Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa
File: 32ff085f-6bc9-3189-b388-01380caf0093.roa (raw, json)
Hash identifier: HDVDRMltwmKmpB0li8b8hm5+F+SXdkP1n2Df/Ol3n+8=
Subject key identifier: 1B:3F:05:B9:91:22:89:DD:97:B2:66:C0:96:57:CC:38:C7:A6:D0:7F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6CC258B5002C2054E36C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.29.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:cc:25:8b:50:02:c2:05:4e:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=95c09a49-c39f-4c1e-97d2-ff1a548877a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:4a:a3:2d:7d:06:22:30:3f:74:0f:0c:e7:
93:8e:28:4f:39:94:b5:48:5f:67:d1:cf:88:7b:4c:
e0:5e:42:6e:7e:20:55:15:db:42:22:95:21:84:4b:
58:62:ba:d5:e6:e6:69:87:62:3e:7a:f6:5c:72:f5:
56:b3:43:be:ed:92:08:b5:37:bc:2a:59:f2:9e:76:
a9:b4:16:d0:57:b9:aa:77:b9:18:b6:fe:b2:dc:2b:
45:16:a0:96:f6:c9:b9:39:38:d3:9f:2e:07:59:94:
e5:e3:71:af:f0:ab:99:f1:74:0a:13:20:4f:35:ac:
7d:72:bd:93:92:d2:1a:84:cd:c9:7c:75:53:19:94:
d1:c3:0f:52:41:a4:be:03:9c:9d:a1:c0:40:d5:2b:
e7:1d:f1:37:40:b5:52:fb:c5:b3:20:44:fc:14:16:
53:79:50:cd:df:06:2d:e6:3e:0d:83:49:ce:62:46:
94:47:e4:74:95:e5:3b:85:f0:18:a9:b8:7e:ff:28:
5a:c3:7c:ec:9c:33:f3:e0:8e:06:54:88:c5:15:a6:
0b:ea:b6:4b:ed:18:a4:0b:5f:77:00:fe:7f:91:8d:
ed:72:86:bc:ec:ba:92:d5:75:19:76:35:78:ee:b9:
a9:01:3f:60:ec:05:a8:81:64:5f:41:8f:ee:2c:95:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3F:05:B9:91:22:89:DD:97:B2:66:C0:96:57:CC:38:C7:A6:D0:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:98:0f:54:0d:39:0d:9c:14:6c:84:9b:a1:07:3e:14:3e:94:
99:dd:31:96:0a:2f:c8:b4:0f:fd:09:68:c7:61:f2:d1:59:4f:
93:bd:11:5c:dc:76:9d:68:8a:f3:14:fd:0c:86:c4:1b:fc:17:
8c:1a:6b:75:30:17:58:74:bc:04:c4:f3:4a:d3:f6:29:14:36:
1a:9d:46:7d:35:7e:af:94:33:1f:b8:de:69:89:79:93:f8:ce:
c4:dd:14:4d:c1:63:a8:f0:1a:e1:20:5a:d7:9f:91:99:15:a8:
8d:9f:3e:1a:e7:92:37:0c:d0:dd:2e:1d:50:60:ba:04:04:5b:
a6:55:ac:a7:35:3a:cd:20:ca:40:b6:b7:be:2d:e8:2a:f6:36:
00:03:a1:77:02:e9:b0:d1:a3:b8:65:38:95:83:ca:e5:a2:0c:
c5:be:10:3d:90:3c:1c:1a:58:28:6c:4c:3c:c5:14:8f:02:21:
03:a4:87:ac:d3:ef:73:14:f0:a9:fc:84:51:3e:45:d6:8d:f8:
4c:26:0e:6d:b6:90:3c:aa:22:2e:12:bd:b8:fc:77:d5:d7:ee:
6d:15:08:a1:89:bc:d4:d0:89:a5:e6:16:b9:1e:ba:aa:32:b9:
73:6f:b7:e0:ef:6d:8f:27:fa:b2:3a:f6:4e:99:f3:48:30:0a:
db:77:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:00:34 2025 by rpki-client