Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82fe1985-40c4-3642-bbba-8a4bf1f2cb53.roa
File: 82fe1985-40c4-3642-bbba-8a4bf1f2cb53.roa (raw, json)
Hash identifier: Piip1MzXP5B06jugduujgfiXV21c2h9iP7VaO0/1Na8=
Subject key identifier: 03:F8:7B:F1:AB:6B:D0:2B:95:A5:D6:CA:3E:5D:6B:56:AA:CE:26:E9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848279A39FF86377E61D5B9B4C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82fe1985-40c4-3642-bbba-8a4bf1f2cb53.roa
Signing time: Tue 10 Dec 2024 00:34:10 +0000
ROA not before: Tue 10 Dec 2024 00:34:10 +0000
ROA not after: Sun 09 Mar 2025 23:34:10 +0000
asID: 13335
IP address blocks: 104.29.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:9a:39:ff:86:37:7e:61:d5:b9:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:34:10 2024 GMT
Not After : Mar 9 23:34:10 2025 GMT
Subject: CN=43feedbe-3371-4614-b095-6f76ca9c373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:6e:56:8e:57:b1:b7:70:c9:33:ef:53:0f:
42:19:2b:e0:7c:cd:c4:5c:87:43:7f:52:ba:17:47:
9d:f5:d4:15:2e:12:16:d5:63:e7:83:4d:8a:14:90:
a2:a1:52:7c:54:0a:1b:1b:ad:dc:fa:18:92:37:f0:
85:74:22:09:a7:e1:49:5c:f4:ca:be:da:d1:94:1f:
8b:ae:1d:4b:a6:8e:9d:c7:16:98:fe:3d:c3:aa:0c:
52:fe:98:2c:70:51:c5:2e:8c:e5:6c:41:78:5b:84:
c1:bb:43:ec:27:2b:ef:a4:f5:ce:b6:a0:c0:1f:79:
f5:fc:82:65:96:75:c8:14:7a:be:b9:04:43:5e:b6:
7e:21:ff:40:b2:c0:1b:8a:7c:92:b6:96:e3:4c:23:
84:04:d0:2d:6a:34:75:4c:30:dc:2f:60:07:c7:4b:
7d:a5:9a:80:25:a5:84:79:45:25:7c:58:21:ee:27:
02:12:3c:4a:d8:56:e1:ae:a4:36:df:de:91:45:e2:
d6:eb:3b:29:59:d4:81:e1:35:f1:e4:6f:0f:d3:1d:
49:6d:b3:1b:24:ff:47:85:c9:96:e1:b2:56:52:6d:
f1:54:92:75:c0:f5:cd:89:41:79:d6:1f:2a:7a:50:
eb:d7:ad:b5:9d:eb:a3:17:11:9f:d2:91:cf:a2:9d:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:7B:F1:AB:6B:D0:2B:95:A5:D6:CA:3E:5D:6B:56:AA:CE:26:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82fe1985-40c4-3642-bbba-8a4bf1f2cb53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d7:1a:22:0e:27:d3:41:44:b2:4c:0f:d7:be:7c:70:93:b2:
b1:c8:c1:d5:e0:48:82:61:51:77:d6:63:d1:c9:7f:72:b1:cd:
27:cf:0e:8c:2d:3f:e3:9f:15:d1:c9:5d:ca:fc:44:ef:b6:a1:
fa:79:d5:2f:d4:f4:dd:3a:b2:d4:4e:0f:55:50:0e:ed:c5:25:
e6:75:bd:e9:d3:23:c3:97:32:5b:8f:ac:b2:bb:d1:8a:e0:2b:
30:9d:91:ce:a6:79:dd:1d:78:53:8d:70:e2:e6:ac:ce:62:d2:
49:a4:8d:dd:70:b3:a5:ea:05:05:0b:f5:3c:47:f1:e4:64:40:
10:c9:be:92:b5:6c:d9:46:5c:4a:39:6b:c8:65:90:0e:cc:66:
da:83:63:b1:13:d3:07:81:f5:73:6e:2a:ef:21:8f:91:07:09:
04:8d:98:03:b6:39:30:f1:66:da:71:27:14:59:4e:a3:7e:9f:
7e:2e:de:3e:a7:a8:e1:19:06:62:31:82:ac:12:54:a4:8e:3c:
8d:94:fe:12:e7:99:c2:3c:a4:80:1c:08:08:99:d9:ed:eb:29:
16:e1:84:15:51:1e:71:5d:08:ea:64:1d:6f:a0:46:e1:c8:17:
a3:f8:53:fa:d4:33:64:6e:97:6a:ac:69:16:39:e3:bd:ca:52:
96:1d:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:06:06 2025 by rpki-client