Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
File: 40fa6496-0728-3f85-816f-def69dc3c4c1.roa (raw, json)
Hash identifier: Csa8jLqFe9H403q1gnlNxkXgolP/bAukY0vds+A6VRw=
Subject key identifier: 9D:F0:5A:FD:39:33:F1:0B:59:27:D7:D2:3F:34:52:85:BF:3D:F8:77
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487755DA961725BB8AAE40F040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 13737
IP address blocks: 23.26.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:da:96:17:25:bb:8a:ae:40:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=38c7b44b-401c-4672-b6fe-bd96df5fc198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:36:00:1e:68:4c:67:65:b9:4d:12:78:05:
84:7f:56:1f:f4:66:76:f1:24:04:d8:60:47:a9:33:
7b:69:56:df:55:cd:6e:08:88:9c:1d:5f:78:07:7b:
e3:3c:82:75:d8:8c:28:f8:5f:31:81:d3:0b:52:e2:
5e:fc:a6:2e:28:dd:19:7a:24:15:27:29:f4:61:61:
64:8f:65:cc:03:83:61:91:c3:90:3c:90:fd:b4:1f:
10:ec:9d:c6:03:a1:2a:20:18:da:b2:b0:5d:2e:fb:
5f:d3:b6:d7:6d:dd:fa:6f:9e:dd:a7:72:58:59:37:
23:54:4d:c3:39:c4:66:fc:1e:5a:0e:0e:1a:1b:70:
83:0d:d8:0a:de:39:14:b6:9f:74:9b:00:a9:60:6e:
06:75:a7:87:b1:fc:f9:37:39:4e:c1:8d:e7:fb:d0:
1d:3f:88:ff:51:5b:6a:55:14:be:e8:b7:1d:0d:d5:
10:16:b5:47:d8:81:c4:58:c7:49:cd:6c:7d:35:f0:
88:df:e4:e0:4d:8d:18:65:32:62:3e:46:55:53:a6:
0e:af:7c:dd:74:d5:8e:1c:5a:e1:4c:f0:32:2d:36:
2c:4d:66:3d:2e:2a:c1:3a:8f:ed:c6:5d:21:dd:50:
5b:47:82:86:28:3a:c1:71:1b:fd:a0:7d:9b:16:49:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:5A:FD:39:33:F1:0B:59:27:D7:D2:3F:34:52:85:BF:3D:F8:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:74:4e:5e:8e:67:e3:b8:75:ce:83:a0:60:ef:2b:ba:ba:c6:
50:11:13:0a:4d:80:84:f9:8a:54:f2:54:e6:a2:f5:e6:19:81:
2b:95:6a:b3:c0:4a:1d:98:4e:13:c5:4c:10:9a:67:f6:02:81:
4b:30:13:79:f2:e5:eb:48:9d:83:56:42:6d:48:80:46:0b:e4:
22:9d:53:3d:92:6d:14:cf:ba:73:d9:5a:a4:1d:c4:78:28:26:
2e:ec:d4:e2:8f:ce:1a:59:7c:cb:0d:36:de:7e:ac:26:4f:c1:
63:ef:db:1a:87:7c:c2:bb:80:24:58:fb:89:bf:1a:e6:25:7f:
c9:d8:c9:d6:38:e5:81:78:62:38:37:ed:60:58:99:48:39:56:
47:ba:b8:83:af:91:1f:9b:8f:34:15:40:70:5f:25:4b:f9:f1:
4c:c0:3e:b4:86:9c:e5:25:db:ec:15:89:b5:99:92:01:52:2b:
83:9e:bd:05:50:02:e1:70:03:b2:a8:e8:8a:31:79:89:d8:b0:
bd:ad:98:41:fa:20:71:ef:e7:a0:d9:ab:05:de:bf:da:c8:76:
02:be:07:99:08:89:f7:b3:8e:d8:3a:72:93:23:17:7f:94:4c:
12:d6:3e:b2:66:f1:26:b5:ce:73:00:2c:32:fc:31:f7:4a:15:
84:3c:b1:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdqWFyW7iq5A8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
MzhjN2I0NGItNDAxYy00NjcyLWI2ZmUtYmQ5NmRmNWZjMTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9k2AB5oTGdluU0SeAWEf1Yf9GZ28SQE2GBH
qTN7aVbfVc1uCIicHV94B3vjPIJ12Iwo+F8xgdMLUuJe/KYuKN0ZeiQVJyn0YWFk
j2XMA4NhkcOQPJD9tB8Q7J3GA6EqIBjasrBdLvtf07bXbd36b57dp3JYWTcjVE3D
OcRm/B5aDg4aG3CDDdgK3jkUtp90mwCpYG4GdaeHsfz5NzlOwY3n+9AdP4j/UVtq
VRS+6LcdDdUQFrVH2IHEWMdJzWx9NfCI3+TgTY0YZTJiPkZVU6YOr3zddNWOHFrh
TPAyLTYsTWY9LirBOo/txl0h3VBbR4KGKDrBcRv9oH2bFklD2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3wWv05M/ELWSfX0j80UoW/Pfh3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDBmYTY0OTYtMDcyOC0z
Zjg1LTgxNmYtZGVmNjlkYzNjNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxr6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKl0Tl6OZ+O4dc6DoGDvK7q6xlAREwpNgIT5ilTyVOai9eYZgSuVarPA
Sh2YThPFTBCaZ/YCgUswE3ny5etInYNWQm1IgEYL5CKdUz2SbRTPunPZWqQdxHgo
Ji7s1OKPzhpZfMsNNt5+rCZPwWPv2xqHfMK7gCRY+4m/GuYlf8nYydY45YF4Yjg3
7WBYmUg5Vke6uIOvkR+bjzQVQHBfJUv58UzAPrSGnOUl2+wVibWZkgFSK4OevQVQ
AuFwA7Ko6IoxeYnYsL2tmEH6IHHv56DZqwXev9rIdgK+B5kIifezjtg6cpMjF3+U
TBLWPrJm8Sa1znMALDL8MfdKFYQ8sTE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:20 2025 by rpki-client