Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
File: 986a09c5-c446-31e2-b844-f4d9fef307f0.roa (raw, json)
Hash identifier: ZNHDlxvdA3NGSzAYqIHgbqJlzRQ2zRBBtAalrGW6YZg=
Subject key identifier: EE:E7:57:8B:DA:6F:57:5B:0D:87:BB:94:A2:D4:80:C4:FD:70:D1:29
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848811B0FAC5181E7AC86FAE380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 55286
IP address blocks: 23.26.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:0f:ac:51:81:e7:ac:86:fa:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=4355f966-9a17-43fa-8ac3-9b31ac5cdafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:8c:8a:eb:f5:7f:72:0e:8d:a6:d0:30:d6:
a3:ba:a8:fe:85:26:8e:4f:a1:26:d6:5e:e6:f7:87:
2f:da:f0:92:6c:82:9b:85:a4:92:2d:27:66:ef:18:
48:63:5d:c2:1c:c2:ae:90:fb:cd:a5:be:5b:17:d6:
18:29:20:eb:6b:36:0c:4e:b1:00:81:f8:34:55:c5:
25:85:c4:b4:0c:3b:42:ec:ab:18:b9:7d:ae:7e:e3:
9b:5c:41:64:e2:0d:73:97:b5:68:cb:37:24:08:37:
18:e5:ef:ca:01:61:1d:57:73:bc:fb:6b:ad:07:1c:
5b:14:0c:8d:9f:3e:b4:c7:ae:9f:88:70:a0:8b:c9:
5b:81:2a:1c:ff:72:b1:3d:3e:ad:93:08:c8:79:30:
34:66:b2:0e:98:ac:8b:89:c4:c1:10:f0:2c:c5:ac:
86:4c:97:c5:4b:cc:86:7a:e2:0d:0e:b0:a9:8d:7c:
39:39:55:4b:3f:15:d0:8c:42:13:0a:93:df:53:01:
10:54:15:56:d1:04:83:5e:1c:c9:68:0f:97:b6:4f:
14:34:c3:90:3c:a1:f5:83:e9:71:d8:a2:a7:e0:4d:
cf:17:90:ad:b9:dd:df:d4:80:69:84:7e:8b:f5:8e:
34:9c:fc:0a:a4:09:40:88:80:b2:cf:af:ed:8c:de:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E7:57:8B:DA:6F:57:5B:0D:87:BB:94:A2:D4:80:C4:FD:70:D1:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:99:79:51:b0:da:6d:45:c5:f2:80:d9:3a:7d:85:c8:ef:f1:
61:21:d0:5f:0d:48:bd:61:01:a7:dd:d2:c3:64:a9:8b:99:6d:
0a:95:b0:9c:2e:f1:29:f3:2b:7f:c2:74:37:d6:91:9a:d9:06:
f6:9e:90:be:bc:93:b7:35:1e:7e:1d:52:84:4d:27:25:36:0a:
2d:ab:e7:cf:82:c8:44:87:1d:8a:ad:e3:06:ba:37:77:f8:1e:
3f:25:02:0b:ab:4c:62:58:08:6b:f7:ae:6a:32:cd:d6:49:e1:
82:dd:11:5a:cf:55:f0:bf:2d:a1:b5:2b:57:89:aa:9a:43:e5:
4d:3c:82:d2:32:a5:0b:4e:5a:6c:58:4b:46:70:f9:59:94:f0:
f7:de:6a:72:16:da:02:35:0e:75:07:f2:d6:1e:97:9e:c4:2d:
c0:dc:1b:da:ea:56:51:ed:e9:18:07:72:35:06:f8:05:61:73:
b8:a4:33:cb:b0:7e:20:08:7f:74:63:e9:c3:56:a5:ba:0b:97:
57:0a:41:43:41:f6:84:e3:93:8b:d6:28:e4:cb:93:9b:2d:71:
82:c0:89:cd:66:09:f6:22:74:8f:a6:70:5d:f5:c6:5c:41:b8:
89:0c:20:df:73:9e:8c:b0:b4:f2:0c:17:c2:f4:b2:6a:74:bc:
5f:67:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:13 2025 by rpki-client