Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
File: 79569488-5c69-30a4-ba69-3e3e08449c39.roa (raw, json)
Hash identifier: U3M4+U6rBoZzQmgM9UFy9TGyVOhP31bl8V1q+KUT4+E=
Subject key identifier: C5:C9:0D:B9:CD:44:FA:3D:14:6C:82:8C:7E:A4:D7:3D:70:F6:37:EB
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848547032D41C74A1C5BAE23180
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 209.35.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:32:d4:1c:74:a1:c5:ba:e2:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=ad2017b0-5000-41d4-a6ee-2604fed588e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:91:69:fc:38:a1:90:3d:eb:23:83:ad:10:
29:0c:fa:a5:8e:fd:0e:52:2d:f1:35:ad:2c:7d:fc:
55:ee:15:8b:f0:1f:30:8e:1c:21:3c:1d:4d:4d:50:
34:7e:22:a9:1e:d0:e7:62:65:c2:ed:01:9e:10:51:
71:66:6e:87:dc:00:e7:5c:d9:a5:45:2a:9a:05:28:
e8:90:d9:db:19:d8:d6:d3:86:92:52:90:ff:f5:85:
49:f5:fb:fb:62:34:86:49:27:7b:56:a6:0f:73:ae:
92:3b:49:54:7e:25:9f:a5:11:b9:a9:3c:31:57:53:
f2:b2:41:96:a9:36:d2:c7:d7:77:19:ac:6f:88:77:
f3:11:00:7b:a0:f7:77:57:ce:9a:46:c6:d9:a5:69:
74:55:95:cc:a3:81:96:02:d7:39:cd:a2:bb:84:99:
9f:bc:ab:fb:a9:9f:b5:6f:8c:43:90:70:a3:45:04:
1b:11:f7:ff:9d:07:63:d6:93:47:c8:a7:3b:d5:5b:
24:4c:ee:93:18:8d:59:9f:35:96:9b:15:59:94:f9:
91:65:72:8e:42:b0:d2:e6:1f:f6:3c:63:d0:6a:2c:
65:c7:96:96:5a:a7:c4:48:18:9a:18:eb:64:4c:83:
0d:3a:0a:22:f4:cc:5d:46:2b:4b:3b:18:66:8c:f7:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:0D:B9:CD:44:FA:3D:14:6C:82:8C:7E:A4:D7:3D:70:F6:37:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:0d:9c:66:ec:2b:6f:95:8e:a6:6e:8a:79:f9:8d:50:c9:76:
83:bb:46:6c:45:8f:17:2d:b4:a9:92:ab:ab:09:be:e5:06:57:
08:7d:b7:5f:02:8a:4b:3e:24:02:2b:77:30:e6:7a:01:1e:d3:
dd:60:91:fc:42:74:a9:e0:1f:c1:82:ad:04:26:c5:1e:d6:fe:
0b:8c:b3:c8:3d:a7:e6:57:cb:7a:23:d6:0d:24:37:1b:a2:e6:
01:e0:ec:9f:e7:1d:f0:19:f1:ca:87:14:77:ef:65:94:14:66:
1e:72:f9:55:6f:2d:ff:6c:28:7e:19:a4:b6:04:8a:4f:d8:11:
6c:87:19:1a:33:04:f2:a6:e8:79:10:9c:96:74:fd:d7:4d:c7:
44:a2:e1:fd:2b:07:1d:5c:27:3a:4b:50:3c:64:51:0f:e0:10:
da:4d:db:6b:4c:16:80:92:f2:cc:2a:63:7a:7e:d8:d0:a1:7d:
72:c7:2d:e0:3e:d7:d0:8e:7b:db:2c:51:80:51:1f:54:15:b0:
0f:4a:b7:68:29:c6:09:66:77:4c:99:3d:da:42:71:94:c5:b0:
e6:6c:c6:1d:ee:dc:ce:9e:11:65:ff:f3:57:96:3d:d4:34:bd:
a7:32:7b:b4:63:ec:db:c5:d6:34:57:28:77:22:c7:af:2b:5f:
fb:3c:92:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDLUHHShxbriMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
YWQyMDE3YjAtNTAwMC00MWQ0LWE2ZWUtMjYwNGZlZDU4OGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjiRafw4oZA96yODrRApDPqljv0OUi3xNa0s
ffxV7hWL8B8wjhwhPB1NTVA0fiKpHtDnYmXC7QGeEFFxZm6H3ADnXNmlRSqaBSjo
kNnbGdjW04aSUpD/9YVJ9fv7YjSGSSd7VqYPc66SO0lUfiWfpRG5qTwxV1PyskGW
qTbSx9d3GaxviHfzEQB7oPd3V86aRsbZpWl0VZXMo4GWAtc5zaK7hJmfvKv7qZ+1
b4xDkHCjRQQbEff/nQdj1pNHyKc71VskTO6TGI1ZnzWWmxVZlPmRZXKOQrDS5h/2
PGPQaixlx5aWWqfESBiaGOtkTIMNOgoi9MxdRitLOxhmjPcizQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXJDbnNRPo9FGyCjH6k1z1w9jfrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNzk1Njk0ODgtNWM2OS0z
MGE0LWJhNjktM2UzZTA4NDQ5YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwNnGbsK2+VjqZuinn5jVDJdoO7RmxFjxcttKmSq6sJvuUGVwh9t18C
iks+JAIrdzDmegEe091gkfxCdKngH8GCrQQmxR7W/guMs8g9p+ZXy3oj1g0kNxui
5gHg7J/nHfAZ8cqHFHfvZZQUZh5y+VVvLf9sKH4ZpLYEik/YEWyHGRozBPKm6HkQ
nJZ0/ddNx0Si4f0rBx1cJzpLUDxkUQ/gENpN22tMFoCS8swqY3p+2NChfXLHLeA+
19COe9ssUYBRH1QVsA9Kt2gpxglmd0yZPdpCcZTFsOZsxh3u3M6eEWX/81eWPdQ0
vacye7Rj7NvF1jRXKHcix68rX/s8kts=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:04 2025 by rpki-client