Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa
File: 2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa (raw, json)
Hash identifier: eoX1+/hQ6G+flYJtyjBfk5CLQTjIPYWlzBAtVcgmcNY=
Subject key identifier: A9:65:4F:B5:D6:1E:6D:D4:34:4B:A0:9E:B0:DD:DF:5E:BB:AE:0A:D5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482561BD4FD4CD152A9F1D2200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa
Signing time: Mon 09 Dec 2024 05:28:44 +0000
ROA not before: Mon 09 Dec 2024 05:28:44 +0000
ROA not after: Sun 09 Mar 2025 05:28:44 +0000
asID: 13335
IP address blocks: 104.29.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:61:bd:4f:d4:cd:15:2a:9f:1d:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:28:44 2024 GMT
Not After : Mar 9 05:28:44 2025 GMT
Subject: CN=64d061e9-f732-4a89-8383-b15d3857ff31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:ef:04:8a:83:1a:33:97:17:6b:3d:f8:a7:
8f:cc:93:f4:7c:da:c2:fe:55:2b:85:f8:ed:3f:c6:
b2:c8:c2:97:7b:4d:54:e4:f9:cb:9f:1f:d1:66:84:
49:b6:7e:81:7e:3a:0d:67:d2:8f:16:87:88:27:28:
2c:05:35:84:3f:45:6f:ac:ae:b2:0b:0f:f4:cf:38:
6d:42:97:7d:51:f1:33:1b:7f:39:9a:18:3b:82:c3:
e4:47:ab:df:4c:9c:18:77:cb:96:37:b8:55:dd:0d:
85:dd:de:dd:4b:88:59:25:3d:13:6b:ee:a6:34:cc:
f7:89:7b:b1:a6:64:d3:20:5f:dc:14:cc:41:a6:d2:
fb:64:9a:d0:83:9b:cb:f0:9c:5d:85:03:0c:2b:e8:
b0:a0:90:78:78:ea:ca:20:29:f8:e4:c0:f6:fb:bf:
a6:2c:72:38:0d:ec:eb:d9:7c:a0:ff:f4:3e:d6:da:
61:27:7e:85:87:59:1a:c0:72:1f:fd:b9:e6:ff:f4:
49:b6:f4:82:02:60:ac:da:2a:29:ef:39:af:cd:4c:
8d:07:e3:d9:43:62:7d:62:d0:b6:c6:c7:47:90:e3:
73:f1:57:31:20:57:8c:69:c0:06:ea:91:0d:96:c0:
a3:29:45:c0:ad:80:1f:1e:57:90:c3:d6:4f:50:1d:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:4F:B5:D6:1E:6D:D4:34:4B:A0:9E:B0:DD:DF:5E:BB:AE:0A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d2:ee:84:37:a2:f4:ee:7a:d0:a9:55:9e:31:07:31:97:c9:
33:22:2d:51:59:de:36:a2:77:36:8a:93:90:c8:3c:2e:88:81:
c4:97:05:70:ad:81:0e:d8:12:29:ee:5d:9f:de:9c:d1:98:75:
b6:45:91:21:a5:0f:64:75:f3:4c:91:13:7c:cf:bc:eb:8d:f3:
83:06:b3:d6:a6:34:d7:e2:b2:4b:a7:ef:e6:95:57:68:8a:be:
59:9a:cf:84:7d:11:5d:c8:9d:3f:a7:9c:85:2a:c9:52:6d:65:
1f:8e:23:ca:45:53:76:e7:91:aa:74:c7:2d:4c:94:30:c4:d8:
7a:bc:d8:7c:00:e8:ac:d2:6d:de:75:56:9b:ea:b7:c5:f1:c8:
a1:26:9c:16:60:c6:65:c8:66:30:38:04:17:39:96:7a:fa:b7:
8f:98:0c:59:2a:89:e1:41:da:00:c7:01:92:72:67:90:db:ba:
86:88:02:a4:43:21:87:d0:16:6f:4e:78:23:40:78:3a:be:96:
02:81:e8:2c:ef:80:52:f2:b0:fe:00:c3:8b:30:80:c4:90:42:
fb:f0:e3:31:cc:78:8b:0a:69:c5:77:00:4e:69:00:6e:95:a3:
ab:6a:b1:5d:c1:9e:3f:d3:df:61:81:bc:3d:76:e9:fb:3b:25:
ef:2e:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:47 2025 by rpki-client