Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa
File: 2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa (raw, json)
Hash identifier: g+7RZrGUx/he22N42AW8Atw5I6ATrg0Y8aLH8stLqYA=
Subject key identifier: 42:88:A0:7A:EA:87:52:A1:49:C4:68:E8:44:1F:E2:74:06:09:D7:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C90003CA0C3A32C35380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.27.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c9:00:03:ca:0c:3a:32:c3:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=c831322a-e8e1-4048-b157-4be6c42ef870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:0d:a9:87:35:da:df:c2:02:48:bb:94:e2:
58:19:34:15:1b:f6:0f:5a:8c:34:87:18:eb:a6:0d:
43:a2:ed:8f:ed:2b:b6:70:1d:cd:f5:f6:92:6e:24:
94:eb:fe:f2:e6:f1:a7:cf:e3:df:90:96:ad:e1:b5:
3e:09:6a:5b:b3:cf:d7:90:8a:44:a3:c4:05:e9:d0:
fe:47:db:56:95:cd:55:17:89:b3:d0:fe:bc:5b:3b:
a8:01:6c:0f:dd:e7:04:35:33:fa:89:9d:ae:92:d2:
b0:ee:29:83:7c:cc:b1:c3:7c:df:d4:c8:2b:c6:33:
a9:35:af:72:f2:7b:b1:c7:ac:71:c3:6f:b3:eb:20:
9a:92:3a:43:a6:0d:5a:50:40:f5:55:a4:4b:12:82:
4d:19:2c:ed:f1:f8:ae:4a:e2:40:74:34:8d:05:44:
fc:7b:3e:00:cc:36:13:f5:f1:10:b9:c9:4d:c6:f1:
97:ff:3a:8e:32:90:6c:5f:b1:00:84:b6:32:bc:b3:
ed:ae:25:c7:44:43:6c:e7:f2:ca:6d:71:d2:6b:48:
78:9c:3b:fc:93:18:1f:ed:06:ab:3e:96:90:74:ce:
7f:4f:42:3a:a1:05:76:12:03:94:fe:16:0a:37:10:
aa:e2:1a:53:d4:55:76:59:22:59:4f:43:2c:80:16:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:A0:7A:EA:87:52:A1:49:C4:68:E8:44:1F:E2:74:06:09:D7:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.27.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:2e:36:62:0a:f3:42:bc:81:52:d2:14:3f:85:52:f8:bd:50:
10:df:1c:cd:b6:6d:7d:79:56:96:9e:d6:51:f2:76:2e:5a:cf:
c4:e8:60:32:eb:bb:52:26:31:7f:9e:63:18:43:cc:e6:95:06:
25:cd:44:16:26:40:69:45:79:11:35:49:a6:a9:0e:9c:ec:8a:
6f:07:29:44:83:fb:4f:a8:30:0b:ee:c5:0f:b0:e6:2b:d6:a5:
29:4c:86:8d:77:a1:09:03:fd:d2:8b:78:0d:d5:53:8e:33:ab:
e9:9d:63:19:81:7c:69:f4:0b:91:31:da:7f:c3:1a:00:e7:19:
ad:5a:c5:18:24:1f:51:10:89:99:b5:87:16:54:0f:e8:3c:f1:
77:c4:10:51:49:a2:83:7a:4f:8e:34:82:03:f5:f9:05:23:f2:
77:46:89:b9:94:9c:a3:64:24:2d:dd:04:81:79:dd:8f:52:38:
8c:b1:5f:e4:33:40:6f:e5:b8:cc:4f:97:21:22:32:fc:ad:ce:
da:cc:73:79:00:e8:80:9a:d8:53:c8:93:e2:7f:cb:4f:d4:6b:
57:cb:6f:92:91:a3:18:a0:7b:5a:11:27:0a:72:7b:1c:61:e4:
82:cf:a0:eb:18:f8:76:46:04:16:1c:7b:a0:05:75:98:51:7d:
bd:b1:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:44 2025 by rpki-client