Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b097bdf-8dba-3483-bc64-2e1a1884181c.roa
File: 3b097bdf-8dba-3483-bc64-2e1a1884181c.roa (raw, json)
Hash identifier: QpAq/xq+zqCJL/IiJ4EwnoR3Rs+72qg1YSRFqwENOOg=
Subject key identifier: 19:66:0F:99:1C:6C:46:62:80:EC:83:85:3D:64:19:00:95:44:4D:80
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584886B06F448F4E308268E4BDB0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b097bdf-8dba-3483-bc64-2e1a1884181c.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 212238
IP address blocks: 23.26.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:6f:44:8f:4e:30:82:68:e4:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=2606587f-21a3-4820-be0b-6b160fd4276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:ac:da:e8:85:60:a0:54:54:60:f2:22:f8:
b1:d8:52:b5:d8:81:5c:59:a6:bb:57:25:43:f5:82:
10:4b:a6:b9:d9:6f:04:e7:4b:8c:78:2c:8f:85:0b:
ee:46:28:12:d5:08:09:33:c4:af:09:d3:a4:a5:ad:
d1:1a:3f:82:da:1d:79:b6:77:46:25:e7:19:d8:5e:
aa:16:94:24:69:ca:1b:5b:2c:85:6f:52:c9:dd:a0:
54:8b:59:29:0d:4e:b2:4f:9f:82:0e:00:5b:32:3b:
81:0c:a6:63:15:8f:ef:fa:5a:ca:05:36:3d:83:3b:
f0:dd:ac:3c:13:f0:05:60:84:cf:d3:c9:c2:55:16:
e4:c6:36:61:a4:67:e4:dc:1e:37:8c:27:29:a0:9d:
da:d9:7c:ce:d5:d3:2a:47:66:45:3e:fd:1b:79:3f:
83:b0:01:1d:9a:db:39:5f:b7:5a:e8:e1:0a:d1:29:
0d:82:f3:a2:56:36:79:da:b8:a5:98:b2:b5:03:27:
e6:a5:3e:78:b5:8f:0f:c4:ba:18:3a:af:23:c0:b5:
95:53:20:23:f1:73:5f:06:1a:ec:d9:0c:a0:98:ff:
37:e2:aa:c0:b0:cd:a5:99:96:33:46:ef:3b:30:4f:
1e:30:f0:65:84:61:46:b8:76:2e:b5:84:f2:dc:9b:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:0F:99:1C:6C:46:62:80:EC:83:85:3D:64:19:00:95:44:4D:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b097bdf-8dba-3483-bc64-2e1a1884181c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:32:fd:7a:73:db:79:59:89:05:b8:f2:f0:be:05:dc:62:8a:
36:9c:46:88:2f:88:a8:9b:e8:53:52:5c:48:82:17:33:11:75:
57:3d:a2:d8:af:15:cc:54:43:be:2f:8c:97:47:f1:69:76:83:
51:19:55:da:92:52:e8:44:a0:0e:f4:f3:24:5d:ce:8a:90:9f:
aa:87:9c:91:a5:8b:42:62:06:41:3c:46:39:a7:20:65:0a:d4:
2a:e8:06:3f:48:76:1e:dd:f4:9d:81:67:28:61:13:b2:7e:b1:
42:b9:6d:e4:bc:1b:79:31:d6:9f:21:27:15:ec:d2:f4:e7:21:
a0:2c:0b:55:ac:10:44:e5:6a:16:aa:3e:f1:16:2e:88:99:71:
b0:02:be:48:fc:5b:e7:0a:fa:6b:5d:a9:86:e1:25:a1:17:59:
37:e0:aa:42:94:77:80:0b:5b:d5:a9:f1:9f:c7:15:4b:1f:5a:
c8:37:ef:9d:a9:5b:e8:6d:c0:83:d2:df:43:b1:ff:3c:a8:6f:
04:42:8a:a4:a1:ab:c1:c2:a7:59:a9:22:ef:7d:94:27:2c:4c:
b4:7b:09:4e:14:c3:63:ca:a0:2b:9c:88:78:29:0d:64:6a:76:
37:ef:9d:8e:68:ae:75:74:e9:9b:13:ab:20:d8:fa:32:d8:16:
20:49:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:01:34 2025 by rpki-client