Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa
File: 4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa (raw, json)
Hash identifier: kUviPh9yuCk6JKnbUQazWRpm9ZEOPUVPrKHQXMDxpAE=
Subject key identifier: 60:17:48:BA:4B:E2:6B:A3:07:A3:E0:75:B2:94:CA:6C:F0:9A:28:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848278FA5A93D9A6D609CF52800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa
Signing time: Tue 10 Dec 2024 00:12:51 +0000
ROA not before: Tue 10 Dec 2024 00:12:51 +0000
ROA not after: Sun 09 Mar 2025 23:12:51 +0000
asID: 13335
IP address blocks: 104.29.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:8f:a5:a9:3d:9a:6d:60:9c:f5:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:12:51 2024 GMT
Not After : Mar 9 23:12:51 2025 GMT
Subject: CN=a30a9618-504d-4d24-a251-4524a22ad9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:69:5f:1b:0c:41:58:f3:9f:b9:02:0e:0c:
80:4c:54:ae:15:21:e3:90:1b:67:36:32:be:77:00:
84:ec:e5:c5:5f:76:23:ef:c8:77:08:d3:0c:79:eb:
be:29:a7:5f:3c:29:58:64:a0:82:a9:ce:9a:1a:67:
2c:19:67:87:70:00:0f:21:1a:19:2a:d3:ec:98:b3:
05:c0:c6:d8:e7:f8:b1:c5:a1:65:fd:dc:ee:9d:ac:
7e:24:aa:51:37:0a:81:16:a8:91:6c:a4:61:4e:04:
20:88:48:2d:f3:5c:07:bb:b8:5c:60:7c:d3:01:b0:
c0:38:27:fc:73:4f:17:03:88:f8:90:91:70:18:b7:
4e:30:ff:66:d4:20:1c:33:fd:75:6b:5f:15:48:56:
c9:81:1a:fe:9c:9b:19:5a:6f:04:4f:36:db:79:f6:
d7:cf:4d:b6:c5:80:a1:c4:24:e7:41:00:db:89:26:
99:cc:c0:5a:b0:cc:e6:8d:c8:a6:9a:b7:77:41:47:
bd:73:0a:f5:4f:96:ab:cc:2b:ef:2a:e5:8a:21:87:
cf:85:6e:93:f7:b3:ab:b8:c5:bd:c4:19:72:9f:81:
4b:07:12:19:d8:18:1f:30:8d:ed:ee:b7:8e:d8:b1:
ad:e9:c9:51:b1:9a:6e:e6:c2:36:81:c6:7d:19:e5:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:48:BA:4B:E2:6B:A3:07:A3:E0:75:B2:94:CA:6C:F0:9A:28:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cce11ca-c7f8-343e-aa37-07768ce5cb0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f4:d8:51:86:c9:2d:6e:9e:04:8b:6d:e2:21:03:a7:72:28:
bb:85:01:92:3b:e1:b4:ab:6d:02:e3:b4:a1:fd:37:32:37:14:
38:b4:c9:1c:83:38:e5:46:4d:4c:2b:45:c2:3e:57:59:c2:df:
e8:44:7e:af:01:fe:3b:3c:ae:4c:b9:61:eb:92:64:2e:21:84:
76:ff:b3:98:24:af:7d:8c:63:a3:8f:19:cc:24:23:b4:fa:13:
35:93:e4:e7:9e:a2:40:1c:0b:80:45:7f:6a:fa:ba:e8:fe:b1:
36:0f:c1:23:51:19:13:6a:ef:57:90:2c:4b:7a:06:58:0e:f1:
1f:52:3c:8c:ef:e3:25:43:6c:ec:93:a2:8c:87:f7:0e:5c:f5:
87:1a:06:01:f0:4e:16:f3:f8:7d:ca:c7:4a:d6:71:a6:3f:07:
0e:26:32:6b:16:5f:d7:f5:03:39:07:73:31:f2:9b:b3:f1:1d:
12:7b:04:85:60:3a:c0:a3:16:09:b2:cf:7c:7d:a5:42:f3:d6:
a7:b7:60:cb:36:8c:70:70:43:d6:17:2a:f8:c7:64:96:74:07:
6d:d4:7f:3d:b7:90:7d:03:16:55:de:cb:11:61:87:d1:b9:03:
3e:20:40:1b:69:2b:93:f1:1e:e9:e6:2d:8a:2b:1e:aa:4e:01:
cf:90:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:59 2025 by rpki-client