Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/925d3937-3a73-350a-bd7f-4b3d843a35a4.roa
File: 925d3937-3a73-350a-bd7f-4b3d843a35a4.roa (raw, json)
Hash identifier: ytzGOfgm5vM9ONnqNSO2LbfrNljFj6kaFnHsgXnZ1Ck=
Subject key identifier: 71:CC:FA:FF:8E:AF:B7:C2:1C:57:94:DD:E4:E5:2B:4B:92:A7:4B:4A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A75CFF11B40604EA035F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/925d3937-3a73-350a-bd7f-4b3d843a35a4.roa
Signing time: Tue 10 Dec 2024 01:00:38 +0000
ROA not before: Tue 10 Dec 2024 01:00:38 +0000
ROA not after: Mon 10 Mar 2025 00:00:38 +0000
asID: 13335
IP address blocks: 104.29.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a7:5c:ff:11:b4:06:04:ea:03:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:00:38 2024 GMT
Not After : Mar 10 00:00:38 2025 GMT
Subject: CN=f8141e53-f12f-4c3f-9910-c9588cc2477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:e3:cf:85:e4:ba:ef:d4:3c:3f:3c:73:0f:
3e:43:e8:6c:83:1c:fb:1c:38:df:02:eb:fb:46:fb:
c9:73:66:dd:39:df:93:c5:f0:60:80:e0:1e:b8:b7:
b4:c1:1a:ed:f5:a8:3e:2c:02:a0:bc:40:8f:91:d8:
f4:9c:df:6f:5c:d8:fe:6f:58:57:47:d9:fb:4b:2c:
04:0d:77:9a:64:b7:84:2c:8b:05:e5:d9:3a:37:67:
09:eb:af:d7:3e:d8:00:a2:f3:9a:19:0a:9b:ca:b8:
a2:cd:02:13:d0:e1:f6:93:80:6d:cf:cb:bf:3c:07:
dc:d3:88:a8:30:77:00:ce:ae:a2:6d:77:2c:8f:4c:
f0:9e:b4:e5:15:14:ed:47:2e:8f:8d:1e:02:dd:82:
d6:ec:43:c2:62:93:8c:41:fa:57:c1:21:f4:51:a9:
c9:42:99:01:4b:50:be:81:18:6c:29:b5:6c:2d:6e:
e4:a2:78:33:fb:cc:58:d6:74:55:09:63:60:a0:ac:
1c:58:18:12:59:ae:91:d8:23:0a:a3:bb:66:fa:5b:
10:e1:42:da:f2:e4:b4:09:dc:80:eb:2a:7c:ca:06:
c9:42:97:ca:9d:cb:43:19:e9:17:b3:90:74:a0:73:
3b:44:90:ca:22:97:70:90:cb:03:b4:f5:59:3c:0a:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:FA:FF:8E:AF:B7:C2:1C:57:94:DD:E4:E5:2B:4B:92:A7:4B:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/925d3937-3a73-350a-bd7f-4b3d843a35a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:54:ca:15:16:98:ed:a9:d6:b8:fe:d5:e6:61:4d:ea:da:f2:
58:e3:0e:6d:16:4b:ae:a9:e2:cf:92:1a:ef:3d:cb:db:48:e6:
cd:23:4b:a0:28:6f:f1:de:4d:68:98:58:66:69:18:0b:23:43:
9f:bb:28:63:58:c3:e9:cf:39:8d:b8:ea:dd:54:f3:e4:6a:5b:
e3:25:09:24:74:96:89:b9:ea:f4:04:bd:30:4e:f9:50:39:50:
5e:08:9d:f1:34:d3:a5:fe:be:89:bc:e3:0f:06:5d:be:99:97:
d0:7a:6c:05:78:cd:82:44:15:91:74:80:81:76:7e:50:76:c1:
a5:95:3d:0a:5c:48:0a:0d:0f:93:c1:e4:de:bb:d4:ad:92:38:
9f:55:ba:5f:fb:6b:d2:94:00:56:83:f9:c7:99:4d:59:a1:cd:
24:b8:31:b5:10:8a:09:53:32:00:6c:b7:67:b9:f4:94:50:6a:
61:e6:ec:a2:c5:62:1c:51:c0:a6:0d:0d:57:50:ed:76:92:d5:
87:c3:d5:ea:ea:75:e9:0c:12:b3:00:68:bd:02:e2:c5:a2:76:
c6:ec:1c:7f:23:bc:bc:b7:77:6d:93:ec:df:23:81:fb:af:83:
a9:b7:e5:c1:be:c2:d4:75:c4:6e:80:53:1d:e2:e5:24:7e:17:
52:02:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:07 2025 by rpki-client