Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa
File: 35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa (raw, json)
Hash identifier: AXH5aXct2q0BgNQLnCenokSAQjEYf6PQXV6zhC0HmHA=
Subject key identifier: 2E:A8:36:17:E6:56:90:8D:69:BA:61:22:B8:8C:83:4C:12:92:1B:F0
Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial: 010D0C9F4328584976A98FC0A0FFBFF1A76E9F00
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 209242
IP address blocks: 139.64.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:8f:c0:a0:ff:bf:f1:a7:6e:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=bad082f6-30fc-4ce1-84a5-f0613426120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:4c:60:4d:0c:e2:7e:41:19:25:60:89:d4:
44:96:d0:28:8f:03:02:41:42:60:53:1e:0e:46:c5:
72:30:d9:77:62:2a:50:15:ae:0f:53:1f:ff:db:3b:
c8:c5:ff:54:ca:db:f4:80:51:36:f2:f0:38:fb:f2:
f2:30:81:c7:13:1b:5b:69:d2:b6:8a:d3:b2:29:7b:
40:11:7b:74:53:9c:72:39:16:30:d7:9e:42:e8:ff:
84:da:7b:79:dd:b0:7d:ce:6e:cc:a5:58:5d:fb:86:
e2:c6:b7:8a:fa:1b:65:f4:60:7d:67:04:ca:11:5f:
64:ca:50:58:e2:ae:0c:30:c1:47:a6:3b:25:e6:a2:
db:8c:fb:84:86:96:64:d3:37:c5:3d:a4:84:05:9a:
68:27:cb:d2:2e:b0:61:e6:84:3c:d7:f9:ad:7a:53:
8d:e2:5c:5b:be:76:d5:8a:8a:96:b5:61:50:b0:f5:
e6:ba:a8:26:13:1a:3f:9c:a3:a7:db:cd:8a:7d:0d:
26:a2:99:f3:60:05:09:6d:6f:24:67:bd:70:6e:01:
68:7a:ec:dd:bb:52:30:2c:e0:3c:1d:0a:ad:f9:4b:
65:ea:1e:a0:0c:f7:67:dc:a8:4e:01:80:e0:6b:55:
f1:a9:15:0d:ee:e0:37:a3:ac:d1:b2:d4:b4:b9:9f:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:36:17:E6:56:90:8D:69:BA:61:22:B8:8C:83:4C:12:92:1B:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
X509v3 Authority Key Identifier:
keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ba:f2:91:da:b8:5b:be:1f:00:aa:47:39:d1:61:a8:29:96:
ec:2c:79:aa:30:56:9c:cc:7b:6b:da:53:03:3c:34:fb:e4:39:
74:35:7e:94:a3:0d:b2:65:8f:aa:97:b7:56:14:94:aa:6e:ea:
58:1f:4c:0b:fb:0e:9b:f6:b9:c4:53:1a:80:97:7f:93:da:41:
f4:bd:ef:68:64:c9:2c:64:28:9b:bc:88:64:2a:b2:e8:a3:c6:
10:73:4b:2a:7e:03:df:4c:bb:58:56:bf:28:24:8f:a5:7b:47:
4c:8f:68:22:ad:b5:b2:66:93:46:a7:a2:78:e9:64:b3:2f:7b:
d7:52:39:13:e4:90:f3:23:26:bf:1f:71:fb:58:ce:f5:17:14:
b2:8e:de:ea:ce:fc:d3:37:43:2a:c8:40:cf:1b:7a:42:42:e4:
fe:7a:ee:b9:df:33:93:d4:33:a0:5f:29:e8:b0:07:18:92:5f:
d5:29:57:e9:c6:21:b9:f2:05:e9:4d:66:03:0e:41:d1:12:fa:
67:d0:d8:d9:8e:32:a9:78:34:0d:ad:23:87:56:4a:ca:b7:db:
1b:82:23:30:f4:0f:69:ad:02:54:b6:25:9e:04:6e:c2:95:b4:
9f:3b:b7:7e:66:bc:69:64:93:fa:2c:f6:46:56:3d:e2:60:7b:
5d:73:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:20 2025 by rpki-client on console.sobornost.net