Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa
File: 91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa (raw, json)
Hash identifier: YfQJSLZW+iaaOFryBzkrLcFQSyVwBOuFh+sqfElEwug=
Subject key identifier: 52:1E:8B:3D:5C:A8:4C:A8:BB:E7:B2:AD:E1:D0:07:63:12:D1:5B:95
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482566B89F207A38B83F687280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa
Signing time: Mon 09 Dec 2024 05:38:46 +0000
ROA not before: Mon 09 Dec 2024 05:38:46 +0000
ROA not after: Sun 09 Mar 2025 05:38:46 +0000
asID: 13335
IP address blocks: 104.29.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:66:b8:9f:20:7a:38:b8:3f:68:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:38:46 2024 GMT
Not After : Mar 9 05:38:46 2025 GMT
Subject: CN=2c9e445b-a26e-4237-b0a9-91dbd9edcac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:21:ac:e8:c3:61:73:ae:b3:e8:f4:48:99:
48:f6:b2:f1:77:f0:5c:0a:16:c9:cd:5b:b8:1e:ba:
39:32:45:e5:8b:77:9b:4b:d6:c7:af:e5:26:4c:2f:
f7:fc:30:24:0f:6f:02:8f:ec:2f:0d:b8:10:dd:54:
6f:ab:a5:9e:3b:b4:b0:03:8a:41:52:27:7e:4d:2e:
cc:91:29:23:af:b5:39:1e:56:c9:72:e1:51:fd:d2:
30:1e:7f:2a:2b:56:34:d4:e9:53:4c:84:9f:5a:af:
65:02:2a:79:68:34:3e:4c:ad:4e:7a:a0:a9:14:bf:
9c:89:a6:67:da:1f:8c:8c:91:a0:86:5c:e1:77:bd:
41:2b:ee:18:d3:96:d1:77:2a:aa:79:93:54:83:37:
e1:af:6d:14:95:95:4a:2b:96:95:8a:c2:de:6b:53:
31:e2:02:4a:f8:aa:e6:53:da:22:ee:db:32:e9:a3:
5f:07:81:c0:c2:33:92:05:84:c6:73:ba:a8:b9:2a:
8c:47:e3:e6:15:a1:4b:93:ed:5b:f5:b4:1d:1e:25:
34:dd:ad:e7:7d:93:1f:bc:df:49:8a:55:98:e0:79:
68:44:ab:72:fc:1e:da:60:e7:52:dd:11:82:8a:c5:
ec:1c:24:36:41:99:4e:35:7d:f8:67:b4:0c:be:14:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:8B:3D:5C:A8:4C:A8:BB:E7:B2:AD:E1:D0:07:63:12:D1:5B:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:38:e4:09:cd:36:77:c9:be:5b:15:0b:42:07:61:00:61:f6:
0b:4b:13:9f:9f:ce:34:29:2f:f2:49:8c:2f:41:c7:32:b4:d6:
70:62:7b:35:5c:e4:d1:fe:13:a8:aa:40:ce:c4:38:47:72:52:
63:98:4f:ec:df:93:fc:bb:ec:12:c0:5c:28:f1:46:02:98:db:
18:40:77:7a:87:dc:7d:a8:9f:d1:4f:39:d3:c2:28:07:0f:5b:
4f:97:46:cf:b9:22:23:42:b5:ce:50:d9:3a:ee:32:33:23:5d:
c4:f8:fa:ec:3b:86:c1:75:d1:76:bd:26:b7:8e:83:a4:5d:f3:
24:d8:24:64:b7:b4:c0:2b:41:3c:39:73:05:da:06:da:55:4a:
18:04:0e:87:45:dd:b1:4f:d0:98:5b:b8:8a:a6:cc:b1:18:b1:
37:40:27:62:0b:31:3c:9b:b6:58:34:92:1b:f2:07:15:12:92:
88:42:f8:fe:6f:12:3f:21:1d:eb:0d:2d:f0:c7:45:79:bc:bd:
6f:fe:30:2f:17:8c:fd:bf:46:21:7a:ec:0c:c6:d8:cf:ea:7c:
e6:1d:c6:f4:2a:3b:18:10:8c:7d:35:45:f7:28:34:02:5a:b7:
72:b3:e4:26:a0:33:82:cc:45:ec:a0:f7:5e:9b:4f:19:0d:5d:
ac:97:13:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:29 2025 by rpki-client