Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa
File: 10161777-f08a-3671-aa2b-fae57dafad53.roa (raw, json)
Hash identifier: YckEDcKiazu5eyn3LfBGy06bp0r+X0WZ09ZWhGsLOdM=
Subject key identifier: 12:F3:B3:82:DE:57:DC:3B:4E:BE:21:1D:1C:5B:68:C2:4D:0B:4B:7F
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285849350E98FA94EC8117B02FAD80
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 33392
IP address blocks: 209.35.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:fa:94:ec:81:17:b0:2f:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=b217ecfd-a59e-4343-8180-ed62a37d0d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:b7:22:9b:d6:2f:d4:a3:d5:52:ff:44:cb:
e3:c1:19:91:57:a2:c6:b9:cd:9e:f8:40:f7:0f:7e:
cd:a1:17:7f:59:62:08:f0:1e:87:43:a4:3c:8a:35:
fc:74:48:c9:fb:eb:f3:9a:8c:75:cb:c6:5b:3f:f2:
ba:1d:cd:41:44:27:d2:a8:bd:08:6c:ff:55:59:81:
c3:0c:71:6f:1d:7e:0f:2e:54:00:24:59:b2:dd:01:
d0:d4:3a:a8:2b:7c:d6:82:9d:b8:ff:df:fc:0d:9c:
83:d3:7b:a3:b0:d9:3a:83:93:97:d9:4f:bc:e9:c5:
2b:42:03:a1:21:95:d1:d0:a5:38:c1:21:30:c7:c2:
f5:91:11:b0:78:e6:8f:d5:28:7c:10:d4:6c:68:9a:
cc:18:8c:df:81:1d:26:8f:7e:09:2e:87:f0:57:cd:
4c:2c:03:17:41:31:81:03:49:d1:7f:bf:0f:15:a7:
d1:eb:86:eb:93:93:f4:cb:be:39:e2:f9:b6:24:cf:
5e:8a:3a:46:24:8a:ab:b7:6f:78:79:9c:cd:d5:75:
6f:61:f9:33:53:d6:55:dc:e3:69:43:57:fe:c4:74:
11:f9:af:64:46:ff:1e:8b:1c:e1:dc:5c:69:96:9b:
21:01:4f:2f:86:9e:c9:0c:4a:07:38:c9:e2:9b:9d:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:B3:82:DE:57:DC:3B:4E:BE:21:1D:1C:5B:68:C2:4D:0B:4B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a5:61:88:6b:06:94:14:d7:ed:36:55:1a:06:cf:48:29:11:
92:53:59:dc:ea:87:6c:51:df:f7:0c:bb:d7:d5:25:9f:a3:c9:
cf:35:0e:5b:85:78:38:c7:1f:68:a5:1a:9e:53:f9:a4:cd:0c:
00:98:b8:07:97:d2:3f:d0:55:67:f9:c7:5f:76:87:24:02:4f:
96:51:a0:89:4f:4b:68:12:33:ce:cd:c9:e5:35:0c:28:62:ec:
51:fc:ba:a0:88:b2:14:42:4c:81:d5:09:ef:23:38:6c:6a:20:
68:af:99:a4:59:7b:7f:a4:40:20:b3:3f:05:18:77:7e:6a:30:
28:fd:bb:99:12:5a:a8:06:61:19:31:1f:eb:66:48:72:a9:37:
69:e5:d1:72:e7:71:13:e0:ed:a8:4a:4c:67:14:d0:1a:bd:a8:
f9:77:54:22:ad:dc:c0:0d:00:33:e6:80:01:89:ff:39:bb:15:
8b:5b:5d:8b:fc:82:c8:5a:a2:72:d9:2f:c7:c7:8b:04:52:99:
53:33:3e:78:fd:a0:ef:a7:e2:b9:a6:33:df:7b:9f:0a:f0:71:
8c:24:db:09:e9:eb:c5:b7:ef:54:89:7c:d4:07:fd:c3:9a:cc:
ed:bb:92:7f:c3:f7:54:88:79:f4:52:3e:c4:3c:ca:0b:5f:a2:
a0:80:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:26 2025 by rpki-client