Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
File: 286dff2e-c72b-39d5-9019-431053745837.roa (raw, json)
Hash identifier: Se1dKf7Bjthk/YgR8NHHxTjH4fvWfE4C6O2e4HLOBEc=
Subject key identifier: 09:74:6C:DE:F4:69:C7:41:DF:12:97:86:96:CC:9D:11:40:44:8D:DD
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F432858487FB5E2928864F071C8A4C300
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 400727
IP address blocks: 209.35.100.0/22 maxlen: 22
209.35.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e2:92:88:64:f0:71:c8:a4:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=7f13cc78-83c0-49ce-8099-1ff7bb34bbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:bf:02:af:33:ca:75:76:f3:50:74:99:bc:
14:2e:67:b1:5a:a4:a9:22:24:04:b7:d5:7c:93:3d:
70:85:20:32:31:c4:b9:2f:f6:56:c1:e4:c8:53:a7:
80:9a:b8:b0:33:99:de:67:a7:72:7e:43:5a:ca:35:
13:50:2e:fa:c2:06:42:2c:0f:65:e5:0c:8c:e5:7f:
a3:57:fd:27:a0:f1:0a:c5:92:a4:e9:98:e7:82:20:
83:a2:c2:9a:72:f4:dd:40:3a:1f:18:ba:a2:81:54:
ea:73:ac:2c:87:92:a2:a6:0d:c3:04:ae:f5:72:9e:
7a:95:d5:73:a7:02:2c:e1:d8:fa:0b:f3:84:cf:65:
5a:55:9e:e8:4e:ba:a9:e8:b9:63:6c:31:35:0e:c5:
40:11:7a:26:d0:7e:a9:a1:50:41:49:3d:98:ef:7e:
c2:49:2f:70:2a:37:d9:40:05:55:c0:e5:d2:ec:47:
31:17:90:14:bf:f5:08:24:31:50:93:a6:df:98:f6:
fe:a5:ca:86:c8:00:70:d3:7b:2f:6b:52:cd:4f:db:
76:e0:a9:16:11:04:42:0f:b2:0e:10:c9:42:fd:c3:
5c:a8:aa:ad:5a:cd:a7:99:a0:0f:1b:78:30:38:45:
bf:8d:88:12:74:04:e3:43:11:93:a4:50:20:9e:36:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:74:6C:DE:F4:69:C7:41:DF:12:97:86:96:CC:9D:11:40:44:8D:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.100.0/22
209.35.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:6b:83:33:a3:80:6d:05:49:b9:f5:92:b1:be:c4:62:32:d8:
05:1d:2d:8c:c0:a6:a4:90:29:e9:a1:e0:1b:08:9f:bc:4e:15:
63:15:77:a9:47:b2:ef:cf:ee:44:6a:de:ba:8d:18:18:98:21:
60:6d:d9:ea:f1:ae:8c:3f:93:52:43:b0:18:28:a0:b9:d9:15:
9c:94:3c:36:cb:6d:ca:61:ba:ae:e5:8e:f2:ba:9b:3d:e7:7c:
fe:0f:0f:a0:7c:b2:3d:b0:07:af:b0:ea:a5:62:79:41:48:9d:
3d:60:cb:e0:5d:f7:e6:1b:7a:b0:49:62:0e:d4:ef:a5:50:c5:
41:2a:c9:52:de:0c:63:bb:6e:38:bd:c4:e1:7d:d2:66:60:b7:
ce:68:c5:be:10:ff:24:4a:0e:8a:47:c9:f3:fd:51:d2:b1:6a:
54:c5:9f:0e:33:3b:c3:71:1f:27:2a:e5:e6:8a:c1:f3:81:28:
91:ce:33:20:ee:c0:2e:88:77:ff:62:3f:2e:84:9b:5e:3a:5d:
61:64:bd:51:73:ae:90:31:72:0b:cb:06:e1:fb:bc:b1:9c:25:
18:10:d8:4f:ce:58:61:39:da:1d:00:f9:51:8e:a9:1d:78:50:
84:35:8c:7b:92:de:21:3a:9d:f7:1f:84:6d:98:c2:a8:43:6f:
ca:33:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:46 2025 by rpki-client