Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa
File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json)
Hash identifier: /Ns42HEPAFfaCHb8NzoP6UduymVs/omm66dHAfwQG9Q=
Subject key identifier: 01:75:4D:FA:0B:C5:A2:56:EE:C3:DE:EF:9E:4A:41:1A:22:2A:4B:C2
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285849350E98CADCE09E9286397D00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 33392
IP address blocks: 209.35.0.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:ca:dc:e0:9e:92:86:39:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=9ec3a4e1-cbd4-40aa-8930-9b22dc5dc012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:b9:43:68:f5:0e:88:a5:22:99:29:62:aa:
43:42:4b:60:58:11:93:5c:b6:45:c8:1c:d4:f5:bc:
d0:82:ff:6e:45:55:3c:99:5d:77:03:10:46:0b:4a:
07:f2:30:81:b7:a0:8e:39:b7:c2:30:d7:40:e6:a5:
27:f3:e6:08:d3:04:16:cc:97:d3:87:a4:eb:07:09:
d2:c2:f2:7f:b4:6e:b3:7a:44:6c:fc:5d:c5:35:d8:
e7:60:e3:65:dc:f6:8b:bc:ac:7f:df:42:06:17:f5:
ef:c5:8e:90:89:e7:50:3c:27:5b:19:f8:94:f0:27:
13:dc:d7:e9:7c:b1:bf:1a:b2:ce:b4:50:f3:b6:47:
b0:0f:26:59:d8:0c:43:8f:9a:5d:10:e7:ac:a5:e4:
46:d7:bb:21:80:74:d0:9d:9a:c4:64:4f:40:35:9e:
f9:02:ec:45:56:b6:69:0b:d1:c2:9b:6c:73:30:76:
fc:ae:d5:96:49:f9:c4:58:26:2d:f4:e0:e1:1a:cf:
fa:95:96:89:1a:c8:20:07:3b:99:df:26:bd:cf:8d:
73:1c:4b:bc:a6:da:a8:b4:2f:19:23:66:70:cd:6f:
70:72:b9:38:8d:78:4d:80:e9:29:d9:59:d0:81:ca:
b4:41:9e:02:79:6b:03:99:c6:4a:1b:22:a8:cb:10:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:4D:FA:0B:C5:A2:56:EE:C3:DE:EF:9E:4A:41:1A:22:2A:4B:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b1:24:2d:d4:38:49:2f:da:ce:75:00:3c:84:e3:eb:cc:6c:
7f:3b:a4:9e:9f:93:ec:ba:9a:81:c3:11:b9:bd:4a:e4:ea:eb:
21:52:e7:28:d3:bf:0e:09:e5:f4:88:f1:67:c5:6f:9a:b7:eb:
54:60:9a:58:c0:b2:e7:ec:b0:60:6c:a3:88:57:25:af:4a:df:
e9:63:61:2f:b0:8a:77:24:e5:e0:86:eb:be:32:d4:13:09:02:
4d:fd:df:68:a9:23:70:56:22:04:3a:78:60:51:36:14:bf:80:
a8:2b:fb:37:a4:1a:d1:4f:8e:7d:62:d8:28:30:a5:1d:b9:4c:
9d:67:da:45:52:13:d7:1b:41:29:c5:3c:50:e4:6f:db:c6:d3:
5e:a1:ee:b0:ea:d1:d3:1b:99:9b:f0:87:6b:fa:80:df:86:bf:
8e:46:bf:46:f2:ba:fe:b8:84:75:3f:8a:09:0d:f6:d9:cc:24:
16:b8:0c:11:e2:09:d4:0f:a0:9e:ff:0d:b6:7b:cb:ec:01:3a:
d1:fe:a8:b7:30:75:51:c3:b6:00:2e:8f:5a:b9:2b:f5:3c:ac:
7c:e7:4d:0a:17:67:c2:91:d5:49:3c:48:57:aa:cb:79:fe:91:
7c:99:9a:2f:6f:5c:70:3a:60:f1:6c:9e:61:1e:5f:5a:63:48:
2a:02:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net