Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa
File: d272edb2-23ec-3606-8a77-0cddf94e936c.roa (raw, json)
Hash identifier: NyB88MnyHmzvAyL0z2IiYxvkA6LNYvYCG40zpuUv7ig=
Subject key identifier: B1:6A:BF:3E:9B:00:41:A0:23:78:99:3F:CA:84:96:04:AF:B1:33:A8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6CBCC1718F4AC993584C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.29.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:cb:cc:17:18:f4:ac:99:35:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=8766a377-443f-478b-9e30-f58f6595f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:d5:97:30:d9:8d:4c:8b:1e:9b:90:a0:22:
5d:c0:c9:15:75:04:fc:8b:62:bd:8a:c7:cc:a8:8f:
06:41:f8:b7:02:fa:6a:24:8c:5f:70:c4:ff:ba:0a:
cd:1c:45:14:56:72:b0:5e:fc:e9:da:c1:60:78:9d:
62:8d:b1:38:2f:89:85:45:f6:9e:5b:47:65:93:60:
e3:d3:f6:2c:68:3b:bb:ce:9d:dd:9f:ef:64:84:f3:
38:97:d9:ea:08:a3:f6:aa:2c:ea:87:b4:4b:64:0e:
7c:3c:36:26:41:9e:b3:78:af:2f:8c:15:b5:7e:e6:
ac:e4:57:01:d8:e9:e8:fb:eb:82:c0:72:a4:25:cc:
cd:bc:a5:ac:0a:28:4f:44:17:9e:94:35:e5:01:7b:
15:87:ca:eb:0c:b2:cd:0a:0e:28:e6:fc:57:50:15:
4c:60:25:f0:11:73:94:f9:22:c6:3c:cb:ef:ba:56:
5d:3b:01:73:be:ef:78:45:1c:22:2b:9c:96:e6:07:
fb:0e:7c:53:34:46:43:ab:2c:bf:74:c6:f1:68:0c:
40:92:ed:3e:3b:dd:f5:45:12:e4:f2:2b:92:4a:6f:
c5:9c:57:27:e6:27:77:18:c9:62:97:81:55:f7:15:
f0:44:03:db:4e:cd:f7:2d:44:a7:4b:ab:29:77:ca:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:BF:3E:9B:00:41:A0:23:78:99:3F:CA:84:96:04:AF:B1:33:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:78:96:8e:2e:08:9d:75:02:60:0d:80:2c:e6:4f:4a:ac:ef:
49:39:04:11:58:5f:b5:e8:ff:aa:e2:ef:93:16:6a:43:7c:ca:
0e:ec:c4:50:ee:0f:12:ab:1b:64:f8:46:7f:a6:5d:36:15:0d:
e7:d1:0e:c1:5c:36:09:f2:14:9d:e8:70:1e:be:8b:31:c0:d4:
0f:d0:04:69:df:e9:03:22:fe:c2:d9:d0:c7:c3:7b:72:c9:d3:
b9:63:f2:1d:55:4c:92:67:a9:f8:cb:cd:6c:8c:7c:2b:ac:d0:
68:55:05:54:4a:c1:97:a2:82:3a:11:bb:f4:1b:04:a9:20:a5:
e3:fc:fd:67:fc:5a:00:e6:e2:e1:21:e5:70:5d:7c:37:5c:2f:
44:7b:a5:b8:39:d1:44:5c:a7:6b:ff:03:36:61:b6:6e:7d:7f:
ac:9a:d1:9c:b0:02:06:57:fb:4d:71:aa:02:c8:7a:59:a4:a9:
39:c1:39:c5:2b:85:f2:1c:6e:aa:24:cf:58:e1:98:95:a2:73:
aa:68:3a:2c:14:d9:6d:ff:ba:23:29:70:cf:be:2d:e1:06:4d:
ca:34:0a:3e:cb:92:19:6e:f0:44:79:ae:96:57:c0:eb:c3:5f:
bf:75:f6:57:32:c2:c4:60:af:75:f2:25:73:b7:3a:f0:1c:23:
8a:2d:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:25 2025 by rpki-client