Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa
File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json)
Hash identifier: 6UvZZ4hOzEvsT9thPaaaJPn+k5Pp/8g/I39SyUFJy5s=
Subject key identifier: 5D:16:CF:44:F9:24:97:4F:D7:18:31:A5:E9:EA:9E:10:C7:CB:E9:F1
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848573AD6A7813B816CEE929700
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 209.35.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d6:a7:81:3b:81:6c:ee:92:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=5493a15d-8bda-4ccf-b81c-05f9c05d1406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:89:de:17:cb:cf:bf:00:eb:77:8a:ab:54:
37:61:b9:9f:cf:e0:82:6f:ff:65:c8:13:be:35:ec:
14:c8:b9:d7:07:a7:e8:7b:b1:41:0d:81:11:c4:e1:
14:a0:7a:22:83:1c:5c:6c:a2:cf:80:b0:06:23:b2:
08:be:08:24:e9:dd:cd:54:4e:99:7c:2e:f2:f0:1b:
cb:7f:9d:ee:ca:65:66:3a:92:9e:12:7b:79:cd:c3:
6e:6d:e9:76:88:63:38:8c:01:b7:41:69:0e:22:b5:
d8:d4:e6:53:12:36:e1:61:a0:69:82:0e:4f:2d:e3:
bb:65:16:e4:6d:8a:83:06:57:24:49:e6:2f:7e:cc:
4d:30:9f:27:77:dc:80:39:73:2e:41:7b:8f:a4:9e:
45:ee:f6:44:8a:69:34:22:f9:97:b5:ce:cb:06:d1:
f6:74:d3:c7:16:d3:9b:78:01:db:54:33:77:50:65:
e2:0b:a1:be:72:85:ce:45:42:51:c8:43:81:62:2c:
f0:a1:7b:aa:43:6a:38:d6:54:e4:c2:41:b7:72:fb:
85:02:0c:69:b7:32:38:d7:95:62:66:88:57:b4:f0:
b3:61:77:48:c4:4b:21:25:7e:07:1c:3f:e0:d0:53:
fd:cb:cb:bc:bb:bb:06:20:1e:6e:d9:98:a5:58:12:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:CF:44:F9:24:97:4F:D7:18:31:A5:E9:EA:9E:10:C7:CB:E9:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:20:f1:31:f6:68:b6:5a:31:fb:2f:c8:8d:e0:82:44:17:74:
5a:88:31:62:a8:5a:12:c3:19:0a:2b:5e:9c:f2:97:51:10:4a:
3b:2a:2f:fd:86:5a:5c:c5:70:66:d9:8e:76:a0:91:d6:46:18:
a8:ca:61:2f:cb:1a:bf:18:ab:14:a9:4c:62:4c:46:9f:ee:88:
5e:8e:5c:bd:b8:47:53:6d:58:14:54:b6:62:b3:5b:3d:b4:5b:
3c:5a:41:0d:6d:d5:40:86:84:00:29:26:d5:d4:62:b5:ec:1d:
02:5c:21:6e:bf:d7:4a:a8:42:1e:8f:a3:38:8b:26:15:21:6f:
90:88:1a:b3:5b:48:29:67:55:c8:97:c1:ab:e6:6f:ca:c0:47:
a2:fd:fa:15:c3:f4:87:ce:12:1c:06:74:c5:30:06:2b:c2:95:
e0:fc:5b:1f:1e:61:34:09:26:39:3e:d0:c3:1c:79:e3:10:bc:
e8:22:89:89:d2:c9:ab:ad:af:39:90:3f:54:6d:e7:25:e2:03:
1f:2e:ba:25:4e:57:a7:e4:48:01:6b:d7:40:5e:7c:28:49:34:
cb:ab:32:cd:43:09:cb:71:da:54:56:eb:72:ac:65:5a:0e:fc:
0d:ef:b7:a4:5a:42:35:bf:16:de:57:4f:1d:59:50:06:ae:24:
24:81:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:03:52 2025 by rpki-client