Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a280ae-ecc1-329c-84a2-aac0a20f9461.roa
File: 25a280ae-ecc1-329c-84a2-aac0a20f9461.roa (raw, json)
Hash identifier: /lCafiI+4fx7SMhGBsXWFN34pdFZUyXwGwjJuFhcqX4=
Subject key identifier: D3:38:B8:2B:58:BD:D4:F9:15:43:A8:F2:03:4E:94:16:FD:78:CA:BC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825627D29A9F5B34AAB2DE680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a280ae-ecc1-329c-84a2-aac0a20f9461.roa
Signing time: Mon 09 Dec 2024 05:30:14 +0000
ROA not before: Mon 09 Dec 2024 05:30:14 +0000
ROA not after: Sun 09 Mar 2025 05:30:14 +0000
asID: 13335
IP address blocks: 104.29.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:62:7d:29:a9:f5:b3:4a:ab:2d:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:30:14 2024 GMT
Not After : Mar 9 05:30:14 2025 GMT
Subject: CN=c64bd3d8-597f-4dec-bc7f-fcc5a54dec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:a7:b2:f9:35:f5:10:db:b9:42:b4:54:f6:
78:d2:d1:b0:d8:c1:79:7c:e6:48:04:77:6c:b0:d1:
34:ec:0f:1b:07:a3:ff:8e:67:75:dd:74:b5:91:7b:
3a:91:43:ae:85:0d:a1:e5:c4:a5:4c:06:5b:ca:71:
6d:24:8c:53:8c:2c:8b:b8:b5:eb:56:1b:fe:eb:ac:
93:76:ea:04:62:e7:5b:53:fe:93:26:a6:da:63:25:
b0:86:ab:44:7e:92:18:22:28:65:96:6d:4b:4b:b5:
cc:81:13:c5:44:08:1c:5e:cc:f0:67:f4:12:7e:89:
cd:4d:73:83:ea:df:c1:02:8d:3b:8c:bd:67:a5:5b:
69:ba:dd:4a:7a:83:0f:ce:48:a8:b8:74:3b:5b:bf:
21:04:f8:f5:e5:72:80:03:4b:a4:bd:89:78:4e:5d:
17:c0:83:6f:51:91:ac:1b:f7:88:f6:d3:2d:e2:8e:
0b:f7:6a:89:95:da:18:9d:cf:69:8c:9d:ce:18:e3:
e9:0b:84:19:8b:97:2a:81:c6:68:26:82:ff:b9:e8:
85:2f:21:ed:fa:23:94:65:2d:aa:c7:63:4c:b6:f1:
49:a8:ee:e1:d3:0b:fb:53:38:62:99:43:b5:9a:db:
88:d1:08:13:ef:e1:28:c5:bd:e5:b6:0a:61:17:04:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:B8:2B:58:BD:D4:F9:15:43:A8:F2:03:4E:94:16:FD:78:CA:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a280ae-ecc1-329c-84a2-aac0a20f9461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:2c:4d:83:f2:a5:1b:c0:9f:ec:de:15:2f:07:4e:2c:9f:5b:
ea:9c:96:81:9e:80:3f:52:89:42:9e:3a:90:6c:45:22:51:4f:
80:69:fc:03:63:b2:7d:58:91:b6:b0:9a:31:b5:c2:39:fc:e9:
9a:39:8f:45:07:55:eb:2a:b6:8f:e6:53:75:c9:97:a0:2a:2d:
2b:f1:1e:ae:c1:69:0c:b6:f1:e2:3e:5a:a4:01:27:a7:db:75:
b4:51:6b:5b:9e:e0:a0:aa:a6:ed:44:92:37:76:3d:12:8b:fd:
94:cb:b2:d6:8a:1d:97:ef:a8:52:e6:d5:2a:a0:0e:9d:95:72:
12:02:8c:bb:1e:0e:d6:73:26:2d:32:a5:f5:19:9a:fb:ba:34:
3e:71:29:10:c7:da:21:f0:68:23:ed:4e:73:a2:66:82:aa:60:
b6:ff:ff:32:3d:db:45:f2:f1:e4:7f:f3:03:5a:36:85:db:0e:
a5:26:4e:a3:f8:30:e0:2c:33:0e:ff:6b:19:13:4e:bf:90:87:
89:27:2f:b2:13:b8:71:c3:00:0c:e5:a3:b8:33:6b:28:37:c8:
6f:b8:cf:d4:99:5f:29:43:cb:0e:4d:f7:52:22:79:9b:5b:1a:
2d:fa:50:ff:9f:f2:4b:a4:5e:70:67:5a:7c:35:99:48:50:cb:
be:35:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:54 2025 by rpki-client