Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa
File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json)
Hash identifier: qaMduvySP5r50/sVUZFWPq5ulNK0gKGiNFRk39oh564=
Subject key identifier: 4E:A9:9A:E4:30:35:45:D7:11:08:4A:86:C8:E0:2B:18:40:45:AF:D3
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F432858486265928C02CE48E2AC3C6E00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 33392
IP address blocks: 209.35.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:92:8c:02:ce:48:e2:ac:3c:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=ade6059b-0154-4b30-a317-7c1b732e50a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:f7:40:ea:19:87:78:e5:48:46:bc:5f:c6:
20:5c:93:61:39:14:43:7c:61:9e:4e:9f:bc:ea:32:
6f:c9:e6:db:39:8b:77:12:75:0d:35:ed:b0:9b:36:
49:c6:e4:b5:9b:32:35:e4:5c:b3:b4:9a:08:63:cc:
71:02:e1:6a:5d:33:ca:53:7b:0f:98:ba:e1:02:38:
63:57:b7:dd:67:ff:37:1e:3b:76:53:2a:71:64:f9:
43:71:df:a4:be:44:fb:4e:6f:a7:66:e8:63:85:f6:
0e:74:ea:b2:07:71:47:db:67:34:e0:73:ff:7b:63:
8e:8c:b5:f7:3a:cc:ce:53:2b:c1:89:a8:d6:86:e4:
9d:a2:36:54:db:33:c8:76:74:4e:1d:d0:97:a0:f0:
49:57:f1:f0:8e:22:3b:11:98:39:96:13:bc:32:c6:
74:7c:b9:7a:5e:ec:c3:10:e3:a9:dc:a3:94:f9:bc:
33:72:be:9a:51:c6:8f:ad:9d:13:c4:29:b5:70:5f:
e3:52:42:40:74:3c:14:2c:ae:46:c2:13:f7:ce:e3:
e3:30:0f:27:14:c6:c0:55:6b:10:3f:dc:58:09:f7:
fc:2d:7e:46:bc:95:bb:2e:0a:3f:55:2a:19:64:b6:
25:47:56:e5:1d:16:d4:f7:d4:19:d7:eb:81:2e:4b:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:9A:E4:30:35:45:D7:11:08:4A:86:C8:E0:2B:18:40:45:AF:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:9e:a6:bc:d7:96:20:af:ef:98:e9:79:5a:c8:89:68:0c:12:
a0:d9:d6:b7:12:76:6a:86:b4:4a:c0:45:71:f5:0a:0b:6a:25:
89:7a:74:cb:51:f0:24:31:07:b5:6e:4a:6d:78:ae:dd:91:6f:
6f:6a:9d:3f:c6:1d:de:c0:e5:74:ec:dd:ca:d3:9c:c8:f4:9e:
ce:00:36:bb:bf:e6:9f:86:c0:e2:85:65:da:27:b7:1a:79:d1:
7a:19:2d:22:76:36:b5:2b:42:04:2e:33:01:ae:03:28:83:94:
4c:90:0d:df:c0:8f:67:ef:d3:5b:fa:5d:a2:4f:f8:98:03:a6:
62:3b:42:50:74:01:eb:d4:e2:11:c0:b0:12:fd:10:1f:10:da:
b0:b2:ba:81:f5:c4:ec:bc:69:69:d5:5d:90:db:23:6e:03:d6:
7e:f4:e1:1f:03:5a:e3:fb:c9:c9:13:f6:a5:da:b2:a5:c1:2e:
78:4a:ba:5e:6e:cc:d5:2e:87:bc:de:2e:da:32:39:b4:9f:51:
b4:3f:71:e7:db:40:77:d4:32:cb:a0:99:ff:3b:2d:c9:7d:cc:
b7:dd:b1:b5:84:50:b0:98:01:44:69:19:6f:60:2a:95:6a:66:
46:e4:08:28:1b:51:97:81:60:76:39:f0:c4:b2:e5:33:29:df:
38:70:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:53 2025 by rpki-client