Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
File: 286dff2e-c72b-39d5-9019-431053745837.roa (raw, json)
Hash identifier: 0LXXOYq/m/wqtDJnDDPis68uvAse0nHmafmCMRLnLCA=
Subject key identifier: F9:E3:5D:9B:98:F6:5D:DC:DB:A0:7B:68:1B:BB:3A:7E:D2:AA:4D:D4
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F432858495EEEE9861EB52AFEFE1A2800
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 400727
IP address blocks: 209.35.100.0/22 maxlen: 22
209.35.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:e9:86:1e:b5:2a:fe:fe:1a:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=2fe0df0c-ac6b-42c2-891d-b0b0b707b5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:86:38:36:06:a0:fe:73:7c:f0:57:54:2b:
10:4d:c6:29:01:8d:f3:64:22:b8:ee:5a:27:a1:51:
02:8d:e4:b7:2c:c3:4a:1b:68:8e:f8:c7:be:e1:6c:
d7:5c:8d:e9:91:c4:55:f3:42:c9:39:d3:61:cd:2f:
52:5a:06:d6:50:dd:52:fe:1d:eb:18:90:5e:92:ed:
6a:58:fc:59:3b:5a:c5:61:65:cd:31:3e:28:90:c3:
1d:ec:a5:ec:77:46:31:68:ad:5d:b2:fd:a9:e6:d7:
62:b1:46:d4:7d:c7:95:19:27:31:fb:04:e3:b4:3e:
b6:47:c4:07:24:7a:e4:e0:3c:0d:40:2f:bf:a3:c1:
c7:96:6c:7a:f7:52:45:95:f8:29:c9:01:90:a8:fe:
af:ab:a5:9e:93:b7:bd:c4:ea:5b:2a:a5:f2:64:29:
11:85:73:4d:2f:b3:d7:cf:5b:60:c0:0d:e3:25:05:
aa:d1:fd:4f:e9:88:61:13:8a:2b:59:4b:84:13:d6:
82:91:33:ef:58:51:af:05:61:8b:c1:53:b8:78:29:
d4:45:27:f4:a2:ed:c9:9e:de:be:ee:2a:20:ef:3a:
b7:0e:75:b7:1e:ce:a0:8c:9e:54:61:5c:86:79:ea:
a9:81:24:3e:7b:06:c4:77:ed:11:7e:96:b6:08:c6:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:5D:9B:98:F6:5D:DC:DB:A0:7B:68:1B:BB:3A:7E:D2:AA:4D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.100.0/22
209.35.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:38:0d:7d:7a:a9:94:42:06:8c:bf:2c:24:e5:80:3e:65:70:
b7:d9:1a:34:34:4d:23:b4:46:44:3d:fb:6f:0a:8c:5d:e8:f2:
ea:2f:cc:b1:d1:84:6c:56:ad:31:e7:6a:1b:71:92:a3:4f:3c:
b8:62:aa:04:e3:c3:00:3f:1e:9e:93:8e:2a:c3:a4:f5:bf:3b:
51:3e:4d:33:23:aa:b7:9e:63:76:64:0e:72:29:ea:3e:98:c1:
80:3b:fb:00:f5:4d:39:ef:65:d8:e2:52:8b:89:75:8f:86:4c:
37:7a:26:25:42:5b:6d:e2:d5:ea:7f:d4:ae:6d:42:53:23:66:
4e:bf:5f:31:80:70:5f:0e:ea:93:ce:c1:2a:3c:03:b5:51:7a:
f3:d5:98:73:af:41:c9:37:a9:c5:cc:bd:e7:5b:8e:14:a7:46:
39:71:a2:db:69:de:3e:9d:9e:83:66:9f:4f:15:74:f6:a4:71:
ea:b5:8c:c7:ad:35:19:58:81:a9:11:cd:a6:57:c8:8c:5a:73:
ab:87:aa:c0:97:34:6d:a8:2d:d8:4e:8d:76:7b:cd:af:dd:e2:
85:40:1c:7b:d1:ea:cd:5f:23:4d:07:89:d0:cf:f0:a7:f0:0e:
91:b1:01:d6:55:a9:8e:9c:0e:17:3f:65:9b:9b:19:48:09:d0:
34:fe:8f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net