Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/980d012f-651f-32dc-ae76-5a8308bfcdd5.roa
File: 980d012f-651f-32dc-ae76-5a8308bfcdd5.roa (raw, json)
Hash identifier: +ObtTsiWeJUtmepdU/29q8wgsDQU+l7zvKI5LMBERaI=
Subject key identifier: 10:84:3C:8F:53:D1:88:96:FC:60:C3:CF:E9:14:E9:53:E3:F4:6D:BA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482560B83A968CB0E612825F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/980d012f-651f-32dc-ae76-5a8308bfcdd5.roa
Signing time: Mon 09 Dec 2024 05:26:40 +0000
ROA not before: Mon 09 Dec 2024 05:26:40 +0000
ROA not after: Sun 09 Mar 2025 05:26:40 +0000
asID: 13335
IP address blocks: 104.29.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:60:b8:3a:96:8c:b0:e6:12:82:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:26:40 2024 GMT
Not After : Mar 9 05:26:40 2025 GMT
Subject: CN=a1e56b3e-99b5-4b75-ad89-7afb857e1242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:19:d8:7e:fb:60:21:32:16:39:f8:81:bb:
95:f5:3c:9e:90:93:36:67:39:90:37:28:70:bf:00:
b2:b8:1f:b3:ed:ad:db:4e:b8:d1:21:ad:8d:86:bd:
6d:38:a0:75:eb:5c:90:47:d5:11:c9:3a:b5:b2:87:
47:f2:63:19:e3:02:4a:d6:19:78:43:d0:ee:2b:60:
ce:85:9e:57:ad:09:0d:19:dd:15:64:84:57:f2:ab:
aa:99:3e:df:1a:48:0c:da:07:74:82:1a:0c:1e:dc:
ab:db:81:ed:f3:ce:ca:1c:47:61:a7:26:90:53:b3:
ce:07:9d:ac:a3:18:13:85:2d:6e:02:7b:c9:d4:2b:
49:75:4a:2c:99:cf:89:21:17:cc:f9:12:13:fc:e6:
05:29:3d:b7:63:3b:36:88:b4:7b:56:22:dc:cd:89:
1b:d3:6b:70:63:73:71:cd:dd:1c:f7:2e:fb:25:5e:
4e:d9:65:53:dd:31:18:cc:f0:ee:84:b9:29:fe:2b:
6b:2b:9c:4b:9e:a5:88:f8:55:0a:78:86:5c:e8:5e:
ef:8b:59:f6:5c:38:48:ca:c9:07:c2:5a:07:8c:53:
e0:c5:a0:96:c1:3d:30:3a:73:86:fa:ee:c8:e6:67:
0b:a1:1e:4d:46:10:d2:66:d3:7b:2e:93:69:cb:d7:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:3C:8F:53:D1:88:96:FC:60:C3:CF:E9:14:E9:53:E3:F4:6D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/980d012f-651f-32dc-ae76-5a8308bfcdd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:aa:fa:29:20:3d:7e:ee:d1:05:91:c0:fa:66:f9:2b:59:68:
dd:dc:2c:73:fe:39:e9:ce:88:39:12:a6:1d:76:4b:bc:9b:3b:
da:9b:19:97:64:65:6a:2a:50:9e:a5:e4:28:1e:a0:80:ba:ab:
47:d9:3e:67:ff:57:df:94:eb:ac:f2:16:2d:29:f8:5a:1e:c7:
14:35:f5:f5:a4:8c:eb:e7:25:83:f6:e0:30:6a:ef:b7:a9:e3:
97:3a:f0:4b:c9:1e:9d:f0:00:ce:f7:e1:6d:e8:e9:d5:7f:d1:
27:7a:dd:20:19:14:7c:12:66:5f:f4:f1:ba:0a:4e:12:d6:e8:
44:3b:19:45:a7:25:c3:75:3b:11:01:50:70:fa:d4:14:d0:94:
8c:45:fb:0e:75:e9:d9:ce:f6:32:4c:09:13:72:83:25:06:f3:
d1:1b:d5:d1:3a:ca:4a:52:6f:b1:18:78:a8:28:1c:61:e9:24:
87:77:d4:f4:83:c6:9d:e1:18:58:0b:f8:e0:16:f9:ab:d2:fb:
cb:d5:e3:af:6d:fe:5f:b4:64:f6:44:de:a8:a6:53:ba:39:e7:
3e:69:ca:c6:5b:41:19:ee:ab:4f:e0:4a:68:d2:56:e7:42:32:
21:af:d8:1b:83:cd:d8:7c:ed:dd:f7:f8:c6:df:c2:3c:51:d9:
a8:ee:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:47 2025 by rpki-client