Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa
File: 7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa (raw, json)
Hash identifier: 9aM5akD4hIDcGY+ADeEmpW+n3f0ZLPV12U6BwNWO/gE=
Subject key identifier: A2:72:4D:BD:7A:E3:42:47:B6:4D:E0:77:CB:D3:9E:21:F9:E8:EF:5D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFB965F1E341E2B9C8400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.29.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fb:96:5f:1e:34:1e:2b:9c:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=89266e86-38bd-4a3b-9cb7-255f5288c9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:d8:17:2b:61:de:58:d4:0d:f1:66:b4:16:
c5:79:6f:f5:b9:ae:e6:ab:42:49:cf:28:5a:e1:e5:
f9:71:ce:e9:c9:72:ce:04:56:d9:df:e3:0b:a7:30:
29:9c:3a:f9:48:2a:1c:e9:76:fc:5e:bf:57:c9:9e:
ee:67:eb:5b:c1:69:3d:52:a7:c9:05:2c:9d:9e:0a:
c6:7e:93:6c:f2:5b:36:a2:a7:60:47:a6:50:99:e3:
53:e9:62:4c:ae:cb:22:9a:4a:05:d0:4e:5e:d1:64:
6b:96:df:db:45:23:fd:49:63:58:e0:d5:93:a2:65:
15:ca:83:d1:af:9d:0b:0f:d2:0b:4a:69:dd:5c:f8:
30:c7:53:03:80:cb:80:e7:9d:7a:46:20:29:32:2b:
78:9b:20:23:b9:c7:7f:79:7f:51:e0:96:f7:45:09:
53:50:3e:3b:0e:6e:7c:82:71:9d:6b:d3:7d:91:f2:
05:0b:12:5b:e0:19:10:be:69:24:c7:06:bb:e1:81:
46:68:37:0d:5d:69:b6:63:50:c2:4f:ea:4f:c2:53:
76:ed:d7:e9:90:e0:a3:f0:df:e1:d3:f3:80:fe:6d:
e5:c4:04:58:0c:ae:22:10:ba:46:dc:e2:4a:29:d5:
44:b5:27:d1:0e:57:2d:bb:89:80:68:a3:ee:99:4d:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:4D:BD:7A:E3:42:47:B6:4D:E0:77:CB:D3:9E:21:F9:E8:EF:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:8f:aa:00:09:90:0a:8b:ac:39:0d:f7:71:15:d0:70:92:cf:
94:94:5f:1f:c0:36:8c:96:0b:2c:91:c6:6a:74:64:86:ac:c2:
6a:14:fd:a6:c0:7d:c3:32:07:52:55:0d:22:75:0d:11:7e:08:
96:e4:94:12:42:94:42:6d:41:fb:45:5f:d5:29:33:a4:7e:d2:
5c:65:25:63:0c:8a:77:1b:96:01:97:88:6f:9c:dd:e4:eb:a5:
50:dc:9d:05:1f:04:f7:b7:9c:8d:fc:37:60:2d:62:9c:02:e0:
86:75:89:c1:43:af:a6:e4:d6:12:3b:9a:d7:ea:0c:5f:7e:97:
6b:53:03:5a:e0:e1:9c:9c:26:7c:46:12:b4:b8:97:ad:4c:ae:
4b:45:be:35:3e:d1:d7:d7:ce:97:63:fc:99:bd:a8:8c:57:94:
92:e2:38:fc:bc:b2:00:34:97:ab:cf:7d:09:42:da:87:ff:4a:
32:66:08:f3:c7:3c:68:f0:92:25:a1:70:03:52:a8:1b:ca:98:
17:69:d8:f1:20:a6:4b:98:fa:b6:24:a1:9b:97:7e:12:de:ef:
fb:f9:d0:87:01:0a:f5:f2:66:f7:bd:a3:03:41:af:a8:d4:bd:
7d:9f:51:f2:80:ad:4f:fc:5e:e4:b9:86:9b:d8:81:3e:fe:d4:
73:99:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:53 2025 by rpki-client