Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa
File: a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa (raw, json)
Hash identifier: 6syPY6B8+Dt6WHglQmSZcj/RuGHgIEp3myAmQ2bSAYw=
Subject key identifier: A1:F4:70:A5:6E:81:9B:83:AC:D8:98:5E:3F:DE:59:CA:7B:FC:76:CB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825630864D54DA40D36306680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa
Signing time: Mon 09 Dec 2024 05:31:20 +0000
ROA not before: Mon 09 Dec 2024 05:31:20 +0000
ROA not after: Sun 09 Mar 2025 05:31:20 +0000
asID: 13335
IP address blocks: 104.29.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:63:08:64:d5:4d:a4:0d:36:30:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:31:20 2024 GMT
Not After : Mar 9 05:31:20 2025 GMT
Subject: CN=87ed206c-6107-4ad2-aac9-4352d74b7c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:a8:7d:28:2e:8a:fa:ed:0f:19:fe:c5:a1:
79:56:f5:8d:cf:d4:7a:5f:c1:4c:6a:e4:f4:2b:42:
a8:7d:eb:82:cd:47:0d:8f:af:65:63:96:6d:4a:71:
74:65:6f:9f:f6:6b:48:a8:fd:9c:f0:ee:4e:76:21:
e1:03:56:db:9b:84:2f:39:45:e1:ad:75:f3:3e:62:
72:5e:7b:ff:db:0c:1a:20:ad:3e:54:bb:68:0e:03:
1b:5b:0f:41:7b:d8:8e:81:b6:32:d1:1d:35:f3:68:
c3:58:80:90:1c:f7:54:47:42:fb:86:9c:76:29:64:
98:2b:79:4f:69:78:58:1f:81:43:41:21:65:db:2d:
59:ef:19:90:fd:12:68:58:3f:5b:dc:06:cd:e4:b9:
57:80:20:29:fe:77:df:14:d1:21:67:51:22:b8:dc:
6e:40:ad:85:16:79:c8:2d:86:47:bc:4a:fc:af:28:
51:f4:98:7a:1f:60:32:cf:14:22:ee:e2:dd:eb:84:
f9:fc:22:10:50:7f:14:cd:8d:ac:7c:25:e4:39:e4:
76:3a:ee:81:e5:0d:9b:2a:f0:f3:a2:ab:fc:85:61:
9d:7a:fd:d8:17:1c:e1:e7:23:16:29:e3:51:24:86:
9e:f8:04:20:fc:0c:c8:56:4d:43:57:e1:38:1c:a4:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:70:A5:6E:81:9B:83:AC:D8:98:5E:3F:DE:59:CA:7B:FC:76:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:21:93:53:bb:0a:29:d4:69:f9:0e:07:9b:9d:85:86:e9:5b:
b6:ae:f5:70:b7:9b:e3:73:95:d9:34:4c:8d:d7:b7:41:ec:42:
2e:08:d3:8f:92:b1:d6:1e:58:e5:5f:3e:af:d5:cc:5b:08:c5:
6f:72:88:5a:94:46:26:38:86:02:8d:ca:e3:f7:d6:0a:c6:4d:
52:c3:33:aa:ef:46:3a:fd:9a:db:0e:b1:c8:7e:58:44:f2:0f:
a4:e6:85:e1:a6:85:aa:a1:35:39:ba:1a:69:34:ce:99:dc:0b:
8e:0f:82:6b:c0:5b:97:3d:0e:f1:85:0b:4d:62:19:d1:bb:58:
6c:e8:14:83:e3:9f:76:c0:da:1e:56:ca:ae:19:13:b2:34:34:
a8:db:7a:eb:ff:04:24:de:40:f1:23:5f:55:ed:1f:e9:dc:d7:
48:a5:25:cf:91:13:5c:2f:08:73:5c:66:5d:c2:51:18:82:2a:
76:1b:24:2a:f8:67:67:dd:d7:b7:39:c2:96:ba:6d:98:f5:bc:
18:0f:dc:84:0d:39:99:78:88:cd:da:4c:33:96:fe:f7:b3:54:
b6:10:70:9c:58:e2:05:20:20:a9:be:14:c8:26:8e:93:d5:ad:
73:56:b6:02:f3:58:8f:09:03:51:39:87:78:e7:91:55:f4:29:
84:57:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:02 2025 by rpki-client