Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa
File: bfbbd772-9e31-38b1-a655-e7c84ef58361.roa (raw, json)
Hash identifier: 3vYQjH3rRL4Ajav13e9qfE6oRigoEAYOiUHKKEQMK7s=
Subject key identifier: 60:B1:C1:EF:CC:66:DB:15:2C:EB:C4:3F:22:0A:5D:4C:1F:07:0E:AF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BAAA8D7C9B17E33061EE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.135.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:aa:a8:d7:c9:b1:7e:33:06:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=7d3ddcb5-1c1c-4bf0-909f-edb637cda2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:20:1a:fc:72:6e:34:c4:2a:0f:cc:c4:31:
30:06:56:f3:f9:4b:84:d3:8e:e1:ae:6d:99:45:ae:
02:33:5d:9d:0e:af:92:28:8d:c8:a5:18:ca:50:d8:
4e:71:f1:c9:d5:fe:af:fd:ad:56:1c:fa:17:d2:c2:
9c:b2:9a:42:54:6f:e2:45:44:48:1f:cf:17:8b:55:
87:3e:04:35:40:6f:9f:6a:84:96:b0:4e:6c:a0:dc:
1e:72:85:50:4e:b2:fa:be:cb:ac:28:46:55:ab:0b:
f4:1f:81:c3:dd:88:db:aa:16:b7:48:22:b8:a6:e9:
11:aa:06:cf:d2:3b:5e:d8:bf:fa:aa:63:0f:05:76:
c5:af:a0:fd:b6:38:8a:aa:24:cb:ed:bf:14:ee:ba:
fa:d4:2f:23:2f:52:82:5f:bd:3d:02:f8:d5:b1:17:
02:e8:73:fa:1c:19:83:07:4a:85:e8:af:70:38:58:
09:73:ed:3c:f8:eb:e0:22:5d:0a:52:5e:fb:55:7d:
d2:03:09:c3:01:0d:aa:b6:e9:3f:6e:76:2a:96:6f:
0e:8b:05:31:cb:21:2b:98:13:fb:a7:22:38:c6:fc:
64:76:6e:a0:35:c4:28:0d:15:94:05:ff:94:db:de:
4d:3f:0b:39:96:ed:ef:9c:d2:a1:32:20:00:59:a5:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:C1:EF:CC:66:DB:15:2C:EB:C4:3F:22:0A:5D:4C:1F:07:0E:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:fe:23:78:31:6f:1b:d7:54:dc:5a:12:8d:cc:94:02:38:ec:
e0:a4:f5:db:39:87:65:34:a3:4e:7e:c9:94:17:65:c7:b3:5e:
14:95:79:1e:a8:7b:42:58:6c:56:c8:c0:63:ff:9d:96:9a:dd:
d0:2c:98:b7:db:24:b5:87:0b:57:7d:d0:fe:7e:4e:62:77:82:
13:ce:6a:ee:4a:43:1c:5b:ae:3b:22:61:80:31:a2:ba:26:dd:
2a:5f:f7:64:96:14:67:72:c8:98:b7:31:17:28:39:1f:4c:02:
83:dc:a6:40:48:c8:46:5f:33:7d:83:1e:d7:36:43:4e:05:11:
06:d6:a0:c3:7e:30:eb:87:4a:58:4d:ac:5d:66:ab:1b:04:37:
e6:ec:26:53:53:de:6c:2d:56:a8:cc:86:a7:d6:51:ef:b0:1d:
81:f4:78:d2:3f:a5:45:3d:c0:43:a9:4a:ad:8e:a8:c0:03:c2:
b9:1e:4e:c1:5c:67:79:ba:73:e5:a1:11:13:58:65:4c:8c:9f:
31:1a:83:95:dd:47:5e:02:54:64:43:ce:c7:08:ae:52:8d:a7:
1e:7b:13:21:4b:0b:0b:67:7f:47:aa:25:fb:32:2c:a1:18:d2:
55:59:b4:23:10:9b:de:01:8d:96:72:68:6d:66:90:a7:3c:24:
3a:bb:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:16:35 2025 by rpki-client