Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d32c4bd5-100b-35aa-88a9-08186b00c518.roa
File: d32c4bd5-100b-35aa-88a9-08186b00c518.roa (raw, json)
Hash identifier: CW7Iue4G20cTGoLFs9BCu+kPE9RxbDUZeRiwsVNhTwA=
Subject key identifier: 00:CA:D6:C2:D8:EE:B4:E0:8A:A4:86:D9:45:70:01:79:B6:CF:35:B9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584832F04BC35513DC4EE450DA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d32c4bd5-100b-35aa-88a9-08186b00c518.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 395517
IP address blocks: 23.26.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4b:c3:55:13:dc:4e:e4:50:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=e61b71c6-e61b-4027-8c57-f389c4f6697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:73:4c:3d:1d:99:3f:e6:72:f1:5c:68:6a:
d1:94:44:f7:93:fa:e8:d2:b0:34:71:22:c3:ce:95:
b4:14:c2:c2:7f:c1:6c:c5:18:58:14:2c:b0:e9:63:
2e:c8:e8:ad:cd:c3:4d:18:b1:9a:63:71:de:13:5d:
ac:92:41:cc:b6:00:54:e7:4e:5d:ab:1f:91:4f:e3:
d9:06:39:f3:a8:1e:ad:94:c9:65:41:9d:61:67:82:
f7:15:bc:0a:2a:d5:c4:94:ed:32:42:13:54:7f:40:
ed:64:d5:fa:3c:c8:51:dd:9c:e2:0b:eb:0e:a9:e1:
63:d9:dd:eb:d1:e8:cc:78:09:ea:5a:6b:72:f8:4f:
aa:fb:8a:6e:de:04:66:2c:ea:a7:51:de:99:81:44:
85:c1:05:ed:d8:6e:72:bf:73:07:99:6d:37:d7:a8:
e3:4a:d7:56:95:a9:c3:cd:1f:2a:d6:86:53:0d:ec:
af:4b:2b:9e:c0:05:9d:3c:ac:fe:4f:f6:92:92:c8:
b7:8d:d6:33:57:5e:c1:89:23:2b:0f:d5:f5:8b:0d:
0c:19:a4:e1:29:0d:19:52:d2:d1:22:53:20:85:9a:
f8:a3:5c:77:bf:73:f9:c0:73:f1:3d:18:40:49:2e:
2c:2c:8b:4c:46:60:ec:e5:44:0c:41:fa:17:78:1a:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:D6:C2:D8:EE:B4:E0:8A:A4:86:D9:45:70:01:79:B6:CF:35:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d32c4bd5-100b-35aa-88a9-08186b00c518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:48:29:dd:6c:38:45:3b:c0:e5:88:15:8d:22:41:9b:9e:9c:
d9:3d:08:19:5e:df:b1:1c:23:f4:07:97:19:fb:97:49:94:d8:
bf:67:2b:e7:ad:34:2b:20:ef:fa:ac:aa:e2:68:70:92:cf:14:
cc:cc:64:48:26:81:66:ce:32:09:3a:74:42:32:e8:5e:9e:91:
c0:ff:28:6c:a1:81:fc:fe:a3:58:86:d1:d3:75:a9:a8:d4:43:
bf:92:27:fb:6e:1d:d5:56:3d:81:ae:37:17:13:dc:f1:33:3d:
fd:cd:63:10:87:e8:62:f0:0f:35:a0:30:89:92:f3:3b:1f:b5:
af:06:d3:c6:f3:bc:1d:06:6c:5e:9d:0d:1a:16:b8:38:85:0b:
94:dc:37:0a:77:3c:bc:29:e2:4b:0e:3f:69:1e:25:15:53:61:
0b:5f:fc:f2:26:b0:4c:d7:aa:c9:20:46:15:8a:ae:d4:a1:06:
43:dd:5e:1b:e2:16:83:5a:66:c2:5a:02:45:8b:c5:bf:ab:02:
80:ff:b3:1b:b5:45:f7:b4:49:ae:c3:c0:42:cd:e7:7d:43:72:
34:3a:f6:e1:6d:3d:13:09:56:3a:c2:2a:48:15:ca:85:bd:00:
c9:d1:a0:f7:ed:45:ec:44:64:1a:34:a4:9c:98:cd:42:97:20:
93:ea:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:42:20 2025 by rpki-client