Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa
File: 723328e6-b34f-355a-9bf5-becd6010b5ea.roa (raw, json)
Hash identifier: QBFkNl/FQqxiKdX6stPe2hmecegVxz3JMiM5JKM7gE4=
Subject key identifier: 4C:E8:69:A1:39:F3:8B:BD:73:8D:50:D7:C1:2B:B9:2B:FB:F1:98:3E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A8F1782D42178E41594000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa
Signing time: Tue 10 Dec 2024 01:03:49 +0000
ROA not before: Tue 10 Dec 2024 01:03:49 +0000
ROA not after: Mon 10 Mar 2025 00:03:49 +0000
asID: 13335
IP address blocks: 104.29.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a8:f1:78:2d:42:17:8e:41:59:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:03:49 2024 GMT
Not After : Mar 10 00:03:49 2025 GMT
Subject: CN=fbc88f53-ba5f-4f98-970c-7863a3f2b924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:1a:02:84:ed:41:05:aa:23:21:c3:4d:e1:
d2:e2:4b:8b:a1:1e:50:7d:37:8b:7e:21:69:45:f3:
74:43:82:f6:cc:25:aa:40:07:e1:75:28:d5:42:0c:
82:7f:f2:91:df:4f:61:6c:60:3e:f2:16:0e:85:f8:
a2:f2:cd:71:67:e1:36:e1:bc:86:19:01:8e:22:33:
4b:81:dc:75:2f:a4:24:a4:ea:d9:4f:a0:eb:ee:bd:
a8:46:e1:ac:56:21:aa:03:0e:45:e0:42:af:fb:20:
d9:a7:a2:80:ff:45:f1:93:d7:ae:07:90:f0:2c:50:
fe:69:99:ce:e5:70:7e:32:fc:e5:bd:c1:de:21:ae:
c9:4e:2d:13:50:77:c4:e8:03:ed:2b:32:35:c5:5b:
ed:5a:2f:0b:96:bf:47:4c:11:7d:45:c3:cb:d4:d8:
28:30:2d:ac:60:ee:55:11:74:13:61:b2:a6:27:1b:
59:cd:a6:39:5e:60:1d:85:f3:2a:40:0d:a4:04:8e:
ca:8f:7e:70:cc:18:86:77:04:5c:c0:54:6d:5a:a4:
92:a5:be:62:d0:f3:65:0d:b2:7f:24:ca:23:77:d7:
c3:f8:7e:b7:c8:de:7d:46:bb:74:92:0c:5a:44:2b:
31:45:25:9f:bd:95:d5:b7:04:95:dd:f0:8d:37:4a:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:69:A1:39:F3:8B:BD:73:8D:50:D7:C1:2B:B9:2B:FB:F1:98:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:89:9c:df:71:3f:48:6e:6d:4e:57:1f:eb:67:ff:30:10:40:
c5:92:31:61:c5:23:2c:89:61:3e:91:ac:63:56:1d:85:3d:71:
49:ba:96:59:d8:76:56:d4:62:46:00:89:dd:fc:74:df:f8:2d:
ef:04:94:00:66:77:b5:45:ee:b5:94:5c:e9:a6:fc:26:00:2c:
a1:c2:6d:45:af:ea:b0:7c:9b:50:d3:27:46:6d:a2:95:d6:ac:
0e:3e:8d:ab:46:5c:98:6a:15:e3:b5:e1:83:1d:61:cb:43:dc:
92:e7:11:84:28:ee:35:1f:84:c1:61:c0:be:fe:a5:29:da:36:
3b:b8:f1:04:40:59:66:05:a6:ec:f0:28:8c:34:34:15:c9:ae:
f4:90:82:43:58:5f:4a:07:f3:ff:68:9c:12:e0:0b:80:44:6f:
83:2a:77:b4:3d:62:c9:fa:b8:28:a9:b5:0c:81:f9:1a:73:ee:
83:59:05:0c:ae:52:eb:3a:c5:43:4a:2b:82:c5:70:7a:2f:78:
7c:47:84:de:8d:4f:49:19:a4:d0:7f:2d:74:5b:96:8a:74:5c:
a3:a0:42:6c:dd:b4:2e:4e:a6:b0:64:1a:fd:ea:e0:f9:36:ca:
4b:b9:4e:0d:93:c8:d8:21:1f:e8:cd:81:67:11:c5:7e:07:0c:
a5:9a:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:33 2025 by rpki-client