Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa
File: 10161777-f08a-3671-aa2b-fae57dafad53.roa (raw, json)
Hash identifier: L73Wf7U/3NzPbeqQR4ilBYLQHDI0DqxHZDQr03lKf1A=
Subject key identifier: D5:E9:4C:0B:56:3F:8D:92:C7:80:9C:F1:72:2C:1E:EA:ED:92:EB:49
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584854703314A064ED3C7F096900
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 33392
IP address blocks: 209.35.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:33:14:a0:64:ed:3c:7f:09:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=01086aa4-f62f-4d78-9595-5a6362e38511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:e4:d8:d2:03:cd:84:75:7e:ad:f1:e5:1e:
43:41:3e:ca:74:9d:25:9b:d1:0b:8a:5d:fe:b1:7e:
38:6c:98:b5:0b:04:c4:dc:0c:61:9c:f7:44:6b:ec:
2d:bd:7e:74:99:a0:8a:49:69:a7:7e:c8:7f:29:84:
9e:61:ff:5d:88:88:23:42:da:06:8c:ba:97:74:7e:
b6:5f:9c:ac:54:09:87:04:ec:05:7d:fd:02:80:ef:
e7:0f:92:51:b1:c3:fe:c0:73:7e:52:6a:b0:1f:cb:
35:74:6c:d6:fc:7a:3a:21:0b:ae:e1:b5:50:f7:16:
83:75:37:6b:f5:c9:59:1a:35:ee:68:a9:b8:46:d4:
1c:72:1b:01:56:69:72:4e:2f:76:8f:f0:cd:d1:a6:
2a:5c:95:b8:6a:bd:40:ca:8b:62:5f:e0:9f:5d:b2:
a6:e0:3c:c0:96:39:68:5c:72:94:4c:42:2d:c7:cc:
01:e2:86:f9:31:ed:ec:2d:fa:7c:d5:97:65:e1:57:
6c:8f:ef:6c:45:5b:22:09:20:10:b0:b9:c8:30:be:
40:a6:29:63:fa:1a:91:6f:3c:bc:5c:54:25:83:51:
24:63:3a:3e:cb:7c:5f:41:92:86:76:08:d1:05:20:
ff:19:a5:71:39:0f:08:b3:09:18:92:98:cb:77:bb:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:4C:0B:56:3F:8D:92:C7:80:9C:F1:72:2C:1E:EA:ED:92:EB:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:39:38:c2:01:4c:8d:3f:e0:a3:b1:a8:de:a6:39:7e:7e:9c:
33:03:de:4d:8d:f3:40:ad:a5:bf:b5:27:3b:f4:f2:c8:76:9d:
de:cc:ef:f6:54:7e:9f:a8:dd:a3:70:2d:d3:7a:fa:f4:6f:69:
3b:79:06:51:e3:c8:49:83:b2:d8:cf:6e:d8:e2:f8:c3:11:a5:
23:7a:aa:a5:c3:da:0d:60:06:84:10:39:a5:8d:6c:f3:ea:33:
dd:d8:58:f0:54:5f:ba:0a:5c:d9:56:c9:45:fd:e1:ff:91:22:
fe:98:fb:35:0a:a4:60:89:c8:7d:78:90:78:60:e5:ee:99:aa:
ae:b6:49:70:41:ff:17:4f:e9:4b:f6:59:51:b7:fc:e3:f1:37:
3e:65:34:43:7c:74:31:ff:ff:47:d5:0e:33:b0:c7:e0:6c:ea:
d4:3f:5c:13:5a:75:c5:d1:b5:c1:4f:8a:9b:97:38:99:0b:df:
47:5a:41:a3:d8:a2:9e:63:8c:47:bc:9d:91:8f:ea:01:5d:cc:
3c:50:d7:c5:d0:50:f2:a1:5a:35:fc:98:7a:79:e1:30:ff:c1:
dc:b5:7f:7b:1e:fe:17:45:01:09:4e:fa:cd:0c:98:7f:aa:a3:
bb:48:3c:d2:16:2d:3e:ff:fd:ab:97:94:09:43:1a:4b:9f:44:
21:a5:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:35 2025 by rpki-client