Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fcebb0ec-35cf-3013-bcea-22709977da30.roa
File: fcebb0ec-35cf-3013-bcea-22709977da30.roa (raw, json)
Hash identifier: 96uKH/RR+RLjSbjSsrLcxlHUXvRsKQO2/wdXvgIX45g=
Subject key identifier: 9E:CC:E2:6C:3A:02:93:40:0A:8A:E3:49:F8:04:F5:65:C5:2C:53:22
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825633C172285859C346E2400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fcebb0ec-35cf-3013-bcea-22709977da30.roa
Signing time: Mon 09 Dec 2024 05:31:45 +0000
ROA not before: Mon 09 Dec 2024 05:31:45 +0000
ROA not after: Sun 09 Mar 2025 05:31:45 +0000
asID: 13335
IP address blocks: 104.29.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:63:3c:17:22:85:85:9c:34:6e:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:31:45 2024 GMT
Not After : Mar 9 05:31:45 2025 GMT
Subject: CN=e1d09cb4-87b9-402c-af27-f7ff02ebbc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:50:0c:bb:fd:0e:20:f2:bf:6a:ac:fa:d7:
ee:ce:0a:a2:63:44:14:e4:e9:d4:04:e5:65:41:4b:
12:aa:b1:b4:28:a4:00:5b:8a:cb:8c:90:a4:1c:fa:
11:26:09:48:65:58:80:f3:92:5b:df:f2:cd:24:67:
8e:18:e3:67:fb:c3:0d:d2:4b:21:57:b0:c0:15:e0:
53:76:a9:0e:f3:e9:88:76:29:ee:20:ce:8d:63:0d:
e6:95:10:44:15:46:56:f2:05:21:44:ce:00:57:15:
2d:b0:da:e9:b1:69:dc:05:d5:df:87:67:8b:a8:d1:
c6:cd:74:4f:e4:d9:13:ee:f6:54:e9:a7:39:94:58:
73:f6:22:d8:2c:c2:e4:7a:01:29:78:84:db:8d:71:
70:e9:29:47:66:30:44:83:40:47:98:11:8a:51:ca:
3e:cf:f0:3c:20:44:97:54:55:64:b6:95:5a:9c:3c:
90:6e:89:c8:df:ab:fa:e7:41:94:a6:73:22:83:16:
27:c6:47:83:54:1a:3d:7a:c7:c4:ce:cb:6d:af:dc:
b1:7a:93:ba:36:d6:93:9f:55:f0:37:a4:2f:b6:37:
2f:cb:8c:b4:cc:a9:28:bf:d8:c5:db:a5:9a:91:dc:
c0:95:b8:84:c1:58:d9:ea:4f:ba:26:2b:cb:60:2a:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:E2:6C:3A:02:93:40:0A:8A:E3:49:F8:04:F5:65:C5:2C:53:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fcebb0ec-35cf-3013-bcea-22709977da30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:80:6d:a2:01:63:b8:ad:8d:ba:d6:22:e6:91:ef:cf:25:2a:
92:0d:fd:fc:1a:e5:76:1b:e6:00:92:ef:4b:08:02:82:09:e0:
bc:97:1f:ad:12:fe:db:d3:fb:dc:04:e0:df:67:94:da:77:e8:
5e:7c:57:24:c1:b2:e3:f2:15:9a:25:1f:0f:d5:46:0e:71:0a:
a5:d9:1a:b2:3a:06:21:e2:ee:88:07:b2:32:29:b9:31:e4:6a:
0f:b0:30:79:ee:92:d6:15:ee:9f:29:ce:ca:3e:66:08:0d:c1:
8c:f9:04:62:d9:51:4f:00:a5:76:54:54:c1:0f:7a:40:b5:1e:
bc:00:7f:b0:f7:8a:f8:57:02:06:7f:31:ff:ed:5a:fa:40:2e:
67:d8:7c:3a:11:19:7c:19:df:a3:f5:6c:1c:ef:9a:cd:e2:48:
2e:35:cd:38:79:0b:10:96:74:ba:05:b1:e9:b1:9d:7d:5a:9f:
ee:99:f3:20:bb:34:d1:f1:0a:94:0c:be:36:84:b4:7d:0b:32:
8d:da:a3:e6:a1:11:a1:8b:13:3d:98:15:95:ff:94:3c:d3:d1:
f7:7e:ae:4d:e1:8a:79:fb:f6:fc:0f:84:7e:0e:5a:e1:c5:bb:
68:a4:21:b3:55:01:c0:ab:00:55:1f:1c:52:94:70:c6:6e:b5:
ec:6c:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:13 2025 by rpki-client