Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa
File: 5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa (raw, json)
Hash identifier: 2KygcNPIbVKOt3TFwTOy0VyiVQ796PBicilX2lTm7ZE=
Subject key identifier: 44:A4:81:4E:57:09:3B:3A:CC:43:48:18:20:8A:A7:22:F5:4C:34:12
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFE31247D2BDFC2613F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.29.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fe:31:24:7d:2b:df:c2:61:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=d0504553-a367-4126-82c7-c62a2e17c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:ab:20:52:83:ba:bc:f7:dc:95:35:06:b8:
28:6e:af:db:31:56:88:12:7e:1d:c5:77:87:4c:d8:
dd:61:c3:62:26:80:37:6d:02:8f:a6:a7:06:ec:9e:
d3:36:c3:d4:e7:d2:43:d7:7a:39:d3:ad:9e:71:4f:
e2:18:92:5e:de:7d:f4:8d:0e:c7:10:19:56:ac:82:
a3:c0:40:16:bf:b3:a0:9c:f4:50:6d:83:c2:3e:05:
5c:54:fa:c9:b8:cf:4e:aa:c1:05:0d:b3:6d:08:7b:
c3:7a:0d:82:01:32:22:3c:41:20:a3:23:ef:ea:06:
ff:5f:41:13:f3:c0:0e:be:46:91:83:47:21:6d:54:
e1:e9:a7:4e:9b:fb:2c:7e:ee:4b:b7:75:ab:40:20:
29:7b:50:67:05:8c:f1:c6:14:63:18:7f:59:13:60:
4e:70:03:29:ea:41:3d:b9:1a:74:08:49:7b:e3:8d:
fc:db:aa:1d:47:e5:51:f9:05:1e:dd:33:a5:29:7c:
da:70:9c:f2:e4:aa:6a:65:65:4c:a7:aa:b8:3b:aa:
8a:44:1e:49:98:3a:9c:12:6d:f3:4e:78:e3:da:d4:
47:48:3f:ca:53:ea:0b:a7:2c:a3:90:8a:68:4f:1f:
b0:a3:05:31:40:8d:59:0c:55:b8:8c:2e:b3:2f:72:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:81:4E:57:09:3B:3A:CC:43:48:18:20:8A:A7:22:F5:4C:34:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ca:45:9d:f9:41:f9:11:65:bf:fb:9d:a8:3b:2e:68:51:ae:
28:ac:f1:fc:c2:dc:1c:16:db:1b:83:b7:63:95:7a:16:17:4f:
74:91:1a:44:2b:07:7f:df:34:3d:7d:c4:c2:5d:9f:d1:73:79:
ef:35:9b:b1:46:48:c5:58:e7:84:a8:9f:aa:b1:83:76:bb:cf:
b1:ff:1f:79:21:69:73:f2:4d:5c:c5:bf:cd:63:1d:8f:3a:63:
d2:41:f3:61:6f:32:e7:79:05:08:a3:24:dc:4f:37:fa:61:03:
fd:dc:6e:9b:16:53:7a:46:e2:0e:a5:e0:32:a2:34:8f:69:8b:
03:56:85:a0:c2:06:3b:f3:c2:e8:0a:f8:d0:30:08:64:23:f8:
b4:d0:f2:35:3b:c8:17:c0:b0:cd:63:49:a1:ba:14:20:d8:6c:
fc:cb:d4:88:f8:75:b0:26:04:56:11:d2:ec:63:80:c9:0a:9f:
2b:48:72:73:8e:0c:95:79:eb:48:97:e2:a6:14:11:c2:fe:70:
e7:23:65:06:30:04:ec:01:6d:a5:cc:c1:be:25:a4:9b:f3:49:
59:ca:9d:7f:15:69:41:2f:73:00:6f:ee:ad:3f:bb:17:a6:79:
a4:1b:42:fd:b5:7d:75:b5:07:c3:33:33:64:86:4f:33:2b:a7:
5a:0d:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:25 2025 by rpki-client