Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa
File: 42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa (raw, json)
Hash identifier: KQ/qF6s6UQE9+UvlpeP/zXVShLzasAhewAlcU51o7OE=
Subject key identifier: 80:C9:B7:BA:0F:FA:23:61:65:AC:0A:E7:54:DA:FE:F8:E0:9B:33:EA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480214F22BDB6E75ABC985D140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 19786
IP address blocks: 23.26.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f2:2b:db:6e:75:ab:c9:85:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=88594e79-46ea-486a-884a-581bce5a3673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:66:38:cb:4c:d1:26:e3:4a:2e:7e:97:ee:
2f:e9:83:8d:77:45:2b:2d:35:12:13:35:09:9c:56:
e3:c5:5b:f2:1b:e9:2c:62:b0:9a:22:92:6d:c9:64:
00:e2:e0:73:7f:ae:93:ad:75:e9:de:d6:03:b7:9f:
78:f6:c1:23:4b:93:83:be:a9:5d:80:5a:a8:97:f5:
3b:90:c2:ba:c8:29:08:16:00:64:a8:05:c2:30:83:
2b:1a:5f:7e:f0:8d:e6:6e:30:7b:e7:ef:00:ea:32:
73:3f:9b:10:0e:f6:7d:5a:d4:ab:5e:a7:9c:dd:6d:
4d:26:69:b4:4d:62:a9:a2:e6:5c:38:c0:2d:7b:b2:
e1:a5:3b:f8:0d:6d:75:ba:22:c6:c7:4f:88:72:18:
49:4c:e3:e3:bf:e1:40:70:26:9b:21:f0:f3:e2:0e:
ab:a9:33:c6:df:6a:2f:c8:55:28:ed:8d:c9:45:ab:
a6:c1:1c:41:72:41:ec:0b:71:27:3d:c4:10:c0:de:
c8:fc:10:69:26:70:9d:b9:9b:bc:3b:00:fe:58:48:
65:56:0f:7a:b9:97:44:9c:f0:25:96:10:ab:e4:85:
03:3f:8f:59:1c:39:60:50:75:d7:d4:91:5d:54:8f:
9e:bc:6c:b2:6c:a4:05:f7:ab:7a:0c:51:85:f4:59:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:B7:BA:0F:FA:23:61:65:AC:0A:E7:54:DA:FE:F8:E0:9B:33:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ce:b7:0a:17:0e:14:8b:30:89:c2:81:63:36:07:ae:11:2b:
06:c4:b6:62:ef:63:cb:0a:5a:fb:f4:53:9a:aa:aa:dc:94:46:
47:3c:e6:bd:d3:d7:8c:ff:b5:94:4f:68:4f:7d:6a:71:a5:27:
b1:6b:d3:95:74:03:b7:44:a8:fc:1e:95:49:55:5f:1e:5f:2a:
93:75:1b:f4:9a:09:83:0b:1e:ce:00:fe:c8:cc:26:c2:35:d2:
b2:e4:a4:e7:15:81:68:7d:f8:34:95:ee:13:a0:44:33:05:11:
53:97:2f:26:a4:3a:55:76:23:77:05:aa:3e:77:ae:da:61:9b:
30:e9:9e:9b:cc:e7:e6:01:cd:ac:4d:cd:4a:fb:03:74:41:ad:
d1:a8:69:fc:15:08:d1:97:3e:b3:07:fb:d4:ef:a7:ae:34:a1:
15:82:cf:63:16:98:d2:d1:7f:20:19:92:c5:3f:41:6d:7c:73:
36:2e:4e:04:bd:a1:ea:98:d7:fc:ce:a6:66:3b:ca:21:c8:7b:
00:1d:9b:e1:bf:4c:04:87:ca:55:2e:14:b6:b3:2d:4f:fd:fa:
93:81:a7:4c:50:5d:5f:18:07:4d:41:53:b2:64:78:17:f2:fe:
50:fe:ed:9e:b0:84:44:72:ee:e0:bb:53:2e:18:a9:2e:7e:eb:
2d:9b:13:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:26 2025 by rpki-client