Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
File: 25e1f105-51dc-3628-8af3-fd38d010fc75.roa (raw, json)
Hash identifier: MfxPK8zfC7bxqv0tUN/jDTh28jW4EM7bg0qLkmamSAA=
Subject key identifier: 0B:8C:73:DD:C0:DE:63:49:54:EC:DB:29:95:EF:22:7C:81:DA:29:DA
Certificate issuer: /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial: 010D0C9F43285848BE862DADCE20BEFE98C33A80
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 399554
IP address blocks: 209.35.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2d:ad:ce:20:be:fe:98:c3:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=b9278c32-5d2b-43a9-a275-2303c3085081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:c4:20:f1:27:5a:7b:c2:df:25:d2:0d:98:
95:cf:88:64:a5:ec:45:58:99:40:8e:c7:90:47:1d:
86:c0:a4:4a:47:4b:fc:70:10:38:3b:57:d7:d4:59:
8e:43:d4:f4:66:89:81:31:8b:44:12:b2:85:0d:5c:
5d:88:00:03:5b:d8:ba:df:97:82:1b:fb:b5:a2:06:
1f:12:4d:d2:0c:ea:df:4e:68:1d:6e:42:af:85:84:
da:aa:6c:9b:13:46:74:a5:91:1b:03:80:ec:b6:20:
37:d9:ef:81:67:c2:2d:27:d0:d4:f6:f4:73:26:fe:
39:e0:9b:27:8d:e0:bf:b2:62:15:80:2e:b2:1f:76:
7a:70:c2:80:18:98:ed:8f:ac:45:e9:c9:a1:7f:17:
7c:70:92:97:04:28:6d:c4:72:79:0e:b9:04:47:d7:
41:63:d3:96:ac:45:e8:b3:4e:82:e7:07:c2:5e:c3:
ee:35:e3:33:f8:5e:88:83:a5:b1:31:97:7b:98:ee:
a4:26:63:79:2a:3d:a0:4b:dd:4f:3a:5a:e4:f5:b9:
05:49:7a:04:b1:f4:40:93:2c:57:6d:d9:d9:30:9d:
ff:45:e6:5b:84:c4:48:f8:1a:5e:61:b7:73:df:13:
bc:8f:d2:92:2c:4d:c0:d4:e8:7c:64:2b:42:4d:fb:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:73:DD:C0:DE:63:49:54:EC:DB:29:95:EF:22:7C:81:DA:29:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
X509v3 Authority Key Identifier:
keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a4:61:5a:1b:58:df:bc:f4:79:9b:b8:38:8b:4f:7a:b8:15:
16:3f:a1:c7:78:cc:f9:48:88:ad:48:71:34:c1:30:e3:20:aa:
03:31:dc:eb:bc:07:41:f9:39:f1:85:26:da:c9:87:36:57:e3:
17:de:8c:cd:a5:1c:db:3e:ac:a3:9d:7a:c3:7c:5e:4b:2f:16:
98:33:90:eb:a5:28:cc:15:e6:cd:bc:46:ed:aa:15:17:29:2d:
4c:f8:cd:33:b0:d4:66:cd:0e:cd:73:b5:70:8b:0b:c8:3f:33:
8b:d8:63:e3:f4:c9:f2:f3:89:02:17:a6:43:56:54:2b:da:e6:
2e:f9:d3:df:51:bf:fb:41:55:6a:a4:e7:38:7d:59:43:aa:32:
6d:a8:43:f4:c6:7b:55:a8:9f:5b:73:a9:9a:4a:a3:68:1e:78:
2a:2e:db:d8:f4:c2:82:22:b1:eb:ce:24:17:60:9b:9c:eb:91:
c8:32:d1:e4:e4:eb:75:09:78:58:43:15:3c:b4:dd:a3:d8:5e:
cf:e0:55:eb:4f:22:97:cc:88:0a:b2:f4:a4:06:3a:68:be:88:
3a:13:19:f8:7c:d5:81:df:49:d1:0c:ef:7b:33:4a:e2:4d:d8:
21:18:6e:9e:1e:5a:4b:dd:7c:6d:4a:fb:c3:19:88:86:79:4f:
a0:99:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:09 2025 by rpki-client