Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1138e7e-406f-3f14-aa6a-1c988983a57f.roa
File: f1138e7e-406f-3f14-aa6a-1c988983a57f.roa (raw, json)
Hash identifier: o3bExTXV8HvO9uSpAWXu2Yhj7CZwpqyBM0kRgDWRjHk=
Subject key identifier: 96:BC:1B:BC:1B:36:83:CE:28:D4:EB:DD:85:8F:DB:AD:3D:1A:77:9C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A12341E65ED2DF6342EF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1138e7e-406f-3f14-aa6a-1c988983a57f.roa
Signing time: Tue 10 Dec 2024 00:48:05 +0000
ROA not before: Tue 10 Dec 2024 00:48:05 +0000
ROA not after: Sun 09 Mar 2025 23:48:05 +0000
asID: 13335
IP address blocks: 104.29.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a1:23:41:e6:5e:d2:df:63:42:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:48:05 2024 GMT
Not After : Mar 9 23:48:05 2025 GMT
Subject: CN=9355cfd2-ef30-496b-bc7f-c9043773f806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:2a:92:e7:d4:36:2d:c0:50:18:d9:26:76:
9f:3e:7e:d0:36:d0:fe:2d:39:0b:84:b7:6d:b1:81:
b0:a7:48:b5:e6:96:fa:6a:05:32:0f:be:48:6e:9a:
36:67:f7:06:5a:47:09:3f:f3:a3:87:5c:71:4a:fc:
10:1b:fc:e9:d3:dc:55:68:ba:a4:a2:0f:82:27:f3:
bf:0c:6d:1c:d8:e5:4e:ff:8c:6f:56:a9:ae:c3:25:
93:15:1d:ac:d7:61:61:a6:d9:b3:0d:4c:f1:5a:ea:
40:3c:4e:30:fc:57:b0:e1:27:0e:65:b8:2c:f9:4d:
66:ae:6f:a5:34:e6:6c:64:42:cc:4e:c0:9f:4a:14:
55:dc:1a:22:37:64:ef:36:3a:67:5c:21:c9:67:9f:
d7:6c:46:14:8d:c6:f8:6e:d0:08:8e:f2:4d:c0:79:
b4:fa:3f:f6:c8:e6:41:13:53:b9:62:61:e7:15:73:
73:05:0a:71:20:fb:93:ce:77:43:61:48:81:4c:1d:
39:0c:ee:73:21:b4:8d:97:c2:ce:4f:cf:fd:a2:6f:
5a:b7:fb:e2:8b:c1:5c:e0:7e:25:ef:48:e9:41:1a:
df:31:59:e2:4c:d7:8d:e1:5f:62:71:54:e4:79:71:
66:26:91:a9:fd:95:87:06:98:d3:be:37:e6:27:a0:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:1B:BC:1B:36:83:CE:28:D4:EB:DD:85:8F:DB:AD:3D:1A:77:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1138e7e-406f-3f14-aa6a-1c988983a57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:fc:42:7b:d5:09:16:3a:14:8f:56:60:5c:81:92:da:92:fe:
1c:2a:b3:71:a5:bc:b5:79:28:2b:5e:eb:cf:4d:69:01:c4:4d:
75:93:89:5d:91:f6:e4:fb:27:13:ce:45:6b:75:88:f1:06:14:
4e:9f:d3:74:d5:c8:14:f8:54:1e:ca:98:a2:c7:c4:55:7a:46:
c0:5c:f0:ff:8b:e9:3b:f7:ac:d1:aa:f1:2e:12:07:71:88:ba:
e9:6a:11:99:13:cc:b4:f6:80:14:0f:ee:d3:4e:c0:2f:f8:ff:
04:15:bd:8a:bd:4b:b3:a5:f7:32:7c:c3:31:ea:16:58:f4:50:
c0:f2:ec:de:00:2a:c6:e0:84:0a:ad:e1:e0:db:16:7c:b5:27:
51:15:62:a5:ec:d6:dc:d9:e5:32:7b:b5:a7:7d:90:5d:9c:61:
29:cb:c0:5a:35:1c:14:be:92:be:4d:05:73:a4:fa:9e:cd:48:
c7:9a:1e:60:95:54:59:a9:2e:95:3c:b0:ce:4f:92:43:bd:9a:
86:89:00:f3:72:f5:83:db:17:a1:ba:c6:33:d9:cd:78:5b:9c:
9f:7c:97:72:87:a4:0a:5a:2a:3f:8f:3f:68:cb:a9:74:c1:74:
5e:8e:ea:6d:8d:d0:32:db:fe:90:5b:a6:c2:1b:7e:48:a1:bb:
5f:4d:71:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:47 2025 by rpki-client