Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa
File: 39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa (raw, json)
Hash identifier: OdZwcl+uAw+zwQt7c9LKWdh7qYxIo+zqPgLiC4R5QgE=
Subject key identifier: E5:EC:65:B1:0A:DC:1A:0E:68:80:03:BB:2E:CF:05:DB:C8:55:C3:D6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858401A6226C38363598D28D845C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Wed 05 Jan 2028 05:00:00 +0000
asID: 13335
IP address blocks: 104.29.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:62:26:c3:83:63:59:8d:28:d8:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2028 GMT
Subject: CN=faabb1e9-fcb4-4569-b75e-912c18a2cf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:80:de:37:30:a6:05:c1:b4:f6:96:6e:ae:
d8:e7:b7:88:03:5d:5a:5a:97:c1:fd:e8:67:00:4e:
88:71:89:81:e7:58:63:ec:1b:89:01:66:cf:a9:3a:
18:b2:34:80:5d:1f:b7:e6:13:04:e0:de:2e:37:1d:
4a:c9:7e:83:dc:cf:a3:9d:82:57:6d:59:b3:8e:ce:
e2:47:35:b8:cd:d7:9f:c1:b3:81:f9:77:41:f5:c4:
ab:17:e7:1d:62:39:b6:44:e7:e4:be:39:76:d9:76:
7b:bd:33:98:d1:69:b1:fb:dd:b3:a4:8b:d6:5f:4e:
55:65:7a:b9:8c:0d:8e:65:be:42:0d:8f:8e:be:9b:
07:84:83:b7:f7:91:88:04:e4:12:81:77:07:61:c8:
a3:01:31:b0:74:97:d1:b6:c6:86:48:70:f4:7c:07:
d0:49:42:d7:a3:bc:48:c4:ab:97:72:c8:b0:8d:37:
89:60:4c:5b:33:12:39:75:4b:19:0f:5f:6e:52:ef:
37:d3:32:0c:84:ea:99:04:2e:cc:6b:6d:50:ab:e6:
db:3c:2f:52:5f:f5:73:e9:d7:bc:61:5a:7f:1b:87:
fa:e1:78:3c:e8:37:4d:1e:81:0b:8f:7c:df:32:53:
30:31:07:25:cf:d3:e8:c8:3b:2a:e3:e3:bd:4a:bb:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:65:B1:0A:DC:1A:0E:68:80:03:BB:2E:CF:05:DB:C8:55:C3:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:bb:29:6b:33:bd:77:a8:ad:f8:01:81:89:ac:1f:f7:22:eb:
d8:28:c4:22:e0:4a:73:fd:97:32:48:cb:bb:d2:1e:ed:02:78:
d4:7c:8b:ff:98:5d:86:dd:39:bb:7a:6c:d2:67:7b:d8:ff:fe:
f9:d0:65:29:a5:ec:aa:c1:db:34:d6:e3:f4:e7:c6:b4:66:a6:
73:d5:55:a0:a5:fe:8d:4e:51:12:ce:ef:7b:66:17:27:7e:87:
6e:0c:3b:e4:a5:c4:66:d3:f6:5c:4e:9f:50:30:97:ef:c7:a5:
af:71:9c:f0:12:5c:58:5e:88:cb:af:0e:38:14:c8:86:be:e3:
93:06:fc:ef:02:b0:0f:19:18:70:48:e8:38:a1:e1:35:f7:20:
cd:ff:b3:3c:8c:15:f0:f6:02:53:93:aa:4d:6a:4b:90:77:02:
c8:13:37:61:9d:23:6a:70:1e:1e:a9:5e:76:e8:b7:69:e7:c8:
f5:79:29:8a:f6:19:1d:97:3e:5b:12:fb:2c:c1:53:6f:fb:98:
42:33:76:12:3f:5c:1b:d1:14:bc:d8:57:a7:e7:82:79:d9:c8:
3d:65:87:d7:73:09:1a:1b:a1:f6:06:6a:18:01:3c:c9:26:b6:
c2:ae:a8:63:0e:21:4e:bb:25:48:ad:8d:23:84:5a:98:08:50:
09:30:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:13:46 2025 by rpki-client