Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa
File: bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa (raw, json)
Hash identifier: xE9kWB9tZrVGfmiqL+lN6p+gAGCfhXpMBIRoHslVMVc=
Subject key identifier: 46:61:89:31:51:7C:DF:10:E8:28:B2:61:57:DC:C5:F8:5C:FC:40:51
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489FD09F48999ADDF5AAC121F3
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 5065
IP address blocks: 23.26.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9f:48:99:9a:dd:f5:aa:c1:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=6dbecdda-c696-4968-8bc5-e4e7f6788bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:f8:60:df:0c:36:b4:68:d1:ee:52:fb:42:
8c:53:58:a5:9d:74:fc:4f:e7:36:4f:ef:3c:13:21:
b0:34:dc:f5:64:7d:ca:33:0d:53:19:2a:d4:79:26:
b8:ca:1f:00:7e:46:f0:e4:ec:75:a0:6e:ab:21:e1:
d0:52:17:de:7b:4b:ca:40:a9:c4:de:c1:2a:cd:e6:
05:fc:04:3e:09:ab:9a:11:55:25:1a:c3:60:d7:bc:
c5:3d:d6:9c:72:01:07:bf:d0:0c:a4:50:7e:c7:a3:
a6:b6:a6:be:7b:e6:39:f3:88:e7:1d:e9:3d:1e:5e:
a1:89:41:72:46:cf:63:b1:61:1b:ae:d2:75:25:85:
0c:3d:48:62:ce:a8:f1:ef:89:cd:3a:64:47:91:85:
b5:84:4a:07:ec:38:88:76:3c:aa:fc:ae:55:fb:7b:
63:f2:8c:7c:11:ae:9c:9f:5c:a0:54:02:b2:4a:d8:
0d:7f:33:b7:38:e9:59:31:27:78:14:0c:c9:7e:cc:
f1:b3:1d:c0:4a:20:00:f8:c5:ee:da:ef:7e:72:e0:
fc:a2:ef:82:24:e5:d5:68:02:0c:c6:0e:0f:c6:48:
a2:e8:9c:dd:4f:fa:77:71:57:e7:4a:17:68:2e:8c:
c5:71:62:db:41:05:7d:a6:09:ae:2a:df:8f:67:75:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:89:31:51:7C:DF:10:E8:28:B2:61:57:DC:C5:F8:5C:FC:40:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:4b:af:a7:55:d1:82:57:b1:ed:54:8d:38:06:e4:45:be:56:
47:66:28:9f:50:80:65:e8:b9:49:7a:c5:77:04:e8:aa:03:0d:
fe:2a:45:10:89:9a:7f:61:08:b3:48:ab:59:52:6e:84:bc:e3:
a2:80:7e:e3:d0:0c:92:74:6a:c8:6a:ab:6e:12:27:49:36:a6:
ee:b2:49:ef:6b:36:91:11:44:3a:d0:c4:45:50:11:ae:94:0b:
9f:15:3a:e8:d7:e2:b4:60:4b:20:fd:83:ff:8c:c4:97:95:f5:
79:ac:a6:d7:34:48:a2:6e:bd:0f:df:ba:d6:cf:62:6e:98:7c:
c0:a4:70:47:cb:9f:dd:e0:66:a8:ed:9e:de:0f:57:48:5f:a4:
46:ae:a8:57:f7:49:42:9e:08:11:56:cc:12:90:fc:cd:fd:8f:
98:af:c9:fc:40:4d:a3:99:f6:02:bb:e1:d6:d0:89:7c:aa:88:
a7:73:e7:a3:59:c7:b2:8e:49:5c:d0:98:bd:1c:1d:98:9e:d8:
db:99:22:60:43:62:d8:82:a2:61:44:97:ee:ff:49:18:bb:18:
03:ef:df:24:9c:4a:f1:58:eb:f9:ac:0b:74:37:52:5a:a0:ac:
5f:5b:25:11:4b:a0:39:a7:9c:67:33:56:d7:b7:74:2e:99:c2:
11:b9:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:33 2025 by rpki-client