Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa
File: f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa (raw, json)
Hash identifier: 3lLMD2r22ipoGS0NFXGmnQtY9NBxcseVzkl/BvjLOqw=
Subject key identifier: 0E:A6:C6:53:3B:31:90:27:DF:AC:1F:DD:EA:A8:64:83:D3:F1:0C:99
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A0A8C384F13384F145A100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa
Signing time: Tue 10 Dec 2024 00:47:07 +0000
ROA not before: Tue 10 Dec 2024 00:47:07 +0000
ROA not after: Sun 09 Mar 2025 23:47:07 +0000
asID: 13335
IP address blocks: 104.29.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a0:a8:c3:84:f1:33:84:f1:45:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:47:07 2024 GMT
Not After : Mar 9 23:47:07 2025 GMT
Subject: CN=729ac642-42b0-433e-96bf-570d12ff0b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:30:9f:c2:b5:ee:c3:36:2b:69:55:20:26:
32:56:43:0a:23:50:dd:40:b5:aa:8f:ad:eb:fa:93:
8c:61:61:c1:e3:20:36:2f:8a:15:52:df:7d:56:a8:
e6:b6:e9:83:99:1f:70:92:09:72:ec:e9:6a:3b:45:
d6:d2:f4:d5:c3:be:c2:72:ee:b8:3f:dd:7b:ec:0a:
35:e8:65:15:a2:a4:3d:20:e0:09:9a:b5:a3:73:18:
f2:ec:1f:e2:49:74:bc:e9:23:8d:4f:e3:fa:ce:1b:
25:87:7e:54:3b:db:0a:27:4c:86:f9:a3:e1:f2:a6:
1b:2c:dd:0d:9b:f3:cf:b8:93:9a:62:bb:29:27:ce:
99:1a:f1:35:43:d1:60:af:f8:c3:47:2f:1f:5a:7b:
0a:d2:35:4d:0c:5e:62:33:93:a1:b4:08:b1:fe:37:
7e:bc:ef:34:c2:6e:ea:b9:43:21:d5:77:d2:cd:74:
fc:76:d0:9d:b2:09:7b:95:ec:54:c5:04:f1:b3:71:
b2:2f:e2:cc:ba:f4:7e:6d:51:d7:a2:47:36:83:b0:
36:d1:4c:e3:56:76:16:14:99:07:85:b0:92:db:fc:
b8:27:b5:df:92:7e:1e:38:2f:69:77:c8:e6:6c:c0:
45:56:8b:7a:6a:fc:82:6b:f4:a0:f2:78:4e:5e:b9:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:C6:53:3B:31:90:27:DF:AC:1F:DD:EA:A8:64:83:D3:F1:0C:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:e1:d7:0e:67:10:27:89:93:84:24:19:34:ef:38:21:60:d0:
8a:67:7c:ce:a1:af:59:02:d7:6c:4d:4c:fb:6c:e0:ba:b4:82:
e6:de:9b:44:e4:e2:96:97:2d:c1:33:28:82:33:e0:25:ff:c7:
ee:b8:dd:45:c0:61:fe:bc:32:cf:7e:dd:5d:8e:8e:b0:3b:53:
1c:c8:fc:d4:fc:98:6a:7e:b7:db:60:69:ba:d1:e3:4f:3e:f0:
e8:d4:02:2b:f1:96:d7:5d:48:08:0b:6c:08:2a:2f:51:85:5c:
42:d3:2e:cb:86:ac:ae:d1:87:70:26:b9:d6:7d:40:d5:0d:2d:
f1:ac:1c:48:4c:36:c8:d5:4f:e4:95:a5:e0:4e:18:9c:44:06:
9a:d8:d6:87:58:87:22:ab:e8:2a:91:f0:77:cf:c6:ee:25:3f:
00:99:a9:8f:32:26:9f:03:fe:0b:e7:3c:b8:40:98:ee:0b:cb:
7d:d3:8a:96:3e:87:72:06:80:ca:4e:2b:7d:86:e1:fc:f9:4d:
98:ac:d3:f6:79:42:c7:5e:59:83:8e:e6:3d:40:80:ba:2e:43:
0d:7b:63:af:20:52:86:cc:a9:57:64:53:95:af:3e:b9:64:c2:
60:da:04:67:ac:e3:a9:25:bd:9e:2e:8c:b0:ce:27:3d:22:a0:
1a:8b:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:23 2025 by rpki-client