Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8659a91e-15fa-38a9-967d-7de0b4c87571.roa
File: 8659a91e-15fa-38a9-967d-7de0b4c87571.roa (raw, json)
Hash identifier: vkO4F28q0nAmWH1XzdblPBFi6ZR/qMB5VVmNOqkPgYg=
Subject key identifier: EC:36:C9:7A:28:89:BD:2E:EB:78:12:84:45:AB:DA:8F:04:37:49:73
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B2DFA872A22C166B79777200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8659a91e-15fa-38a9-967d-7de0b4c87571.roa
Signing time: Tue 28 Jan 2025 21:51:25 +0000
ROA not before: Tue 28 Jan 2025 21:51:25 +0000
ROA not after: Mon 28 Apr 2025 20:51:25 +0000
asID: 401152
IP address blocks: 23.26.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:df:a8:72:a2:2c:16:6b:79:77:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 21:51:25 2025 GMT
Not After : Apr 28 20:51:25 2025 GMT
Subject: CN=fb0897d2-df56-41eb-b98c-726ecad43e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:f1:76:4c:1f:f9:0e:cd:a1:50:66:79:f9:
40:ca:ad:02:a6:e2:ab:84:52:da:d8:b7:c5:27:dd:
2c:4f:e2:8b:1f:29:71:72:4e:d2:00:fe:f2:0a:cc:
87:31:20:d7:04:d2:31:5a:17:ff:ca:04:4d:99:d1:
a1:17:65:23:23:f4:80:c1:aa:7f:a9:0a:cc:a3:84:
7c:5e:04:44:c1:ea:05:6e:3c:88:a1:ca:48:df:81:
09:22:ee:b5:36:31:1e:e9:e9:08:01:2c:45:e1:ac:
88:03:a2:2f:ab:37:52:75:26:77:88:9f:f6:bd:65:
a8:b0:08:d2:df:2f:1d:89:8b:a6:65:19:69:9e:09:
e0:2d:37:4e:ec:b9:d2:ba:d7:8f:44:87:42:1d:05:
92:e9:1a:02:89:b0:eb:23:c5:21:08:d5:7c:f0:9b:
64:1f:30:eb:1e:35:5a:f7:2d:d6:cf:47:00:dd:e3:
e1:b7:fe:4d:2d:2c:04:f3:c6:ac:a4:ea:80:fe:6b:
08:d5:13:bb:1c:af:bf:82:f2:c2:cb:a8:a3:2c:4c:
2a:2f:2d:02:0e:75:8d:79:87:52:e0:63:b8:60:0e:
b7:23:39:ce:51:15:07:f9:26:ce:92:12:df:80:b4:
8c:76:3a:71:69:eb:6a:8f:7d:7d:ba:9c:e2:f0:34:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:C9:7A:28:89:BD:2E:EB:78:12:84:45:AB:DA:8F:04:37:49:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8659a91e-15fa-38a9-967d-7de0b4c87571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:01:ea:8e:d8:02:46:3c:8d:0a:ef:6e:73:16:6b:9b:82:94:
0e:26:e7:9f:67:89:a0:51:17:fd:ea:93:28:87:72:21:06:90:
f0:7f:b4:1c:0a:a8:df:2a:20:10:2d:a2:d7:91:09:0e:a7:2e:
13:7e:a6:cf:99:33:0a:08:df:c7:c4:60:bf:1e:69:a0:e1:ce:
d3:73:45:c0:ae:77:68:be:fe:0f:16:74:de:9b:4d:38:03:a9:
56:4c:2b:4e:47:63:83:2d:7c:62:dd:04:29:40:8c:88:de:01:
28:c9:ba:39:88:38:57:90:ec:a0:0f:ab:50:70:32:8c:8d:a7:
9c:f3:02:18:12:b0:6d:cf:a7:c2:d9:67:2b:ef:a8:3c:5a:24:
4d:39:8f:4e:f2:fe:e3:56:1c:30:c4:39:02:02:51:88:6a:e4:
f6:1d:cd:4e:d8:01:29:e6:0d:94:81:1b:2e:dd:28:fe:e1:63:
0f:32:b3:d9:e7:76:db:3a:64:2d:1e:f1:d9:ea:cf:6c:41:89:
6b:4b:02:ba:a4:66:d8:82:68:36:28:7f:11:64:b9:b7:e1:df:
7c:76:c6:1d:9f:89:bf:a7:0f:72:02:28:79:bf:5f:1c:c8:4b:
52:2c:b5:90:d6:35:c6:54:08:fa:7e:62:7e:16:cd:a0:5d:c3:
aa:3f:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:30 2025 by rpki-client