Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b77df5e1-1770-3bbd-9715-dc22edb3c761.roa
File: b77df5e1-1770-3bbd-9715-dc22edb3c761.roa (raw, json)
Hash identifier: V2hhkY7+wB58UJgKtwt2azdG3RE5ljeyQ7ogwyMphEg=
Subject key identifier: B5:36:28:8D:C9:10:2C:C2:B9:48:6D:18:49:C2:5A:BA:DB:C0:FC:F9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C92A416D2765D34FC350
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b77df5e1-1770-3bbd-9715-dc22edb3c761.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.27.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c9:2a:41:6d:27:65:d3:4f:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=c09290b7-f153-4e07-8b1e-5f8c8cfad5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:5a:f4:de:a1:4c:43:55:de:5f:ce:10:24:
53:38:fa:a4:93:8a:50:22:76:77:94:7a:b0:46:d6:
33:21:95:b6:8b:a7:d2:69:64:86:02:19:df:4f:95:
b4:2a:51:d3:35:3e:89:5c:fa:c7:b7:ae:67:03:46:
41:c8:09:2f:ac:58:85:76:71:cd:22:80:a0:bb:68:
74:38:13:69:24:5a:2d:1a:e6:8d:32:a0:7f:e7:b9:
ee:25:2a:d2:bb:91:dc:eb:87:28:fc:9f:7a:a7:7b:
49:0a:81:23:42:c1:28:f7:96:c1:f5:28:8c:9b:be:
f4:c2:71:9d:6a:dd:10:8d:ba:45:f4:a6:c6:3c:68:
08:a6:10:2e:59:24:57:01:04:09:bf:17:a0:57:47:
83:d0:49:9c:fe:96:59:f0:84:83:7a:9a:a5:be:c9:
f1:65:5e:a4:3d:4d:ef:e1:3e:75:d1:1d:d5:f1:de:
64:8d:43:57:52:4f:15:2a:34:ae:77:ea:c7:be:75:
53:d7:1e:e0:38:4b:8b:21:c1:a1:e5:26:45:42:d4:
78:ad:1e:f6:df:28:02:77:69:a7:11:b1:2e:34:6a:
49:bf:99:0c:79:f9:87:1b:fb:b3:99:a0:3c:b0:78:
52:d0:f6:93:fa:ff:7f:16:3f:65:f7:cc:c5:cb:c5:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:28:8D:C9:10:2C:C2:B9:48:6D:18:49:C2:5A:BA:DB:C0:FC:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b77df5e1-1770-3bbd-9715-dc22edb3c761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.27.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:75:b6:0b:4b:e4:8f:51:d5:bd:b2:81:e1:ea:a7:e9:31:e6:
ad:a0:c4:f5:e0:9f:a7:1d:98:d1:9e:cd:12:d6:38:18:0b:4c:
ac:d0:d2:7e:33:2c:7d:9f:60:e8:a2:69:63:25:68:c6:ec:01:
83:86:90:fa:04:37:c9:17:ed:d2:81:90:c7:04:38:ad:21:ec:
f5:f9:28:65:a1:3d:7d:e2:1a:35:9b:aa:72:ae:42:b0:db:ca:
f0:43:98:38:71:cb:c7:10:fd:e2:b3:9e:89:85:b3:2a:69:51:
5d:18:ab:30:c3:fa:32:5f:62:52:12:bc:50:e1:16:27:0d:b6:
fd:df:8a:de:c1:53:da:d9:8e:23:f8:98:5f:09:0a:d7:cd:6b:
5d:7a:a3:4c:0d:61:99:da:0c:7c:4b:01:ea:3b:e1:76:fe:e4:
73:2a:67:f4:b8:af:da:40:64:16:31:98:55:8c:93:44:93:c5:
c3:09:9a:32:07:0f:8a:c0:e2:22:3c:5c:df:41:a3:de:82:20:
dd:8c:ea:00:52:4f:c9:b5:82:62:ab:6e:88:4c:5e:f3:a4:f7:
40:4d:b9:1d:9e:97:09:d0:52:d1:39:97:4c:e3:cf:fd:9e:33:
ca:42:fe:ea:98:b3:e6:f6:f0:47:dc:7b:11:32:74:be:c3:ed:
2a:d4:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:42 2025 by rpki-client