Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91cd10ed-7067-3e56-8822-8690face725b.roa
File: 91cd10ed-7067-3e56-8822-8690face725b.roa (raw, json)
Hash identifier: +DhRB43FWOpCh/EHBeVOZ9c9WA9BMTCYzysOyb4wcPg=
Subject key identifier: BE:04:CB:A7:C9:36:AE:12:8C:24:1E:04:07:C9:B3:F7:9E:04:4D:3D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825656D044764DAB0E7D625C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91cd10ed-7067-3e56-8822-8690face725b.roa
Signing time: Mon 09 Dec 2024 05:36:09 +0000
ROA not before: Mon 09 Dec 2024 05:36:09 +0000
ROA not after: Sun 09 Mar 2025 05:36:09 +0000
asID: 13335
IP address blocks: 104.29.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:65:6d:04:47:64:da:b0:e7:d6:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:36:09 2024 GMT
Not After : Mar 9 05:36:09 2025 GMT
Subject: CN=77605dfc-4b05-4513-9640-0d5b0424d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:43:ca:68:1e:77:7f:cd:7d:15:60:4a:19:
b9:e4:41:28:aa:5d:8a:cf:d0:ca:db:f6:c6:5b:ec:
6e:da:ba:90:a6:85:0f:a5:8f:24:1e:5c:d4:30:f9:
d0:58:cd:39:cc:5d:ee:76:06:1c:6e:d6:5f:6b:c7:
ec:7c:b1:bc:a9:4d:aa:71:80:d5:0a:79:a7:3d:5b:
56:ef:f4:ea:0a:e1:f0:d2:94:30:38:05:9e:55:2a:
8f:3c:4e:51:9e:b8:50:2e:92:6d:ad:9d:70:21:22:
f0:56:88:fa:50:24:dd:bc:0b:d9:4d:1a:5d:25:89:
4f:71:55:00:26:3f:7e:19:dc:7c:72:64:ba:c2:52:
56:aa:61:f8:c4:ae:81:f2:43:d4:09:e8:51:36:d0:
b1:cc:c3:0a:8f:e0:43:d8:66:92:1b:05:e7:4f:45:
fd:6e:b4:d1:aa:7f:ca:61:3e:cb:35:c2:9e:25:24:
8d:fc:f0:b1:68:30:42:32:43:0f:e4:a8:b1:f8:1e:
3d:15:85:3e:7d:71:2e:ea:44:7e:d1:5a:ea:38:e8:
7e:29:75:cd:71:85:c7:6a:a5:60:2a:3a:30:5f:6c:
44:17:f5:a4:bc:c2:00:c9:3f:19:7f:68:7a:25:99:
6d:38:34:13:4d:9d:f4:91:29:35:e8:d4:27:4d:3d:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:CB:A7:C9:36:AE:12:8C:24:1E:04:07:C9:B3:F7:9E:04:4D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91cd10ed-7067-3e56-8822-8690face725b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:01:fc:fc:6e:9c:0f:bc:a3:e3:86:a8:cc:52:fb:94:d9:f0:
85:33:64:cf:e2:d8:18:0a:c6:45:93:b4:43:89:80:d5:a6:37:
00:a8:e9:a3:19:ad:a9:00:64:7e:7b:a7:4d:9d:3e:25:60:a4:
b3:30:67:ee:a3:56:67:82:fa:dc:65:c4:8e:11:96:47:c4:ea:
36:ff:0c:f8:60:6f:5b:cf:f7:f1:57:32:be:c2:37:7b:5a:ec:
2f:4c:37:5c:50:86:bb:c8:dd:18:e5:22:cd:e3:23:de:7e:91:
11:99:c5:d5:d1:fb:8e:73:26:09:85:d0:ee:f8:e1:15:30:0f:
05:c1:33:47:79:0f:9a:39:44:c0:df:b9:63:06:14:cf:0a:94:
14:dd:d6:b9:bc:44:8b:42:15:f5:ac:ca:37:d0:8b:fb:5e:12:
41:8c:40:66:65:4a:cf:bf:d1:22:11:b3:ca:d1:db:19:06:72:
e9:e5:e4:2a:9e:ea:72:b7:d4:db:1d:e3:5a:a3:bd:46:4a:a2:
53:c7:8d:b8:82:7b:32:a5:f8:ec:b9:ae:7f:e8:0b:48:66:ad:
07:56:46:46:05:70:1f:53:bd:66:92:c2:b3:8a:1e:e9:d9:fa:
ed:a4:0f:55:d6:48:c9:f3:ca:b6:a0:96:1a:14:6f:07:7f:63:
8b:a5:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:12 2025 by rpki-client