Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa
File: 0af909ab-1156-3784-b0f8-10b7c8819074.roa (raw, json)
Hash identifier: n3kyYmOTxBh/uGdriPix/+GJaFmm+M4ksin/x2r3FVA=
Subject key identifier: 59:E5:12:91:E3:BD:97:F7:93:34:F9:43:C3:BA:5B:76:5D:87:46:6F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584886B06F59B432AE9B04136300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 137409
IP address blocks: 23.26.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:6f:59:b4:32:ae:9b:04:13:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=96cc029c-b4d5-4753-a105-da41e2d8a112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:36:9d:8a:96:75:cb:0c:fb:b4:09:69:18:
9c:b3:eb:9c:82:48:0f:c8:da:c1:8c:3f:1d:a0:80:
b5:f4:c5:39:8f:ab:f2:1f:0d:95:0a:85:41:6b:b1:
9c:39:f3:4a:35:d5:1d:31:4c:f2:e5:ce:59:7a:d2:
25:92:4f:b0:1e:68:0a:d9:eb:13:c3:b4:c2:c1:49:
29:d1:34:f9:d4:2a:0d:32:51:3e:cd:cc:1f:66:10:
f2:7d:77:ee:77:39:0c:4c:8c:d0:8c:7c:81:3d:7d:
ce:42:f5:9b:c3:36:ca:aa:41:ed:ad:81:fd:e9:da:
97:e1:c6:14:72:a2:3c:d0:23:af:0e:77:f4:49:b1:
df:0a:be:26:d6:c8:9e:4b:70:24:53:77:76:dc:88:
89:38:47:5b:b1:e8:38:4e:bb:10:63:05:20:eb:d6:
f2:32:53:10:a9:f2:3f:b3:be:7c:2a:d2:04:0f:33:
6b:4b:6b:90:ad:32:21:ba:65:3e:c7:3c:df:31:ae:
a7:38:50:da:13:c9:fe:ff:98:98:87:03:f3:5e:ac:
de:d6:94:bc:ba:63:1d:89:bb:3d:b8:c6:6b:34:ab:
6b:dc:b9:2c:e1:57:61:0f:3c:25:c1:64:c7:13:1b:
2e:d1:aa:8c:2c:e3:80:82:27:3d:6f:cc:5d:82:59:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E5:12:91:E3:BD:97:F7:93:34:F9:43:C3:BA:5B:76:5D:87:46:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:4e:5b:2f:21:37:09:46:32:c7:5e:e9:91:4b:69:1e:2c:08:
42:e2:1c:5a:b0:d8:07:34:7f:0e:6f:8f:1a:c2:fd:3b:d7:a7:
c3:6c:8b:62:84:46:dd:6b:1a:47:99:f7:03:2d:b8:2b:bb:5e:
f4:b4:98:aa:c6:3f:03:2b:59:b1:4b:27:c8:d1:82:a6:87:42:
8b:6e:aa:fc:f3:22:9c:b9:be:c3:20:f6:aa:04:1b:d6:34:d7:
50:84:f6:32:e9:2e:4f:8e:cc:f1:30:67:02:9d:59:60:5f:33:
d3:59:57:fb:c7:e4:eb:40:85:24:18:e1:78:d0:ec:8d:fd:33:
54:7a:82:1d:7c:10:aa:7b:00:98:6a:38:f0:2a:4e:fa:73:94:
18:53:27:16:f4:68:4e:db:87:5d:78:26:8e:b8:b5:67:75:cf:
84:71:32:67:02:30:2e:f1:bf:4d:8e:d3:0d:a0:68:0a:06:78:
60:6f:59:73:69:cb:8b:61:f4:f0:9e:ba:c5:ec:d3:0c:2c:32:
96:5d:2e:a6:e5:2f:c6:4a:d5:2a:4c:9a:ae:75:d1:70:5c:81:
4e:8e:30:37:64:c5:cf:0e:58:81:ee:35:88:41:3e:aa:d5:23:
2d:2d:c9:39:a8:3e:fe:26:63:4b:cf:b6:1f:c0:dc:a1:a7:b3:
b9:dc:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:23 2025 by rpki-client