Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c80683c-fa1c-362d-a37d-6b100fb7932c.roa
File: 4c80683c-fa1c-362d-a37d-6b100fb7932c.roa (raw, json)
Hash identifier: mjH2w/dJz1INF8e1GPjKGMYbKnBEt4t27weSpGdEe4w=
Subject key identifier: 04:B3:F4:22:98:0A:19:61:E4:B7:04:02:49:9B:AA:12:73:13:3A:92
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFB895FF08A622998C300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c80683c-fa1c-362d-a37d-6b100fb7932c.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.29.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fb:89:5f:f0:8a:62:29:98:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=46a77fb8-10f4-424a-806a-47f4e819419b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:a0:63:86:cb:2f:e8:f8:c9:1c:84:f5:8d:
75:d6:5c:71:f1:98:b2:22:95:8d:9a:78:7b:00:98:
cc:b9:24:77:54:b0:d4:29:2a:ef:fc:e7:5f:73:ba:
5b:44:0e:d7:a3:06:65:68:c9:c2:4b:21:bd:d0:c3:
09:58:83:18:cb:87:94:54:b0:56:01:50:c0:5f:bf:
3e:c9:4c:a2:cf:c9:e9:e4:90:79:96:34:fa:f0:ca:
1a:16:c2:ed:7f:ea:30:72:ec:f1:c3:93:50:83:42:
b5:fe:6e:df:a7:73:e3:00:3e:9a:e4:c6:20:84:72:
90:7e:52:f2:60:6e:73:bf:57:19:e0:ee:6d:bc:a2:
9b:df:df:9b:6b:c3:81:13:e8:eb:cc:4c:23:7f:3a:
4e:3a:a4:21:4d:48:2d:4f:0c:f4:b5:58:be:ed:53:
07:d3:da:42:4b:fe:d8:dd:c4:4d:90:de:88:2a:42:
5c:ca:9b:cd:4b:ab:6c:60:22:09:a8:aa:87:1c:8a:
c4:79:c3:64:62:bd:a5:5d:63:4f:91:a7:25:2c:e9:
f9:69:04:ea:04:d8:3d:96:27:ba:4e:4e:96:66:bf:
3d:93:97:9c:23:0c:f1:c7:3f:bd:31:2a:71:53:b6:
86:e5:bc:16:a9:96:3a:03:4f:f1:7f:ec:35:2a:9c:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B3:F4:22:98:0A:19:61:E4:B7:04:02:49:9B:AA:12:73:13:3A:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c80683c-fa1c-362d-a37d-6b100fb7932c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:2a:c2:19:d8:ad:2e:45:52:74:bf:9a:18:6f:e9:a0:29:0a:
09:08:89:d3:13:fa:88:ce:cd:15:7a:96:bf:91:73:8b:71:c4:
51:e0:94:fd:fa:69:17:5a:70:3b:f5:de:a1:e1:e0:c9:e2:68:
e4:ee:ac:0a:08:53:49:0a:e3:4a:ea:33:24:94:29:f1:5c:c6:
23:63:bc:9d:66:49:53:97:65:15:9f:ec:0d:1f:52:75:7b:5f:
05:ef:e1:e0:16:6d:5f:6f:71:17:5b:19:1f:e0:cf:11:b5:da:
ac:8c:7f:7e:3a:b1:45:1d:45:41:74:8c:87:ca:d1:52:54:3b:
65:8b:3a:5c:be:f6:bb:ea:7b:e7:52:35:0e:fb:45:23:b9:dd:
f5:1d:0a:22:c3:b8:4e:0c:8c:ea:af:21:24:e5:dc:6e:8c:78:
eb:0e:fc:b0:da:b9:7e:1f:37:aa:e5:e9:92:d2:4f:c3:d8:c6:
bd:16:1d:dd:5d:9f:cd:7c:48:e3:54:b3:07:16:d6:c6:3c:4f:
d3:56:68:da:db:b7:4d:66:f1:11:ca:d0:03:0b:d9:19:7b:15:
99:58:fe:9a:0d:9a:0f:74:ab:ca:32:b3:3c:ad:ea:11:7e:15:
0b:0a:0a:e6:20:22:a0:ba:41:96:72:15:f4:cc:78:94:61:60:
7c:7c:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:12 2025 by rpki-client