Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
File: bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa (raw, json)
Hash identifier: IgZn4ihf3oazNQ34jHgNSGCL/GC5wmuWM+aR3k/Wb8w=
Subject key identifier: 47:28:EE:B7:4A:22:CF:1E:54:F0:DD:26:74:72:B4:A0:81:16:10:66
Certificate issuer: /CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Certificate serial: 010D0C9F43285848D2114047D78C2137C7DB9E00
Authority key identifier: FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 400686
IP address blocks: 134.195.19.0/24 maxlen: 24
2602:2d6::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:40:47:d7:8c:21:37:c7:db:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=b2ccf630-daa6-4847-ab3d-2d74c83ac935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:6c:9a:02:3f:e9:5d:6a:fe:b6:8d:6d:d3:
88:5f:e5:98:76:fd:52:51:1a:e6:03:a6:d3:e8:0a:
b6:4c:cc:bd:33:74:5a:cd:af:2d:44:94:b6:c9:83:
60:17:63:38:44:84:82:d5:67:be:91:27:1e:90:d3:
d4:95:2d:89:e9:35:44:a0:ea:ca:3a:13:0e:7d:c2:
70:76:55:a7:96:10:5e:4e:a4:90:33:3e:d3:7d:52:
e1:83:6d:09:9e:3c:34:5b:20:53:f9:94:3d:e4:64:
89:c1:38:61:6c:0b:98:62:24:5d:2b:5e:9b:3d:6e:
21:bc:58:05:76:57:3e:24:9f:d9:75:1a:1d:9a:7d:
dd:02:d5:9a:fa:39:5d:7e:8c:d8:52:e0:68:8b:39:
ed:21:1c:e1:d2:78:55:a3:5a:e2:e2:c9:6d:a1:ae:
c0:4b:5d:f8:9e:7c:be:68:ed:d1:c2:e8:6b:22:51:
b5:24:5d:59:3a:d1:fa:a3:0d:b6:51:81:fa:19:bb:
46:0a:6a:b9:9f:80:96:0a:f9:93:68:cf:63:35:f9:
d3:6e:e6:21:07:7e:85:17:c3:fe:48:f1:b2:bb:0f:
f9:96:f7:2c:c6:29:2a:26:3b:a1:f5:fa:9b:4d:cc:
2d:db:39:64:33:87:8e:30:20:23:ff:3f:56:c8:98:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:EE:B7:4A:22:CF:1E:54:F0:DD:26:74:72:B4:A0:81:16:10:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl
X509v3 Authority Key Identifier:
keyid:FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.19.0/24
IPv6:
2602:2d6::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:bd:b8:7c:7a:fe:64:16:57:80:e6:f0:4c:5d:78:f5:0a:7f:
88:a7:75:45:82:19:52:f7:76:fd:98:43:b8:b5:74:e3:c5:ed:
dd:b4:c1:e6:15:e4:e7:72:c6:81:41:73:4f:f6:ee:f2:9d:44:
10:ed:91:e0:4c:41:8c:ee:a8:51:6f:7f:63:ac:5d:9e:51:c1:
34:59:94:6a:b3:97:57:87:2c:ac:3b:b5:9a:fe:2e:e7:60:8a:
e0:56:c7:15:fb:0b:73:f5:db:19:86:a5:42:9b:2d:db:38:e0:
91:96:5a:da:be:5a:ab:fd:c5:25:aa:ec:c3:50:7d:a2:ef:5a:
82:19:c5:42:ef:3f:4e:d1:25:3e:5e:75:c2:67:3a:f5:09:e5:
8b:66:50:06:a2:7a:99:dd:66:fd:ad:b8:04:91:4b:26:44:02:
fd:c5:76:3f:b2:97:23:fc:48:b0:f1:55:dd:51:52:95:55:42:
76:88:78:d0:0e:8a:64:ad:d6:64:ba:6f:4a:88:7f:75:3a:05:
20:f2:75:5b:ac:03:9d:96:95:64:50:8c:f0:7b:5e:14:e2:08:
69:ad:fc:b6:ec:fa:c2:88:b9:40:11:1f:cf:bc:a2:3a:41:10:
d5:60:b4:36:e1:e5:e1:7a:c0:f2:4a:ba:e1:44:ea:bb:5d:a6:
64:5d:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:27 2025 by rpki-client