Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/958cec1c-5cc9-3baa-8d14-326e6895b705.roa
File: 958cec1c-5cc9-3baa-8d14-326e6895b705.roa (raw, json)
Hash identifier: PZ40lm7aRBYvBiPkQKBFGCDuSD6PeM+T7i8BO03WEVo=
Subject key identifier: 40:29:9E:20:50:46:88:91:B3:B3:36:EB:56:38:5C:BD:49:B1:ED:11
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B2D81921D34FF202C0A1C000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/958cec1c-5cc9-3baa-8d14-326e6895b705.roa
Signing time: Tue 28 Jan 2025 21:36:11 +0000
ROA not before: Tue 28 Jan 2025 21:36:11 +0000
ROA not after: Mon 28 Apr 2025 20:36:11 +0000
asID: 11798
IP address blocks: 23.26.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:d8:19:21:d3:4f:f2:02:c0:a1:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 21:36:11 2025 GMT
Not After : Apr 28 20:36:11 2025 GMT
Subject: CN=4eda784b-a4d9-4293-97c3-38c561d6ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:e7:ba:28:82:61:18:24:43:30:06:52:70:
8f:0c:0b:08:67:b2:b1:b9:17:c6:27:c5:17:76:77:
8d:2e:95:ad:62:3b:c1:26:88:36:98:e4:31:9d:f7:
bc:17:af:6d:41:15:5a:7f:90:95:84:95:70:83:aa:
1f:fd:5f:b1:36:5d:a0:87:f3:df:fc:87:e8:a6:88:
5d:cf:d1:d2:02:f6:05:dc:0e:43:ae:82:7c:17:9f:
a7:2b:2e:9c:7d:4e:da:29:66:80:ff:ac:07:61:d6:
16:b0:9a:56:fc:29:e5:fa:e4:a0:7b:46:af:56:fd:
11:bd:c6:90:8e:06:39:70:40:35:17:dd:e3:ee:5d:
70:8c:fb:9b:a9:6b:02:48:1c:01:22:b6:42:f0:88:
4a:cc:65:55:78:a8:ed:18:e6:05:25:fb:f6:b8:96:
f6:2c:7d:51:f5:53:2f:af:c6:22:0a:cc:04:b5:c2:
bb:fc:de:f9:ad:68:45:59:f9:93:10:48:9d:6c:67:
b2:e1:39:2d:91:93:f2:84:98:60:7d:46:89:29:8f:
b3:f6:56:5c:7d:76:8b:70:62:b6:3b:10:06:09:a8:
05:73:9b:ec:d6:7c:d9:3c:15:e5:cb:da:0a:48:f6:
ce:ac:56:1e:13:d4:d9:7c:6a:f1:91:06:e7:d3:4f:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:9E:20:50:46:88:91:B3:B3:36:EB:56:38:5C:BD:49:B1:ED:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/958cec1c-5cc9-3baa-8d14-326e6895b705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e4:e5:46:40:c4:9a:53:82:a9:b9:62:4a:b5:07:03:48:1f:
58:32:1d:6c:f0:b9:d6:4f:0c:09:9c:3b:a0:91:af:62:ac:62:
7d:96:fc:05:5e:01:3e:74:d1:31:94:cb:2f:f6:16:c9:a2:86:
8c:6e:b1:21:72:43:88:e2:2d:3e:26:0c:42:11:b4:cc:92:1d:
7b:47:50:4f:88:f9:e5:20:f1:51:a7:d7:35:96:28:df:d9:86:
9b:0e:e0:ac:7e:dc:d8:02:72:a7:ab:a7:b3:51:e3:96:5b:08:
92:f1:ea:f1:e6:a2:f3:60:5a:63:60:de:bd:c8:e2:6c:32:f1:
53:73:8a:19:54:5d:83:6f:f3:5b:29:03:cb:ba:e7:db:42:0c:
92:24:3e:09:a4:5f:09:8d:6c:1e:14:7f:5c:ca:9c:48:1a:13:
68:d7:b7:99:1c:76:22:27:d1:41:bc:b7:03:9e:62:fa:b3:28:
44:dd:2a:d9:7d:4c:4d:4d:45:b1:aa:96:56:1d:f2:d0:5a:e3:
8c:88:03:e2:ae:aa:16:d8:05:66:8a:58:ce:29:6b:88:a1:bf:
7f:a5:4f:5e:63:7a:64:1f:12:f3:76:61:04:53:66:d9:f4:a2:
16:71:dc:d3:3f:94:35:d0:36:ba:76:18:1a:25:98:e5:6b:7f:
06:71:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:42:14 2025 by rpki-client