Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6808cd7-bc91-341d-8eb1-64a74461e7ca.roa
File: d6808cd7-bc91-341d-8eb1-64a74461e7ca.roa (raw, json)
Hash identifier: Q78IxdIpRiyzeh/I8jo77nUvEc0k+EcryllIYSktkZo=
Subject key identifier: 72:93:B1:16:4B:98:AA:A3:F8:72:71:72:14:CD:B0:4D:BC:C5:13:9E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482562C2FE81F434A5361931A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6808cd7-bc91-341d-8eb1-64a74461e7ca.roa
Signing time: Mon 09 Dec 2024 05:30:47 +0000
ROA not before: Mon 09 Dec 2024 05:30:47 +0000
ROA not after: Sun 09 Mar 2025 05:30:47 +0000
asID: 13335
IP address blocks: 104.29.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:62:c2:fe:81:f4:34:a5:36:19:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:30:47 2024 GMT
Not After : Mar 9 05:30:47 2025 GMT
Subject: CN=879ca0ca-d63c-4ecc-8cab-46f211a2938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:9b:ca:a7:1f:b9:f9:11:a1:c7:bb:43:f2:
68:ec:88:d7:41:84:63:15:14:b9:7b:25:cc:40:7f:
9a:ea:2a:0b:ae:a8:8d:4c:2d:6d:7e:be:54:ba:8c:
37:77:9f:df:e3:2a:8e:d7:43:a4:a4:75:e5:2a:bd:
09:6f:75:71:ef:9b:8f:df:15:5c:1a:ed:d4:13:2e:
ae:6d:b2:90:eb:95:85:9b:96:f4:e4:89:84:65:17:
cc:8c:bb:5f:b3:9b:9e:c7:8a:f1:b2:9a:14:8c:d5:
38:fa:84:ee:69:79:cc:d6:87:cf:13:aa:7a:79:57:
ad:99:e3:25:ce:3c:9e:ab:53:c4:c3:de:b7:8f:9e:
3f:83:1d:b7:9b:47:e5:31:03:94:f7:08:8a:2f:d7:
23:1a:b1:ef:a6:16:9b:2d:d4:ca:69:17:12:4e:e9:
30:f9:b6:99:02:6b:f2:a6:28:d6:e7:69:01:31:31:
ed:54:f7:4d:61:09:e1:f5:e6:8d:33:59:7f:d0:61:
92:e6:49:43:46:54:8d:0d:14:19:5e:bf:74:4b:5a:
d5:eb:f2:b4:35:59:d5:db:73:cb:bf:b4:37:99:4f:
2e:98:01:e4:1c:49:3a:d4:53:e2:b4:1d:bb:ff:f3:
50:c7:3b:b4:11:ca:5d:b5:83:b5:ac:83:cb:43:e0:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:B1:16:4B:98:AA:A3:F8:72:71:72:14:CD:B0:4D:BC:C5:13:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6808cd7-bc91-341d-8eb1-64a74461e7ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:40:5d:74:10:eb:3b:66:6a:55:bd:d7:3e:73:ca:4e:f7:59:
96:0b:fc:39:5b:62:96:68:13:48:4c:3a:ab:7e:35:8d:06:b8:
52:e7:ab:02:05:f0:29:2a:ba:ae:d6:cb:76:d8:94:a7:fa:f6:
ef:bd:66:8e:e2:15:27:c5:b8:bf:72:eb:08:c4:2f:78:0d:02:
01:26:77:2d:b8:4c:5d:63:d0:9a:eb:67:68:82:b4:84:4d:9c:
52:1b:84:3d:06:59:13:32:0c:87:c3:11:fb:44:e1:31:02:5e:
00:11:84:59:2b:d4:20:0e:64:09:29:ce:4e:16:7e:f7:99:05:
e7:45:c0:dd:b2:bb:a7:ce:ea:72:f5:4d:55:eb:73:b5:73:b9:
2b:73:61:f7:84:97:dd:88:d5:8b:f4:83:94:75:78:5f:d0:b6:
26:4f:9b:42:98:9f:ef:88:e2:e5:4e:80:73:3f:dd:7e:f1:8b:
62:e8:13:d1:1c:55:06:f4:1a:94:c2:f6:79:1e:fb:93:ad:67:
46:fc:2f:8a:31:8f:f8:d8:0b:33:09:cc:81:48:9a:54:1d:3f:
f6:d9:97:9d:75:1d:61:03:43:30:11:1c:7d:48:da:73:8c:94:
02:e3:1f:37:12:02:12:93:f0:d6:0a:6a:82:1e:a8:6f:c9:e7:
33:87:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:59 2025 by rpki-client