Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
File: 79b649e5-7d33-3922-8433-6718a2039a8b.roa (raw, json)
Hash identifier: gtmltlTC1FnQx7k9CO8IDdhkhu8izKPpOvRXdrgoNDg=
Subject key identifier: E6:A3:AD:FD:EC:95:9E:50:25:C7:46:32:AD:BD:96:93:9C:4C:8E:3F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C7648E8214B8633E0900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.24.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c7:64:8e:82:14:b8:63:3e:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=bb67be70-48d5-4348-a777-ca7a79f4f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:4d:4f:fe:3e:42:d1:90:f3:6b:5e:be:0f:
31:23:91:10:a4:3e:d6:a1:cb:3a:84:5d:e6:53:ef:
59:c5:ea:32:9e:56:b3:e4:fb:ec:55:f1:dc:c0:8d:
1a:72:ef:ed:13:7d:2b:88:6d:3c:29:e3:a0:71:5e:
a1:3e:b6:d6:1c:b6:cc:ee:78:e8:be:fc:5c:36:67:
ae:fc:89:26:02:50:36:88:6c:fe:22:a3:f6:83:ff:
b7:dc:e5:37:19:a1:d4:cb:84:f2:b8:44:ca:6e:8c:
ec:08:76:04:92:4f:68:da:0d:42:20:17:ec:c1:1a:
97:49:c9:97:0c:5b:44:d8:87:ed:4d:38:70:d2:04:
df:5d:1c:1e:2b:31:b0:a6:3e:36:1a:6c:fc:4d:49:
08:87:be:6f:ed:a3:57:1e:95:73:3c:8f:27:8c:05:
a7:c4:e9:84:ff:af:7a:4c:a7:6c:4d:d0:d5:ee:b3:
a8:13:22:bd:cd:d9:f1:4e:fe:85:c1:28:5f:c2:7e:
24:89:9c:34:aa:37:0f:2f:16:dc:3e:50:19:9c:b7:
cf:58:d1:f8:98:f8:b9:93:2c:d1:f5:15:2d:ea:1b:
2d:fc:c2:4b:a2:37:0d:12:e2:a0:f5:ef:3a:13:85:
71:89:c5:db:3f:0e:de:09:e6:bb:9b:91:bb:f3:6b:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:AD:FD:EC:95:9E:50:25:C7:46:32:AD:BD:96:93:9C:4C:8E:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.24.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:e9:88:e8:d9:53:8a:36:b5:f5:07:5b:80:56:de:00:c3:ae:
5a:73:5e:16:79:82:c8:36:5d:79:f8:79:0c:78:22:c7:f4:26:
fd:69:28:57:a7:0e:67:cf:9d:9f:8c:cc:60:1d:7e:a5:2b:e6:
7e:b6:f7:ef:b8:fd:de:36:06:74:bd:60:81:1c:4b:e1:d5:ed:
39:49:78:a9:e5:4a:7d:f5:01:75:0e:63:32:64:cf:a7:2b:23:
11:86:d0:ef:35:64:50:4c:c4:8a:d2:aa:f8:75:3d:bf:02:7b:
b6:8f:09:de:2c:7c:15:d9:40:2d:94:a2:4e:5e:48:3a:ae:f5:
d5:49:66:52:72:3c:f9:06:2d:f9:57:37:b5:73:c4:6f:f8:dd:
a0:7d:94:1d:43:a3:bd:09:0d:04:b5:c2:a1:9a:12:ac:6c:5d:
7c:25:e3:5e:28:1e:59:09:cb:54:58:f6:a0:e2:f4:d6:93:11:
b3:bb:c1:b2:7e:e6:f6:16:cb:6d:32:36:15:20:fb:f7:7a:d2:
e6:72:71:ef:17:7b:fa:1b:9d:73:c6:d1:4e:de:15:df:65:82:
8d:ae:9a:2d:58:6b:c3:0c:8c:47:44:a8:e7:63:65:8a:8d:2e:
29:37:11:b7:3f:b0:53:a1:31:88:49:d9:c3:43:7d:c4:75:7a:
76:98:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:35 2025 by rpki-client