Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa
File: 1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa (raw, json)
Hash identifier: E8JkOu30cqY5yaONJ1NYRyWC7HeOdYp79pyJ21/zDyY=
Subject key identifier: 35:6E:6C:74:41:A8:27:E4:66:FC:DA:27:AA:0A:05:05:8F:A7:80:2D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFBF1FB5EB0E7A3D0A500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.29.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fb:f1:fb:5e:b0:e7:a3:d0:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=451aac2e-ec92-41e4-a7db-23201ec90df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:89:67:7d:c3:8e:71:0b:2c:1f:8e:0f:b6:
c3:21:29:6f:17:13:6b:c3:67:99:21:1b:3d:de:b6:
0e:af:8a:5d:17:a3:eb:3e:24:ca:6b:b0:3e:46:1e:
f5:c7:a3:48:f8:27:7c:6a:8f:d3:52:8f:45:f9:da:
73:9a:67:58:d1:e6:87:ae:3d:2e:eb:15:14:aa:26:
f2:cf:4e:6c:af:85:e6:71:f5:19:23:6b:a1:64:f1:
c3:80:e2:2a:65:90:99:09:57:05:b1:84:e8:a0:59:
6c:f4:94:08:f7:b1:7e:ef:1f:d2:1e:fb:52:75:12:
06:cd:17:25:8d:1f:9f:26:6f:5f:07:69:71:a4:89:
ae:62:15:db:34:93:a0:5d:fb:07:9b:63:8a:0d:86:
46:55:cb:84:cc:77:12:a4:44:57:9d:e8:c9:79:74:
84:7f:6d:de:5f:33:86:6a:bf:b8:42:9c:0d:e5:c1:
8a:02:c4:63:32:c7:bf:2c:54:24:5b:8c:43:03:68:
35:e1:1a:39:a3:53:a6:f4:72:07:d9:f5:30:fe:6e:
cd:bd:0c:64:6e:38:16:14:12:22:85:d3:01:71:db:
1b:0c:3b:2e:1b:ef:01:e2:74:14:9c:5b:9b:00:fc:
24:33:3e:10:54:72:00:f0:29:4d:17:f3:18:41:e5:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:6C:74:41:A8:27:E4:66:FC:DA:27:AA:0A:05:05:8F:A7:80:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:87:ff:90:9f:43:77:2d:f4:41:9a:c4:e9:b1:8b:29:e5:11:
07:2c:94:b1:47:16:56:e1:e1:9b:c0:5a:c2:64:e8:3b:ec:bf:
6e:57:18:b2:6d:c1:ee:67:4f:b5:fc:a5:74:4a:a7:c4:ec:60:
4c:b2:2f:2d:56:6b:e1:92:f0:ee:8d:c6:f0:3e:64:b4:94:04:
0c:92:bc:a0:d4:7a:c0:53:4f:54:f7:26:91:53:59:e4:1d:83:
d4:b5:58:5b:b3:af:15:24:a3:18:f1:9c:2f:f6:81:9a:bd:e7:
2b:69:f7:9d:d4:19:a4:bb:63:7c:60:a7:4b:49:45:93:a3:07:
60:07:23:91:bc:0d:c3:b0:5c:b1:aa:44:e1:1a:e8:bb:21:f7:
a9:a4:97:e5:57:ae:fd:dd:52:2e:8f:44:e2:6f:81:bb:19:9d:
3b:5d:fb:16:db:6e:1c:c1:b5:63:a3:bc:49:14:53:e4:a9:18:
52:bd:06:f0:8c:aa:c6:04:96:7c:5b:5b:bd:ec:98:a7:06:81:
b5:a9:01:b3:e8:21:f3:ef:06:04:51:bb:55:f3:7c:6f:c8:21:
5a:d5:46:60:a4:86:94:cd:bf:b9:1e:d5:ea:36:ba:7f:c0:19:
2a:97:6b:c9:5c:86:94:bb:52:6c:f0:6f:9c:ae:a9:fc:94:7b:
25:c9:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:14 2025 by rpki-client