Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad3018b1-73c4-30d6-81ac-5f714f59ee7a.roa
File: ad3018b1-73c4-30d6-81ac-5f714f59ee7a.roa (raw, json)
Hash identifier: ESFH3v7MlWrOXDnM7TyV975hwYift0Z/8TFDYKQ7FFI=
Subject key identifier: 69:AF:39:74:86:CC:23:CC:62:E9:52:C2:2C:F3:78:EA:73:E1:CA:CA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584097D5D54F6D6DF9FE224B6C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad3018b1-73c4-30d6-81ac-5f714f59ee7a.roa
Signing time: Sun 15 Jan 2023 12:00:00 +0000
ROA not before: Sun 15 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Sep 2027 04:00:00 +0000
asID: 13335
IP address blocks: 104.29.92.0/24 maxlen: 24
104.29.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:97:d5:d5:4f:6d:6d:f9:fe:22:4b:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 15 12:00:00 2023 GMT
Not After : Sep 18 04:00:00 2027 GMT
Subject: CN=bce82d80-c092-4c0c-bdec-3c096d051f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:d3:5b:0d:03:7b:77:07:9b:08:5a:ed:ab:
5f:dd:7c:d8:92:61:25:ea:3e:cb:d3:1b:91:d5:4f:
7f:23:c9:d1:44:73:ef:d3:84:b8:9e:b2:ba:4c:74:
fd:6b:76:e7:de:fd:1a:a0:08:a3:1b:9c:e5:95:74:
90:9e:3f:91:f4:b0:ad:5c:d7:1b:de:87:13:ec:d9:
7f:6b:08:97:1b:8f:91:71:30:50:18:9e:42:a4:24:
ed:19:83:bc:44:09:1f:cb:e0:89:35:52:22:ca:8e:
63:a4:13:13:bb:44:52:49:6b:cc:0d:92:1e:a0:9e:
cc:e1:58:39:a3:55:43:b8:5c:14:06:38:e5:9c:38:
ef:d2:3b:79:bf:be:be:8e:8d:49:96:c1:51:39:32:
6c:d6:d6:51:46:c0:c1:d7:4d:db:53:4a:8c:31:78:
d8:02:84:e0:33:1b:96:b9:1f:34:07:2f:9a:e5:a8:
a5:d7:48:3a:af:3a:81:45:c7:e5:01:64:85:3a:32:
58:1e:bb:ec:08:76:ae:31:87:c5:05:36:68:da:38:
24:61:dc:30:72:e3:f3:ae:90:bc:c1:71:e4:76:1e:
9b:a8:cc:75:54:16:e1:18:0c:be:ec:93:49:5d:8f:
f4:89:63:a3:de:70:98:21:7f:29:f5:0d:e3:72:84:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:39:74:86:CC:23:CC:62:E9:52:C2:2C:F3:78:EA:73:E1:CA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad3018b1-73c4-30d6-81ac-5f714f59ee7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:97:8f:27:5e:d7:71:dc:32:d2:67:be:01:fe:a8:db:27:0e:
1d:b0:a2:5d:4f:1d:95:26:2d:52:6a:60:40:bf:bf:6b:19:ba:
55:52:a6:bb:1c:5b:a2:12:77:48:05:d9:5f:0a:95:da:04:d0:
a6:df:15:fc:1c:cc:b8:28:54:fd:95:2d:55:36:60:eb:b1:b9:
30:f5:e7:6f:78:65:25:d3:32:da:28:c4:7b:67:ff:78:d8:a9:
57:57:fb:bc:83:c2:73:cf:6e:dc:dd:9e:56:2e:54:80:5b:8a:
95:ea:a0:1e:63:49:1a:c9:e1:29:fd:01:73:fa:20:f1:a1:f2:
11:cb:c6:da:72:06:72:af:c6:64:4a:d5:45:4b:a9:7c:a3:ef:
78:f3:5a:1a:78:b5:82:db:b6:81:1f:67:33:c9:99:40:11:bb:
cf:a8:5d:ec:61:1e:19:42:24:45:bd:1b:f7:e5:7f:49:80:06:
7e:80:24:f9:fd:a7:96:da:53:1d:b1:9c:68:ef:05:96:3f:1f:
1d:f1:72:57:be:aa:af:8f:ad:d2:ca:38:cb:36:c3:c9:90:b5:
f9:3c:07:1d:ac:59:a1:95:f7:b0:0d:36:c2:90:ef:0d:ea:b2:
03:3d:4e:8a:8a:d7:2d:09:fc:36:e5:70:1a:e2:65:f5:d0:e0:
d0:e0:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:29 2025 by rpki-client