Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
File: 797d70cd-0bce-3b21-b178-5af624a6a1ec.roa (raw, json)
Hash identifier: xsOAcy6VX3PasqGbaArMzwYUjM/NVndfdBQMEgEnlBk=
Subject key identifier: 07:3C:0A:CD:D0:38:48:63:6E:CC:D9:9A:00:40:FD:E4:38:E3:5D:60
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F802AADBD5786A40362EAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 210542
IP address blocks: 23.26.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2a:ad:bd:57:86:a4:03:62:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=4ce09fc4-9897-4730-ad75-d54d0c4cffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:d6:76:da:7e:fe:4c:71:5d:5a:e9:7e:36:
f2:14:8f:77:9d:4d:e5:c2:1c:6a:a1:54:bb:2a:bf:
89:6f:be:86:d2:62:37:2e:80:82:7f:59:86:ac:7f:
05:55:99:22:18:f0:d8:8a:6a:79:a2:9d:f0:4f:5a:
7c:c8:fc:d3:46:82:40:0d:c4:8a:ad:eb:b4:ab:5d:
67:45:ca:85:d9:60:d0:97:b0:a9:5b:a3:a5:82:24:
8a:47:4f:28:5b:50:fd:da:92:05:e2:72:f5:0d:c4:
a7:1c:13:99:3e:85:46:ee:4f:9d:9b:1b:61:93:e1:
c2:ff:2f:c0:f1:14:a8:cc:a4:ce:c4:62:5b:b4:ee:
95:cd:13:03:b6:62:11:b1:36:ed:7e:c1:aa:af:95:
7e:4c:ea:b9:9a:de:7b:ff:55:38:79:2d:63:03:be:
fa:e8:5d:23:36:b9:0e:83:54:5d:86:53:74:10:ba:
9f:1e:0e:90:c7:62:d6:46:ac:c2:be:86:5c:82:2f:
c1:82:fb:01:30:4c:03:e9:92:fd:bb:7e:5d:40:77:
d2:87:81:f4:a6:95:e3:6a:c3:1b:6f:70:43:b2:e3:
52:0a:69:db:49:2e:52:c9:81:75:c8:b0:93:12:ff:
c1:68:90:fe:47:0a:aa:1c:dd:c8:b4:cd:40:74:3e:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:0A:CD:D0:38:48:63:6E:CC:D9:9A:00:40:FD:E4:38:E3:5D:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ef:22:6e:2b:22:83:94:04:da:0b:4c:9e:0e:72:ac:02:73:
c9:6a:c3:d9:84:03:24:b4:d9:fe:ec:ae:84:34:c8:1c:98:01:
41:da:1e:92:53:83:4c:bd:4b:a4:41:c6:0e:dd:e0:e3:ce:bc:
4e:52:13:fc:7c:48:75:31:e6:80:ed:e5:ec:1b:3a:06:89:eb:
e5:ab:2f:bb:03:ba:69:c9:b8:22:35:fb:6f:b6:ba:3f:ae:de:
39:28:ca:29:6d:ab:e8:d7:1f:82:54:e8:18:6f:22:cb:85:b6:
7d:f5:9c:56:aa:8d:ee:bb:43:50:0f:86:e3:c5:ff:c2:6b:bd:
e1:e7:f2:32:1d:80:38:42:90:10:ce:c9:27:a0:b4:d3:df:5b:
9a:9e:de:58:07:f1:a8:c1:e9:aa:9a:8a:04:63:8b:90:fe:5a:
68:c0:60:b0:00:8e:dc:71:26:d1:e1:fd:41:75:f1:3b:e0:89:
70:79:a1:9a:b9:be:40:ba:b2:22:cd:85:9f:f0:14:47:46:90:
bb:3e:62:7e:a6:8c:b8:4c:2d:c5:6d:07:85:f0:ba:52:69:00:
56:23:63:26:4d:e5:20:7d:d9:66:07:67:50:c3:ce:60:ba:70:
4c:22:82:70:c5:fd:e8:00:48:45:03:c0:2d:b7:90:da:88:51:
00:c0:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:52 2025 by rpki-client