Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c80683c-fa1c-362d-a37d-6b100fb7932c.roa
File: 4c80683c-fa1c-362d-a37d-6b100fb7932c.roa (raw, json)
Hash identifier: Q75a5HXr/8NfqCsbCD0Jh94pb4oAKqxmze/Jm0p7WW4=
Subject key identifier: 64:C8:48:09:9E:56:23:05:06:FD:E9:B1:92:69:B3:98:CC:B9:14:CC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A0750546E6A7F48FC79380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c80683c-fa1c-362d-a37d-6b100fb7932c.roa
Signing time: Tue 10 Dec 2024 00:46:43 +0000
ROA not before: Tue 10 Dec 2024 00:46:43 +0000
ROA not after: Sun 09 Mar 2025 23:46:43 +0000
asID: 13335
IP address blocks: 104.29.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a0:75:05:46:e6:a7:f4:8f:c7:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:46:43 2024 GMT
Not After : Mar 9 23:46:43 2025 GMT
Subject: CN=d20c36fb-a832-4974-9301-61d6e6d87cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:8b:22:b4:a8:31:ab:90:4d:3d:b3:13:20:
5f:b5:a6:05:a6:55:23:b0:e9:cc:14:28:bc:ec:0f:
bf:4e:f3:18:4c:35:60:07:79:d4:1b:6b:4c:5a:a4:
d3:9e:ab:02:0b:82:01:15:46:f5:c1:3b:6d:46:a6:
00:1c:8f:50:2b:94:63:44:81:f1:98:7e:53:e3:29:
6c:ec:df:eb:01:c0:fd:8a:43:91:dc:20:6c:1e:11:
f3:66:ee:eb:6e:c3:b6:8d:00:2a:56:fa:95:ed:a8:
69:9d:94:a3:44:3f:aa:10:45:f9:d8:29:5d:3e:3e:
c9:75:e1:cb:e3:29:a1:78:84:d4:39:33:80:01:c2:
9f:c0:f1:06:f8:54:eb:e5:50:61:02:62:42:e3:ac:
41:51:49:ed:30:04:c9:37:8f:0c:5c:d5:f7:f7:25:
7c:5c:43:21:d5:72:d7:4f:f1:fd:28:4e:67:77:f4:
fb:c7:b1:e2:3a:45:0c:1d:07:31:2e:7a:84:e4:73:
f0:79:94:9a:8a:cd:49:73:3e:8c:4a:af:cc:6c:ca:
7e:2b:9d:bc:f0:7e:9e:18:2c:d9:d6:e9:b9:3f:58:
30:d0:a9:2a:9c:69:4e:3c:cf:e2:1c:2f:84:1c:c7:
f1:16:b5:76:9c:25:c5:59:e1:58:d6:84:de:96:12:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:48:09:9E:56:23:05:06:FD:E9:B1:92:69:B3:98:CC:B9:14:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c80683c-fa1c-362d-a37d-6b100fb7932c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:c3:11:2a:e5:9a:00:50:59:d5:b0:c6:d6:3a:f3:2a:b8:e8:
1c:30:82:4f:99:03:b8:52:6d:8f:a1:c6:d7:74:a4:ba:a7:dc:
4c:12:64:4b:b3:53:01:81:68:95:92:1e:38:64:33:b0:e0:80:
e5:46:3e:4e:89:94:5d:ee:d2:da:74:02:00:3e:15:dc:2c:30:
d7:01:81:ee:15:1b:61:73:fb:80:99:18:aa:35:38:a2:31:09:
62:4b:c4:43:76:03:98:82:ac:e2:23:4b:1f:ac:3b:92:77:58:
13:5f:01:c1:db:71:50:f9:95:07:94:64:17:20:e8:e0:17:aa:
b5:28:74:85:b7:12:6a:73:d0:4f:db:29:09:cf:c4:46:bc:08:
19:bc:f1:d4:09:8f:4f:80:e4:30:07:19:26:6d:cd:11:bd:00:
bc:dd:ad:85:ff:00:76:a3:b3:3a:7f:04:3a:8a:1a:f1:e5:d8:
31:28:34:11:1e:1a:99:96:cb:d9:b5:27:49:23:72:61:a4:64:
54:d5:2c:88:18:06:8e:30:b8:26:94:fe:48:23:e8:7a:7d:0f:
e7:39:31:83:68:bd:4c:b2:d3:a4:6c:33:82:0e:00:a7:a8:e0:
ca:04:31:bf:da:d9:58:d6:fc:f4:92:e0:6a:a7:54:e5:19:b8:
73:4a:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:41:15 2025 by rpki-client