Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa
File: fad11328-b027-308e-9272-8c22e96864c9.roa (raw, json)
Hash identifier: A+GJC1yyptk82bUqp4WKLp3APaxRihG1DOK/ek5RFto=
Subject key identifier: C7:90:D9:DB:9F:1E:93:68:E7:4D:CA:D1:83:DB:BB:73:F6:DF:CD:6D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A0B9FD7DE877CD9FF2EA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa
Signing time: Tue 10 Dec 2024 00:47:15 +0000
ROA not before: Tue 10 Dec 2024 00:47:15 +0000
ROA not after: Sun 09 Mar 2025 23:47:15 +0000
asID: 13335
IP address blocks: 104.29.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a0:b9:fd:7d:e8:77:cd:9f:f2:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:47:15 2024 GMT
Not After : Mar 9 23:47:15 2025 GMT
Subject: CN=1e268606-8db8-4005-8497-8b4d29ce8c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:8e:d7:86:15:6d:0f:a2:3a:f6:0b:1d:98:
b1:4e:2f:d5:75:88:57:6d:81:45:ec:fd:77:95:48:
64:39:77:0d:34:12:72:75:4a:1d:a8:ae:92:cd:4c:
32:bc:40:13:06:69:d0:c4:e1:68:da:3b:25:6d:f9:
c6:99:19:0d:4f:34:b3:35:d7:65:e3:0d:4e:70:48:
08:c4:e3:9e:d6:73:58:62:17:6f:14:cc:3f:11:b6:
aa:2f:16:b7:11:9d:fc:de:a2:92:42:31:47:e2:b7:
82:b3:18:69:28:8c:81:30:9a:36:71:90:46:2f:8d:
c4:95:33:01:f3:9c:9e:24:82:b8:44:f0:13:82:97:
bc:fd:4d:82:a6:8e:59:03:fa:b2:b3:ca:91:3c:e1:
ae:ce:88:7f:e2:3a:d0:af:fd:e6:58:2e:32:bb:a8:
9d:8b:35:e7:80:c6:f5:41:96:01:ed:cb:56:80:18:
55:66:f4:50:0b:e4:ec:1d:7f:20:0b:d3:64:ba:cb:
80:3a:a2:89:18:07:79:b9:ec:72:45:bc:0a:a7:69:
01:ae:9a:a1:45:ec:53:ad:cd:f9:c0:09:ef:37:54:
83:ef:16:80:42:d3:ee:af:5d:ac:63:a4:76:71:5c:
94:0f:86:c0:46:b0:bf:89:6c:30:93:cc:9a:bf:db:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:D9:DB:9F:1E:93:68:E7:4D:CA:D1:83:DB:BB:73:F6:DF:CD:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:11:88:8b:ac:63:72:b2:da:d7:ea:6e:c9:44:8b:9b:e9:b4:
53:a9:50:ff:26:6c:d5:9b:b7:b7:12:05:e8:ab:c1:30:e2:87:
9a:77:0b:e4:77:ea:55:0b:86:b4:2d:db:72:b0:38:28:f7:40:
52:32:c9:35:fd:be:33:6b:22:3b:5d:a1:cc:28:03:d6:a5:d6:
f4:82:93:55:c7:3e:8e:44:94:f8:f6:1e:18:63:7c:79:4a:dc:
46:a7:14:4a:10:ab:f7:d2:e0:d6:7b:f1:09:a7:bf:91:7a:29:
c6:15:60:4f:83:00:34:2f:42:b7:15:71:42:c4:88:4b:2f:64:
53:3e:6c:22:de:dc:ca:b3:f2:28:e0:80:4e:77:18:ff:2c:7b:
28:37:5f:9e:12:5a:ff:b1:8d:56:59:71:68:17:9e:f2:e2:53:
09:40:ed:80:6f:28:ab:94:c2:ea:3b:a4:7a:57:1e:42:54:80:
09:24:a7:62:b2:99:73:e9:d3:20:61:1a:b2:fa:ab:ee:2b:e6:
f6:b9:df:b8:c9:df:c1:39:e4:68:3e:d9:92:d4:d9:b3:ed:65:
54:a3:73:79:77:95:4a:d3:94:ae:4b:d0:69:2d:d4:a1:53:a0:
63:c2:85:3a:44:37:d5:69:7d:fc:57:1c:bb:a0:4d:60:82:97:
fc:4b:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:04 2025 by rpki-client