Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa
File: d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa (raw, json)
Hash identifier: Tzzp2A07v8bjek4xc6n6NQlOzeg2sTG7e6jRCMkY76I=
Subject key identifier: C6:90:50:96:40:BD:42:04:8D:7E:3A:1D:14:46:8C:10:00:E2:01:C3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255FBB9F5AAFC6B039231000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa
Signing time: Mon 09 Dec 2024 05:24:41 +0000
ROA not before: Mon 09 Dec 2024 05:24:41 +0000
ROA not after: Sun 09 Mar 2025 05:24:41 +0000
asID: 13335
IP address blocks: 104.29.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5f:bb:9f:5a:af:c6:b0:39:23:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:24:41 2024 GMT
Not After : Mar 9 05:24:41 2025 GMT
Subject: CN=2f4dddcc-44b0-42a1-bb73-73b5571fbb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:94:a3:e2:50:b2:54:60:30:05:2b:b0:a5:
d0:43:c0:c2:8b:01:5b:3c:32:1b:66:5b:e1:f0:7b:
dc:36:e5:1c:bd:a5:7f:03:3e:fe:f8:38:6b:cc:39:
9a:bc:bd:fb:64:c2:c6:08:47:d2:5f:26:f4:15:54:
b3:7f:53:a7:86:a9:8c:6e:d0:84:48:c0:0c:7e:60:
04:db:aa:40:7a:35:fd:f2:4f:30:ab:7c:73:99:f5:
5e:65:33:8e:57:d2:ce:0e:29:0a:1b:43:3a:ae:aa:
a8:b4:12:84:4b:5e:67:d5:ec:2d:e6:0a:6e:3e:c5:
8e:e8:26:b5:ef:99:cb:b2:1e:45:df:ba:d0:dc:0f:
c1:ec:b2:a8:cc:c8:a7:b9:62:56:df:93:96:0e:1c:
bc:77:5c:9e:bd:14:05:f5:26:fd:df:5f:c4:22:22:
8b:e1:16:b4:56:f0:22:b7:08:d3:42:38:39:3b:e3:
9b:51:7b:0f:00:b2:2a:c1:4c:97:d9:30:25:43:dc:
28:fe:e6:ff:f3:aa:9f:9b:55:bf:d6:ac:c5:54:db:
df:a5:f4:ef:55:1f:ab:5a:1e:d0:6a:90:5a:a3:f8:
67:2c:c0:6d:31:de:93:e6:8d:6c:6b:85:0e:9c:16:
05:3f:9b:40:f8:7e:ce:9b:d4:5b:36:a7:c2:d7:d1:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:90:50:96:40:BD:42:04:8D:7E:3A:1D:14:46:8C:10:00:E2:01:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:8e:86:95:a9:55:e4:cb:a2:fc:f6:c9:c5:dd:80:79:14:0b:
84:15:33:78:96:c5:ca:a6:55:0f:fe:ce:3d:78:cb:96:c7:d2:
83:2d:0b:5c:d0:29:9b:20:75:36:3b:c6:48:50:f5:94:07:2a:
e2:1d:78:aa:95:2e:71:de:f1:5e:c6:97:d7:0e:1b:73:fd:01:
b7:72:02:73:2f:50:fa:63:d9:de:22:0d:36:ee:73:3b:06:5b:
51:37:81:65:ed:03:c5:66:ca:41:08:cb:23:63:cc:11:09:16:
42:6c:02:e0:2b:d0:f6:74:94:9e:61:ea:29:a3:a1:86:86:05:
d2:d9:38:5a:b7:13:6b:e6:3a:bc:49:aa:30:60:43:35:a3:90:
86:cc:c6:c9:e1:5d:2c:7a:75:c3:b7:37:bb:dc:b1:41:d2:82:
92:60:a5:06:5a:ba:1e:d7:b7:b1:5a:59:72:a6:f7:d5:8e:13:
5a:71:42:1e:fe:82:8d:a2:61:3f:93:0e:32:2c:aa:52:83:60:
6b:5e:1b:bc:2d:4c:de:3b:d0:ed:11:d2:b8:3a:d6:ea:af:5f:
cf:fb:bc:c6:c1:f3:df:f1:25:a4:a1:43:b7:b7:e1:6b:06:13:
29:66:9e:c2:56:13:88:9d:f0:37:9a:16:f5:d3:fc:3f:21:da:
25:33:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:35 2025 by rpki-client