Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a7f01a7-f704-3abf-a8ae-f6cf03537779.roa
File: 2a7f01a7-f704-3abf-a8ae-f6cf03537779.roa (raw, json)
Hash identifier: IhGRCyrQ1OIBvv6VYjfhtI1sCK8FfnJulBoHkSbrwI0=
Subject key identifier: E1:8D:CF:03:81:B7:5B:88:2B:67:43:F9:C7:90:1F:B9:27:94:42:6C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C41B82091989E60974052840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a7f01a7-f704-3abf-a8ae-f6cf03537779.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 13760
IP address blocks: 23.26.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:82:09:19:89:e6:09:74:05:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=8e2e5c9e-ce7e-4d7b-ab42-b10b0f593cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:3e:d7:6a:08:1f:96:c4:59:bd:6c:24:f6:
ae:c5:65:3d:de:67:47:51:00:83:a5:b4:1d:6d:d0:
7d:9d:ce:73:0f:12:27:6d:1d:a2:20:e5:59:97:a7:
da:6c:5d:a4:51:84:5c:07:ee:ed:95:1a:58:ab:5b:
76:0a:3a:c0:c4:62:3a:a9:5d:ec:57:4d:5e:a5:7a:
1c:bf:7f:ff:bf:3f:27:2c:89:64:59:fc:9e:1e:0d:
6e:2e:9a:6a:2c:b0:96:e8:b0:23:d3:67:60:0f:57:
4b:25:ec:21:3e:be:91:13:1a:f4:6e:04:eb:78:25:
2e:61:67:70:67:47:56:de:8f:0c:15:b8:26:7e:53:
40:95:0f:a0:1e:a8:1c:8e:24:97:d1:7c:a1:43:2c:
fd:b2:6c:54:b0:b9:d6:c0:64:a9:76:da:24:8a:22:
58:a0:ea:68:65:bb:9c:e8:01:26:2f:06:80:77:53:
fe:09:11:98:0a:96:d9:b3:17:eb:d1:0a:52:6b:79:
98:ec:a6:8a:70:7a:6e:4a:c7:c5:96:fc:f3:fc:3e:
a0:6d:a9:e4:f2:35:4e:0d:a6:7e:7e:84:9f:13:2e:
42:d4:01:81:03:75:88:63:67:9d:3d:96:66:e8:4d:
f8:ea:b3:b5:d0:d9:c2:d0:fe:7a:89:6b:84:27:51:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8D:CF:03:81:B7:5B:88:2B:67:43:F9:C7:90:1F:B9:27:94:42:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a7f01a7-f704-3abf-a8ae-f6cf03537779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:d5:f3:2e:e3:a5:a2:f5:75:30:00:53:46:e5:5c:02:b7:8a:
4b:9e:56:88:ed:e2:4b:78:06:96:19:17:ed:1f:db:3a:ce:56:
01:7e:eb:7c:28:c1:8b:3f:c7:bb:1f:ab:ad:08:8e:b1:9e:0e:
3c:4e:1f:2b:f7:35:31:52:21:58:0d:f2:d5:75:f0:1b:d1:af:
79:d5:e3:1e:36:6a:12:65:b4:c0:3c:fb:ce:49:05:b8:9a:7e:
69:26:70:b2:5b:6d:12:c4:b0:24:86:c3:6e:6b:e6:35:35:97:
b5:cd:37:da:74:f8:5f:31:b1:7c:d5:16:a4:27:5b:cd:ea:00:
c8:f8:e2:24:6f:f3:87:61:9a:70:21:58:97:e7:6c:e6:ee:a0:
a3:73:91:ed:23:fe:59:05:19:31:0e:f2:ed:fe:3d:0a:71:c5:
01:48:19:12:57:a7:4b:d8:79:8c:42:af:d6:3c:19:cc:1d:7a:
6e:d3:d0:e1:db:ef:b8:9a:7a:8e:43:b2:15:4e:c9:ff:17:28:
69:5b:76:62:f0:0d:9d:bb:cf:68:1a:47:93:7a:36:93:64:d0:
cb:87:14:0e:ad:0a:e6:45:67:8d:ed:a8:89:42:93:c4:f2:f8:
65:82:2e:ca:00:fb:a8:24:71:bf:65:4b:90:21:30:c0:d3:92:
e0:d5:b5:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG4IJGYnmCXQFKEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk
OGUyZTVjOWUtY2U3ZS00ZDdiLWFiNDItYjEwYjBmNTkzY2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPU+12oIH5bEWb1sJPauxWU93mdHUQCDpbQd
bdB9nc5zDxInbR2iIOVZl6fabF2kUYRcB+7tlRpYq1t2CjrAxGI6qV3sV01epXoc
v3//vz8nLIlkWfyeHg1uLppqLLCW6LAj02dgD1dLJewhPr6RExr0bgTreCUuYWdw
Z0dW3o8MFbgmflNAlQ+gHqgcjiSX0XyhQyz9smxUsLnWwGSpdtokiiJYoOpoZbuc
6AEmLwaAd1P+CRGYCpbZsxfr0QpSa3mY7KaKcHpuSsfFlvzz/D6gbank8jVODaZ+
foSfEy5C1AGBA3WIY2edPZZm6E346rO10NnC0P56iWuEJ1EnRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGNzwOBt1uIK2dD+ceQH7knlEJsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmE3ZjAxYTctZjcwNC0z
YWJmLWE4YWUtZjZjZjAzNTM3Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKfV8y7jpaL1dTAAU0blXAK3ikueVojt4kt4BpYZF+0f2zrOVgF+63wo
wYs/x7sfq60IjrGeDjxOHyv3NTFSIVgN8tV18BvRr3nV4x42ahJltMA8+85JBbia
fmkmcLJbbRLEsCSGw25r5jU1l7XNN9p0+F8xsXzVFqQnW83qAMj44iRv84dhmnAh
WJfnbObuoKNzke0j/lkFGTEO8u3+PQpxxQFIGRJXp0vYeYxCr9Y8Gcwdem7T0OHb
77iaeo5DshVOyf8XKGlbdmLwDZ27z2gaR5N6NpNk0MuHFA6tCuZFZ43tqIlCk8Ty
+GWCLsoA+6gkcb9lS5AhMMDTkuDVtQo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:41:25 2025 by rpki-client