Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa
File: a3832569-34d4-3472-aaf7-cb8a683640de.roa (raw, json)
Hash identifier: accUu22U7xKtlUdU/mDzGOR0OBDhFIhicAc0D+yknVE=
Subject key identifier: 29:38:95:EF:23:AB:78:CA:5C:45:25:68:73:80:6E:64:FF:03:07:8C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C9F95AC6B56187610280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.29.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c9:f9:5a:c6:b5:61:87:61:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=11281234-d356-4be1-bb67-59699d2de813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:64:05:46:04:19:c8:7f:1f:53:2f:6d:c9:
4f:07:df:09:d8:12:30:b3:35:07:92:93:12:ec:e3:
3b:ec:10:bf:0a:fb:97:4c:85:20:38:c7:48:c4:7e:
00:8e:dd:5a:06:f3:88:87:e3:ad:c5:c8:51:11:b4:
83:d9:00:ff:7b:97:f9:39:fc:a6:4e:3a:f1:da:a7:
1d:2d:f7:e9:19:39:12:75:40:2b:92:ba:18:80:aa:
4b:25:8a:cd:66:d3:61:5c:e0:83:b5:de:95:a5:fe:
f9:31:67:af:f4:90:61:0d:03:a6:42:0f:e7:2e:36:
58:6f:c6:52:07:7c:57:01:07:97:cd:b1:07:d5:1e:
cc:56:c7:11:3d:30:45:07:49:61:24:05:d9:ca:d9:
1a:c6:9b:fc:3c:48:66:3e:a7:17:50:fc:1e:4a:87:
77:48:29:94:d1:8a:8e:26:8c:ad:64:b9:75:42:c9:
10:b5:58:1e:eb:1b:e0:d3:68:51:f9:61:1d:72:51:
65:66:f6:ec:90:fe:c9:99:dc:41:cf:7b:ca:c9:10:
9d:63:a3:8a:1d:4d:57:49:91:9d:56:0f:7c:81:2c:
e4:e8:70:0b:67:63:cf:8b:37:e4:1f:fd:ab:a4:c6:
9f:60:b6:f3:6c:d0:28:71:99:e2:10:4e:4f:25:f4:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:95:EF:23:AB:78:CA:5C:45:25:68:73:80:6E:64:FF:03:07:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:88:3a:1a:8c:c2:ea:0e:8d:af:f4:df:b5:20:46:08:64:27:
a9:26:50:fa:4b:b4:d6:1e:c6:be:55:cc:c0:bf:7a:a4:03:f9:
cf:3b:52:73:1e:e4:af:eb:2d:52:6c:80:79:ff:4b:81:ff:eb:
5e:e0:f5:c2:e3:4c:69:7f:a0:7f:7a:75:d6:89:d4:0f:23:7f:
09:dc:c4:76:0c:41:dd:18:01:b6:fd:f2:38:a8:ac:85:79:70:
a2:9b:ee:fe:eb:09:ac:23:78:19:ee:16:b1:14:b4:3e:8f:ba:
f6:6b:2b:8a:67:c6:71:8c:ca:3b:cd:bf:67:73:7d:a9:cf:ce:
f1:5e:8e:84:07:a6:87:f0:5a:19:99:a2:e6:07:6d:71:d1:28:
d0:1c:57:be:6f:aa:b0:1e:f8:04:20:b9:71:1d:5c:ff:fc:85:
5c:6e:c9:0e:9c:cd:14:cd:f6:62:21:94:24:1c:f9:57:eb:2a:
46:6d:33:93:e1:0a:b6:ae:dd:9b:36:e7:c3:89:a4:e5:50:61:
9b:68:f5:3d:77:24:c9:05:12:1c:f4:5b:25:2a:8d:8d:31:27:
8d:22:d3:65:83:9b:3f:81:88:94:1f:15:f6:d4:6d:e8:0d:e5:
04:fd:16:11:c9:7d:24:b2:af:38:08:1f:02:5e:b5:59:cb:41:
61:2c:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:35 2025 by rpki-client