Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa
File: acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa (raw, json)
Hash identifier: NrWHYutYiUMrPO92HxQRjpbuvzPnEsNH/r8NbPgDNHY=
Subject key identifier: E3:BD:A8:22:DF:A0:C3:A4:0A:89:F8:6E:09:CB:FD:9F:58:44:37:5B
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848547032F49F7D549267864A98
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 209.35.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:32:f4:9f:7d:54:92:67:86:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=6a5aab37-7927-4959-8ba5-8667a64f1c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:55:f0:6b:7d:a0:e7:79:75:88:d6:22:19:
e1:2f:bb:df:7a:fd:ff:fb:17:21:b2:f6:01:9f:2a:
90:00:a9:26:5f:57:31:ca:46:91:51:89:39:43:d8:
10:76:93:2a:ce:6e:7e:99:07:9a:1e:67:f3:77:8d:
6c:ac:c3:14:54:21:55:2c:66:6d:4e:70:5f:ab:4a:
7b:e9:a5:c4:51:53:9a:6f:f9:ee:b1:5e:1f:b5:df:
61:fb:a7:f0:82:0f:e5:7a:f4:d8:30:ae:b5:e1:c3:
4f:3e:9b:1d:59:b6:66:f5:ad:6e:63:54:54:c9:97:
cb:0c:0e:a1:f9:95:dc:29:c5:c0:e2:89:d2:b5:b3:
a4:50:29:c2:8a:fc:de:a3:3e:8f:78:ba:eb:50:6b:
f8:1a:bb:d3:d7:51:88:3b:d2:a8:0b:56:87:0d:9f:
6a:d8:bc:e6:4d:da:32:d6:7d:29:72:fe:5b:be:35:
92:ff:cf:12:64:73:ac:45:3f:f5:0c:f2:28:6a:fe:
ef:52:81:0d:3f:f5:2f:8d:14:6b:3f:70:2e:d9:2b:
8a:da:73:b4:a1:8f:15:2c:24:91:c9:bf:ef:1c:c6:
78:5e:92:1f:43:93:95:de:5f:51:1e:24:50:fa:5a:
0d:a8:fb:cd:fa:28:56:22:eb:33:2b:cb:66:5a:b1:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:A8:22:DF:A0:C3:A4:0A:89:F8:6E:09:CB:FD:9F:58:44:37:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:9f:7b:d9:d4:a6:f1:6b:54:cf:ef:fe:ab:b8:42:c3:c6:40:
b2:28:04:9a:74:06:c3:20:94:cb:5f:82:a0:32:12:f4:54:75:
26:1d:f4:4d:bf:19:01:ca:88:bd:d3:2c:e3:6e:3d:a5:33:d3:
39:d0:a1:79:7f:39:32:c9:82:b1:cd:2d:03:31:20:29:c1:6d:
29:ec:7f:e5:14:ae:0c:6c:56:31:61:57:d9:db:39:40:6a:24:
63:61:f4:a7:54:a7:52:37:0e:76:e6:d8:cf:e0:d0:bc:48:eb:
17:31:cc:cf:52:8b:28:12:0f:68:88:0b:d8:66:58:ba:62:c9:
ca:1a:79:33:8b:24:d4:89:bc:ea:a5:97:51:c0:06:a6:b0:f8:
37:04:e3:25:f4:21:0f:9f:81:91:55:3f:4f:34:47:7d:eb:4c:
b8:7f:1b:a0:a0:e1:67:30:e6:76:8b:2a:12:98:df:d4:f3:89:
cc:e5:ec:50:bb:49:f7:23:83:3d:c3:6a:7d:cc:c0:ae:00:fc:
fc:ae:2e:45:1b:64:29:8d:62:64:05:d6:d6:a1:96:18:9d:ee:
28:8d:54:f5:bf:d3:15:81:40:0e:01:98:fa:7e:10:6d:a4:23:
94:c1:e8:f2:a4:2c:25:e1:fc:9a:f0:cc:3a:8a:84:a5:f9:e4:
ef:a1:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:04:51 2025 by rpki-client