Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
File: 04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json)
Hash identifier: sucqdZkjRXB0Xgh6yHDghZMDfvkjcXFCGedYIZxafpg=
Subject key identifier: 2E:BF:E2:D9:27:13:02:1B:64:F6:BF:82:C7:D6:EE:49:BA:00:48:C2
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F432858485F9AE6D771423802F5F44260
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 33392
IP address blocks: 209.35.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e6:d7:71:42:38:02:f5:f4:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=94d24f21-c2ca-4b09-8b99-f4295fbac08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:7c:40:85:7f:6f:d2:67:a3:ad:2b:9c:74:
d0:bd:4e:f6:a8:84:c9:51:1c:55:3e:41:6e:c6:3a:
b8:fd:40:95:d4:69:6a:58:55:bd:43:0d:0b:9f:d9:
0b:c4:a0:cc:df:17:b9:89:cc:ef:11:f7:d7:69:d4:
be:7f:10:a0:61:7c:e4:53:3b:68:8a:ae:c4:c4:71:
67:53:80:16:59:05:7a:2e:7f:27:ec:e1:b2:ab:0a:
e9:7f:74:bc:06:4f:f1:8f:02:3c:30:4f:5f:bd:45:
a5:fa:2d:55:68:41:94:d8:98:23:b4:9f:72:56:a2:
a2:7b:a4:f5:15:95:33:cc:da:d2:74:a9:3f:36:57:
50:4d:03:30:e7:9c:f2:22:2d:89:84:55:eb:fc:a9:
c6:96:16:24:92:b2:8b:09:af:7c:4e:ec:78:69:ea:
6a:8c:9f:4c:12:9f:ed:57:b9:fa:72:64:a4:fe:70:
13:21:96:21:f5:46:05:8a:51:e9:69:06:a6:a1:b0:
cf:bf:40:d8:34:7e:8f:f8:95:dc:4d:dd:7f:76:42:
cb:ee:97:91:7a:5b:77:9d:c4:f6:c0:25:0e:0c:da:
1b:bd:b4:e0:10:86:a8:9c:b2:19:30:34:f0:a7:63:
8f:4d:39:39:68:cc:61:95:a3:85:bc:57:a9:fe:6b:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:E2:D9:27:13:02:1B:64:F6:BF:82:C7:D6:EE:49:BA:00:48:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:a8:8d:19:e8:6e:1d:3c:e8:de:71:31:3c:7f:29:0c:c2:58:
65:aa:31:a6:4a:df:00:89:eb:b3:b3:5f:f9:d5:c0:58:f8:2c:
09:61:6e:9d:a0:2b:f2:08:d8:8e:02:46:ff:67:df:5b:3d:01:
17:54:f0:1d:3d:17:04:07:8d:46:bd:d6:d6:7e:48:03:86:38:
31:f1:7d:59:79:de:18:7d:9a:28:44:c3:c0:2c:9d:29:4e:23:
c5:f2:3a:b6:09:e7:9d:5e:1f:d7:f6:b4:06:1c:a6:7f:85:40:
5c:14:c4:bb:6c:c9:4c:24:2d:34:d7:d9:4a:d0:64:a1:8e:64:
0f:f6:e2:e8:a1:80:31:40:be:5f:d9:0f:c5:1f:c7:1f:8f:cf:
cb:19:ce:fb:33:30:a6:6e:40:bc:c2:ec:58:42:80:38:ef:7f:
51:5a:c9:92:61:dd:bf:85:62:58:d7:56:c5:8f:5d:ca:2f:1a:
76:90:1c:17:c6:fb:82:03:a1:d6:5d:40:1e:42:ad:7d:91:b1:
04:10:e8:b5:93:6c:02:f3:80:24:f1:68:d6:f6:2c:e8:be:d2:
41:3b:b1:2c:fd:2d:c5:aa:10:d3:6d:07:c3:65:32:30:81:d0:
b3:7e:1f:f9:d5:86:dd:1c:b1:e9:89:b6:9e:4a:1e:bc:44:a9:
fb:48:42:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmubXcUI4AvX0QmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
OTRkMjRmMjEtYzJjYS00YjA5LThiOTktZjQyOTVmYmFjMDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVt8QIV/b9Jno60rnHTQvU72qITJURxVPkFu
xjq4/UCV1GlqWFW9Qw0Ln9kLxKDM3xe5iczvEffXadS+fxCgYXzkUztoiq7ExHFn
U4AWWQV6Ln8n7OGyqwrpf3S8Bk/xjwI8ME9fvUWl+i1VaEGU2JgjtJ9yVqKie6T1
FZUzzNrSdKk/NldQTQMw55zyIi2JhFXr/KnGlhYkkrKLCa98Tux4aepqjJ9MEp/t
V7n6cmSk/nATIZYh9UYFilHpaQamobDPv0DYNH6P+JXcTd1/dkLL7peRelt3ncT2
wCUODNobvbTgEIaonLIZMDTwp2OPTTk5aMxhlaOFvFep/mstMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6/4tknEwIbZPa/gsfW7km6AEjCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDRhNzJiZmItNjk1Ni0z
OTNmLWFmZmUtZmY3ZGI0ODA0ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKojRnobh086N5xMTx/KQzCWGWqMaZK3wCJ67OzX/nVwFj4LAlhbp2g
K/II2I4CRv9n31s9ARdU8B09FwQHjUa91tZ+SAOGODHxfVl53hh9mihEw8AsnSlO
I8XyOrYJ551eH9f2tAYcpn+FQFwUxLtsyUwkLTTX2UrQZKGOZA/24uihgDFAvl/Z
D8Ufxx+Pz8sZzvszMKZuQLzC7FhCgDjvf1FayZJh3b+FYljXVsWPXcovGnaQHBfG
+4IDodZdQB5CrX2RsQQQ6LWTbALzgCTxaNb2LOi+0kE7sSz9LcWqENNtB8NlMjCB
0LN+H/nVht0csemJtp5KHrxEqftIQvQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:07 2025 by rpki-client