Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
File: c185bc49-3533-373b-bbc3-00f946055c50.roa (raw, json)
Hash identifier: hfgb12rD7coHI8zIDqkD39/Xkn8AGl4AhSBSaBNUXuY=
Subject key identifier: D0:82:B6:B3:BF:03:23:29:EF:54:BB:CD:61:1E:8B:5A:E3:BB:4A:D7
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584827C5426A62B2F0F97B4EE500
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 22606
IP address blocks: 66.231.80.0/20 maxlen: 24
68.232.192.0/20 maxlen: 24
136.147.128.0/20 maxlen: 24
136.147.176.0/20 maxlen: 24
198.245.80.0/20 maxlen: 24
199.122.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:42:6a:62:b2:f0:f9:7b:4e:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=e3dd2f55-63bd-4a4d-a766-a9de9aaab3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a9:ab:23:c9:3d:59:98:49:d5:f6:6a:7c:00:
f2:6b:e2:37:9b:70:a0:85:eb:1b:68:6c:ee:b9:ff:
94:96:e7:6f:53:c9:28:c4:63:d8:4b:54:4a:d2:d1:
19:18:e5:e3:f2:a4:e4:08:a8:b2:7c:3a:4f:78:47:
5d:54:e9:d3:ad:e0:e7:62:f4:4b:50:8e:b5:c8:e0:
0c:e8:63:b3:7e:3e:13:ec:96:42:98:96:a8:1e:d6:
9f:fa:66:9c:5c:80:d5:35:86:a5:48:38:06:9b:55:
39:05:04:fd:9e:ff:7c:23:59:44:5d:18:1a:5d:68:
22:b5:5e:8c:82:73:ce:b0:d6:a0:7c:52:f6:80:8e:
29:44:dc:fe:43:ee:46:6d:e2:90:46:5b:7f:7f:2f:
93:ab:4c:1b:4a:ea:fd:79:79:e6:b1:3d:1a:7c:c9:
da:ad:9f:96:9c:3f:3e:e6:ed:29:a3:3a:d6:ec:62:
0a:07:20:9b:74:2a:dc:0c:33:60:1e:05:21:4c:d5:
d9:ac:30:e2:3e:6c:c1:36:b7:a6:2f:9a:d2:66:4c:
4f:0b:18:29:34:91:a6:c8:28:2d:7f:24:f9:a4:8c:
59:27:e6:86:c5:19:47:bf:73:39:bc:79:bf:61:c5:
44:d3:6a:ce:27:14:78:3d:12:e1:1f:cb:bc:b2:fc:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:82:B6:B3:BF:03:23:29:EF:54:BB:CD:61:1E:8B:5A:E3:BB:4A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.80.0/20
68.232.192.0/20
136.147.128.0/20
136.147.176.0/20
198.245.80.0/20
199.122.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:7d:95:72:3e:f8:01:3b:7d:81:35:4c:8f:94:97:40:c2:fe:
88:0a:84:00:b5:9e:5d:14:56:84:b2:25:af:e6:70:e8:d7:67:
02:0c:c0:4b:af:57:3a:9c:cc:94:17:c0:5d:92:a0:0a:23:27:
15:42:5f:85:50:06:9d:b4:08:bf:ec:ac:11:a8:8f:5d:85:cb:
e0:10:d7:b8:78:df:03:0d:23:4d:92:a4:6b:da:cb:0c:c8:fd:
41:3d:c0:74:3d:e8:30:1a:73:1a:15:8d:02:23:be:9d:86:ce:
69:a7:21:27:fa:bb:70:e9:85:20:28:72:68:b7:f5:08:54:c0:
9b:00:1c:6c:e3:5f:7c:02:80:13:c0:56:4d:7d:21:3f:f2:4d:
6a:98:ac:97:21:b8:6b:d9:0a:3b:3a:1b:61:46:f5:fa:1c:02:
df:92:f4:84:6d:66:d1:c7:8e:46:d3:78:be:ed:5c:af:50:d7:
ad:ce:d2:56:eb:08:94:3a:73:66:31:4e:e9:0c:fc:e8:09:67:
aa:1b:2d:85:97:36:fc:6b:49:7d:46:ff:8f:0c:53:d7:41:db:
d8:57:78:3e:a5:ca:b4:86:49:a6:65:7d:6d:34:09:5e:df:a8:
2a:71:96:b8:92:e4:6b:7b:ae:22:9e:53:26:a5:e2:5a:f1:93:
62:53:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:51:33 2025 by rpki-client