Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
File: 04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json)
Hash identifier: mJad8CCu+ptniYhflDrbqCsnkXaeIY5Gum874aKI3KA=
Subject key identifier: 48:6A:E0:1B:81:D0:59:06:3C:C7:99:E8:D0:D2:79:82:1D:74:84:48
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584940394E60FC9C25A1AC355500
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 33392
IP address blocks: 209.35.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4e:60:fc:9c:25:a1:ac:35:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=83efa0e7-230b-437e-a9a9-01f3b555f235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:b1:3a:5d:a0:cd:6f:1c:eb:8c:16:32:b4:
54:52:5a:93:ff:2e:ac:53:3c:12:40:2d:5f:47:4e:
f1:ec:09:a3:8b:e7:c6:b7:a9:64:75:66:f8:82:87:
30:5e:11:16:81:f3:9b:31:9a:e7:fe:0b:92:88:aa:
23:86:53:4e:97:2f:b6:41:0c:65:44:8c:6d:d8:d3:
de:00:cc:7b:68:20:a6:fa:f3:97:7f:a0:76:b8:91:
32:82:17:35:d4:6e:85:e0:59:41:5a:20:cb:b2:8f:
01:c2:10:22:58:68:81:fa:6e:92:86:23:66:af:30:
a7:f8:68:c4:41:dd:1a:a1:90:ae:82:3b:dd:94:bd:
f0:10:95:a9:dd:69:49:ab:95:c1:9d:95:b2:53:77:
aa:29:62:70:66:8b:01:d1:37:2e:62:5a:ab:99:00:
7d:84:dc:ff:6c:f4:08:c2:d8:7a:78:05:22:2c:39:
71:ce:c4:0c:c3:92:e4:91:a1:ef:95:06:fa:bc:91:
8b:d2:b7:a4:a0:06:1c:c3:3b:37:4d:3f:06:2e:46:
da:bf:21:c8:e1:97:3b:9e:92:35:5d:51:39:a0:75:
54:e8:2a:0a:26:6f:98:fd:63:32:2d:56:0e:ac:35:
1b:0f:10:fa:51:ad:a5:80:43:a8:85:bd:47:dd:9e:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:E0:1B:81:D0:59:06:3C:C7:99:E8:D0:D2:79:82:1D:74:84:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:b1:01:94:bf:f1:dc:06:de:9f:e2:12:57:db:27:a0:9e:36:
fb:9e:8d:52:48:f2:b2:b2:19:7f:10:80:a2:16:60:7a:26:66:
45:02:4f:84:86:8e:6a:41:f6:7e:10:95:65:8f:cc:49:09:d5:
ec:17:a3:25:b6:b4:eb:9c:17:0b:3f:4f:28:f3:f0:1d:1c:f2:
37:54:65:ab:53:e4:db:db:fe:4c:0b:42:f8:66:f7:64:6c:c4:
09:a9:8f:b8:d9:6f:f6:5a:09:59:90:92:49:b7:06:02:d1:97:
a9:47:fc:05:3e:4c:b9:15:ab:d1:c6:d1:8e:0a:55:93:23:15:
57:96:06:aa:4d:00:bc:95:24:1b:79:20:07:e9:67:4a:ae:d9:
62:b1:0e:56:40:88:f8:af:54:95:6f:08:63:92:3e:0f:5d:59:
3c:13:b0:38:84:79:5c:f4:3d:56:17:70:09:2d:4f:de:1d:ef:
b5:cb:45:00:e4:82:1e:3c:a6:86:8b:11:2f:54:9f:8d:26:6c:
c3:88:70:e2:95:c9:ee:ec:04:54:20:95:58:df:8a:e2:eb:db:
a7:6d:e2:d7:aa:aa:2e:7e:c5:7d:a0:ad:e9:d8:c7:c8:26:29:
6e:72:41:9c:2e:d5:95:f6:56:19:de:db:c7:56:ee:88:3d:20:
50:5f:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:08 2025 by rpki-client