Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa
File: a3832569-34d4-3472-aaf7-cb8a683640de.roa (raw, json)
Hash identifier: OE0NMR/t+ezwo7vjInipFyhpRodOUe+L7YGzvD3mccE=
Subject key identifier: 93:A3:F6:4B:49:4C:42:74:91:26:53:7F:5C:1B:49:E7:15:5E:E7:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255FE52BEBB395F9A9551D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa
Signing time: Mon 09 Dec 2024 05:25:01 +0000
ROA not before: Mon 09 Dec 2024 05:25:01 +0000
ROA not after: Sun 09 Mar 2025 05:25:01 +0000
asID: 13335
IP address blocks: 104.29.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5f:e5:2b:eb:b3:95:f9:a9:55:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:25:01 2024 GMT
Not After : Mar 9 05:25:01 2025 GMT
Subject: CN=901a3559-50ee-4602-a7fa-5f7cba83f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:63:02:ae:19:d9:04:16:54:14:b2:6b:24:
0e:c8:47:45:f5:b9:5b:fc:2d:ed:e7:74:87:92:d9:
78:0b:5a:b8:1e:0a:22:82:19:db:b6:8c:b2:13:aa:
02:d1:46:8a:52:67:ee:13:80:42:18:ed:23:ad:81:
6b:79:02:2f:f9:e6:97:96:3e:9a:66:4c:10:5f:d4:
30:5d:09:60:f9:d6:b6:bc:7b:0b:36:8f:bd:c3:3b:
7f:49:5f:18:89:97:a7:16:9c:d8:a3:39:61:e2:bb:
15:d0:54:70:36:01:a0:41:12:c1:4f:39:dc:1c:fb:
22:44:ba:91:c1:dc:4e:0f:5d:52:c1:15:33:04:07:
62:ce:b1:f5:fc:e9:ba:65:5a:7c:88:41:d3:38:81:
ea:bf:34:ca:9c:1e:c2:e5:a0:a1:38:57:90:09:fe:
32:13:ca:fa:64:36:0e:53:fd:94:eb:e9:b5:9a:94:
09:b4:48:2b:dc:59:a2:40:ee:57:ba:1d:66:bb:7b:
e1:0a:5d:28:b3:00:83:b9:44:b9:03:ac:e1:37:18:
b7:ea:56:15:2d:06:7f:66:a7:51:43:c2:55:3a:fd:
e0:d4:0f:4d:b4:5c:8a:ff:e7:df:c5:a7:20:85:be:
4a:0d:0e:22:e4:eb:48:b3:ad:d1:3d:3c:8b:b7:a8:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:F6:4B:49:4C:42:74:91:26:53:7F:5C:1B:49:E7:15:5E:E7:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2d:71:fd:3a:38:8a:4d:9b:4f:72:5e:3b:1c:07:ca:d8:9c:
ea:11:10:2c:3a:ac:de:bb:01:56:c7:65:ac:40:d1:2a:47:14:
23:24:ec:a6:47:f6:58:cb:2e:e6:f5:19:04:d7:70:b2:72:c7:
86:c7:f7:c6:c9:31:7a:66:fe:af:6d:82:ce:e6:6a:53:4c:63:
6d:d5:27:23:f9:7a:65:e4:32:25:0e:16:03:7a:73:8e:68:c7:
c6:2c:de:60:96:18:ae:3c:06:36:ff:c2:ef:43:43:46:9a:0f:
53:ab:47:4c:bc:7b:97:be:8d:1f:d7:cf:5f:30:bd:27:ef:e4:
8a:eb:39:74:2f:d1:b7:f7:36:8a:d7:b2:13:84:ef:a6:a3:4e:
9a:00:c5:69:96:43:df:f9:59:5f:fb:f9:d8:16:64:75:90:cb:
da:b4:96:74:96:4b:17:1b:f0:58:b9:3d:27:3f:25:96:f1:e6:
12:97:f6:13:c6:4c:13:74:11:11:04:f0:03:43:b8:96:22:80:
b7:43:44:f5:54:0a:53:bc:a8:c6:c1:ca:b5:17:2d:65:85:40:
e2:95:e7:76:4f:16:42:34:87:f7:d6:c6:9b:df:e4:d5:8c:bc:
ff:3c:2c:9e:a1:46:bf:e7:2f:cf:64:bf:02:ed:ef:59:7c:ac:
56:6c:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:35:30 2025 by rpki-client