 2025 GMT
Subject: CN=e5d22bfb-2d6c-491c-8a88-907d30105abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:e3:97:b5:46:d4:52:43:d9:ec:51:84:f4:
f9:25:a0:c7:99:5b:2a:66:7d:d8:6a:9d:4e:f3:07:
67:e4:d4:81:4c:e5:1f:ae:76:fb:43:9f:f9:6f:70:
bf:21:50:9b:6f:5c:74:08:3f:1c:35:ee:6f:0b:0c:
d2:87:28:6c:de:6d:10:38:a8:80:57:b6:34:e2:4c:
e5:df:7c:80:48:da:c5:ca:97:1b:95:2e:58:57:e8:
63:3c:b2:27:6b:26:d3:13:72:02:8c:f7:df:16:dd:
74:e7:9a:fc:b1:ae:42:b1:20:5b:fd:fc:0b:80:9d:
6c:83:9f:e9:42:67:77:03:c6:ff:7f:7c:5e:58:83:
68:f9:40:6f:97:44:cf:52:a5:af:b2:e8:46:66:64:
db:78:9e:03:8a:f7:dc:11:a0:59:d3:1e:ca:4d:7f:
ca:b5:e3:64:79:19:45:96:c7:6d:0c:d4:64:27:7b:
bf:ac:bc:7c:d4:59:96:f3:bf:6a:15:63:c1:b7:cd:
62:0c:6f:e3:f9:4a:2c:7c:b7:ae:7d:8d:72:f5:58:
6c:58:d6:63:7e:05:9b:f2:1f:f7:e7:9b:26:48:cd:
7a:66:fd:42:13:a3:20:20:05:c6:37:ad:0f:c1:42:
98:35:1a:af:6e:d8:0a:bd:63:08:0f:31:38:19:c6:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:08:9E:DF:86:67:2C:EC:6F:1F:E9:D4:2E:E5:7E:6D:42:50:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:52:c7:7a:b2:cd:ba:f5:14:58:07:73:b7:e8:12:f8:71:d5:
9b:e5:cf:44:bb:4c:d5:8a:7b:4b:d2:c0:5b:6e:85:19:96:95:
0e:ab:be:94:92:e1:2f:0d:4b:23:88:e7:2c:0f:b6:16:6e:41:
1f:19:d7:9c:35:ad:0a:90:42:ce:61:30:ba:d0:bd:55:75:00:
a7:16:27:50:b5:c8:7a:b7:1b:cc:d9:d7:24:68:d8:ba:5a:b8:
b2:b8:32:06:c8:44:a0:0e:4b:28:d0:36:b0:84:e8:35:31:e3:
66:63:e1:88:55:92:13:98:46:df:3d:1f:5f:94:62:3e:14:51:
00:1c:b5:7b:6e:55:d5:7b:85:0b:73:83:25:8e:ae:da:c5:25:
30:c6:9e:c2:2d:e7:a1:21:20:bb:08:ae:0b:12:7d:b0:83:1c:
63:a9:12:a4:3f:30:ef:61:f0:d0:9d:91:76:b5:b3:7f:05:9d:
96:0e:b1:38:eb:bf:d1:57:3e:c0:b3:dc:1b:ae:17:ee:5d:e2:
b8:74:22:10:57:f0:8e:0a:9f:6e:31:3b:b1:44:5e:43:76:83:
ba:8c:72:06:fb:35:5f:93:88:18:cb:b3:fb:ea:1c:ae:40:a6:
3e:2f:8c:db:89:9e:90:c3:0e:b3:72:d5:db:41:48:4b:ee:c9:
d2:e2:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:13:56 2025 by rpki-client