Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d391f29c-b17e-3adf-a402-f2909f0cf37f.roa
File: d391f29c-b17e-3adf-a402-f2909f0cf37f.roa (raw, json)
Hash identifier: 7dwV4DkCCeAjR+1r+8nPyx41NKLHc7T634KdQit4haw=
Subject key identifier: 5F:F5:1F:52:BF:16:02:1B:54:3B:51:62:EF:D6:EC:87:8B:4E:28:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480645074E19EDC4049CDB5BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d391f29c-b17e-3adf-a402-f2909f0cf37f.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 23470
IP address blocks: 23.26.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:07:4e:19:ed:c4:04:9c:db:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=2219b84f-d495-4917-a55c-528ed0089e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:96:26:dd:7a:25:02:b2:40:37:9b:49:62:
3f:ff:c0:b6:eb:9a:13:6e:db:42:7e:5f:dd:d8:75:
26:03:e3:1e:f2:0c:4d:a3:ce:a3:06:c9:2d:1d:50:
41:79:66:e6:a8:3a:7f:f2:ca:c2:f8:38:fe:c4:77:
3d:17:07:88:6e:89:28:9c:fe:fb:c2:31:1d:3e:26:
cb:b4:f6:b8:76:8b:42:6b:7e:7f:ee:79:95:e1:84:
c0:c3:ab:cd:c0:bf:19:6e:63:13:eb:9c:73:18:89:
b3:e7:3b:49:42:f2:78:ae:cc:4b:7d:26:e2:a0:be:
3b:66:34:49:3e:9f:00:de:3d:2e:fa:85:bb:af:56:
bc:29:39:f8:cd:50:c8:cb:d3:85:38:b9:84:5d:b7:
fb:e0:53:47:53:29:34:f3:99:2a:ad:06:98:f2:9f:
83:30:56:52:b4:63:a1:6e:89:8d:f4:d7:c4:2c:cc:
e8:28:67:73:ca:88:2e:4e:36:d0:29:07:32:cb:5d:
b1:df:a6:89:1c:00:60:b0:b6:ce:75:9b:14:f3:02:
0d:50:27:63:db:f7:84:e8:79:6f:d9:b1:2f:20:97:
d3:08:70:d3:22:97:92:2f:7f:9c:56:e7:19:ee:cf:
aa:3c:95:b1:8f:0c:26:4e:22:52:78:ea:27:a0:70:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:1F:52:BF:16:02:1B:54:3B:51:62:EF:D6:EC:87:8B:4E:28:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d391f29c-b17e-3adf-a402-f2909f0cf37f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:b9:1d:18:e3:38:7b:36:fa:c1:0a:a7:ad:14:a2:25:f6:d3:
14:97:02:38:ae:05:90:80:11:55:53:82:97:28:a8:65:26:21:
3b:b6:67:15:fb:22:b0:40:d6:ce:7f:85:11:de:38:2b:ca:21:
96:38:4e:a9:40:60:3c:f7:19:9d:5b:d1:77:e1:d2:a3:69:25:
87:35:72:92:a5:e3:c4:14:bf:ee:52:e5:23:9c:ce:f0:5d:c4:
94:7b:91:e1:8f:5b:66:16:3e:7a:c2:7e:4d:82:87:1c:66:5a:
22:61:9f:ea:6c:00:a4:07:12:15:a9:7e:de:24:7f:8a:40:f7:
83:ce:da:92:6e:48:e6:6f:54:f3:63:f4:09:86:10:be:2a:c3:
64:c6:5e:fe:26:e2:ca:d7:0c:ec:10:25:f4:c0:ff:cc:51:7b:
b7:59:81:a6:7d:3e:f7:ce:36:5d:28:d3:50:c8:bd:fe:70:fb:
70:94:e8:94:e9:2f:56:97:66:dc:78:fc:7a:87:69:be:bd:6f:
0c:ae:6b:32:27:54:19:9e:9d:14:9e:0d:db:b8:47:ec:17:95:
ef:85:45:9f:e9:82:79:ba:dc:ea:95:90:c6:b2:73:d4:c3:34:
f6:af:bc:20:b6:d7:78:1a:f5:5c:73:39:ef:7d:d6:7e:b7:a6:
bf:fa:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:58:52 2025 by rpki-client