Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa
File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json)
Hash identifier: qjwsvm7myzo1alkBEuldI/WKIeqAWMbIanZLFc4xEZA=
Subject key identifier: 5C:52:1C:5C:E0:CD:43:D8:98:47:E9:E1:7A:6C:D7:7D:7F:10:00:DA
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584854703303CEF06AEFBE11AE60
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 209.35.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:33:03:ce:f0:6a:ef:be:11:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=58680cab-a369-4e08-859a-346396f11a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:7c:01:5e:25:b8:36:af:cd:08:c5:5a:0a:
b3:c6:77:3e:ed:69:3b:d1:58:37:9e:1c:61:43:b6:
92:25:8f:ba:eb:87:e2:2f:0c:73:d8:5c:bd:1a:e9:
5f:d7:0e:a2:ca:1c:b9:9e:0a:ec:35:4e:ac:48:e5:
d7:5b:79:c5:e7:71:d8:43:40:d4:3a:08:09:e7:0d:
a9:8e:e1:6d:3c:1d:01:97:74:80:3e:6b:f0:34:21:
c2:08:cb:09:b5:f3:bb:b5:13:b8:4d:69:47:c8:7c:
b7:dd:74:8c:18:d7:83:39:d6:c5:47:45:a6:4e:9a:
02:12:61:ba:30:26:cc:2f:f5:91:ee:36:9f:cd:52:
e2:95:d6:98:2f:b5:f9:05:0f:99:fd:73:97:67:7d:
8d:36:61:98:26:a3:5d:42:6d:08:dd:c4:f1:83:bb:
53:5b:98:cc:02:13:ad:51:d8:95:19:6b:3f:81:f0:
89:0a:ac:42:57:8e:80:43:c8:e0:87:b0:af:6a:67:
00:20:e2:7e:10:1a:c1:bf:51:64:d3:f3:38:64:ff:
37:a1:5a:3f:ab:f6:ea:4d:ec:64:05:0b:59:bf:65:
07:bf:98:be:44:c8:2e:7f:ef:46:31:dd:9c:5c:bf:
05:3f:99:63:17:d4:8d:2a:3a:56:61:db:43:10:bd:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:1C:5C:E0:CD:43:D8:98:47:E9:E1:7A:6C:D7:7D:7F:10:00:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:35:a7:dd:02:4c:e7:a1:eb:7c:35:03:5d:23:d3:5b:49:fe:
6e:06:98:82:24:a0:b0:63:60:2a:fd:ad:6e:9d:ad:1e:26:c1:
c0:2e:b0:ec:f3:ba:45:18:af:97:cd:6a:93:73:00:f7:27:cf:
31:b8:97:de:f4:75:3c:04:6b:fa:6b:24:a8:46:de:21:5c:82:
a0:25:6a:91:68:dc:03:12:59:a2:86:f7:3e:39:18:91:ec:aa:
fc:56:24:26:0c:4f:12:80:2b:2c:72:24:93:36:fd:b7:45:a1:
79:3c:8a:4f:d6:83:3a:da:d3:2c:cc:c4:4a:cd:25:4a:09:8c:
d6:7d:34:26:39:3c:72:a0:4d:c7:03:07:65:62:34:c3:35:0c:
ce:87:98:7b:bf:50:52:6b:a8:a4:26:88:df:4b:57:89:02:f1:
40:4e:0e:40:da:a7:74:cc:7b:ed:89:99:5c:eb:50:4e:f2:28:
53:7e:d6:61:69:74:ab:71:61:fe:77:54:03:bd:75:41:f4:ea:
d1:69:d3:f6:81:11:57:e2:bc:23:09:94:47:7e:65:56:ce:8b:
8e:0d:7d:26:66:1f:a4:17:92:b8:26:58:67:ae:6c:c2:c5:1b:
8a:16:8e:8d:fd:d0:02:23:b2:f3:9f:62:02:37:b2:98:4e:de:
2b:69:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:29:23 2025 by rpki-client