Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5df85eb0-eb92-3954-bb9e-1101158388f2.roa
File: 5df85eb0-eb92-3954-bb9e-1101158388f2.roa (raw, json)
Hash identifier: CprBV7muRX9MaaZh1THGRRip9NEylcaxAjkv1r/4IdA=
Subject key identifier: 43:5E:C5:39:5D:7E:D1:22:82:95:3B:A0:A6:36:D3:E4:C5:F1:DC:B1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848FDE6F6B9015DFDFD8BC6C680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5df85eb0-eb92-3954-bb9e-1101158388f2.roa
Signing time: Mon 24 Feb 2025 18:51:46 +0000
ROA not before: Mon 24 Feb 2025 18:51:46 +0000
ROA not after: Sun 25 May 2025 17:51:46 +0000
asID: 401152
IP address blocks: 23.26.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:e6:f6:b9:01:5d:fd:fd:8b:c6:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 24 18:51:46 2025 GMT
Not After : May 25 17:51:46 2025 GMT
Subject: CN=3c2a8533-596d-45b7-8fa2-d0bb9639c6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:84:3b:23:0a:e1:40:d6:8b:0b:97:bc:0a:
5e:da:8c:e7:c9:a4:af:e1:95:79:24:b1:4f:62:20:
17:af:a2:44:7a:27:04:5d:84:f1:e5:03:b0:da:b9:
a0:61:68:72:90:b9:dc:b9:95:76:18:8c:0a:6f:60:
de:c4:45:92:3f:18:0e:11:fe:92:5d:38:08:2d:1a:
a5:3d:83:6e:ed:bc:d9:f8:7b:5c:bc:19:ba:69:07:
7e:5e:53:fc:94:ee:91:48:d0:f8:0d:75:60:76:a0:
81:8c:4d:3c:24:e8:9d:ef:ff:40:71:06:f2:3f:2f:
2f:3d:1b:e1:6a:69:ea:7b:54:03:85:f1:74:59:ad:
8b:28:e3:c0:e9:06:dc:6a:a0:53:b3:a6:cc:a8:51:
33:d6:7e:92:fb:88:7c:de:1e:c6:fd:1d:6a:1e:40:
3a:41:f3:bf:19:e2:3a:c8:65:25:44:a2:80:56:15:
37:fe:8c:1a:f3:60:fa:85:0b:7e:72:a1:63:f7:46:
cb:14:80:dd:92:19:f6:9d:d9:17:f4:18:68:28:56:
03:15:c1:09:27:de:74:f4:2f:91:1d:cc:71:9a:5f:
c2:9e:57:87:c7:76:7e:35:9e:78:4a:a5:06:a3:11:
f2:0f:bb:e0:e3:55:ff:2f:93:7e:8a:e7:cb:48:e0:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:C5:39:5D:7E:D1:22:82:95:3B:A0:A6:36:D3:E4:C5:F1:DC:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5df85eb0-eb92-3954-bb9e-1101158388f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:28:85:50:9b:84:b6:bd:bf:b3:9a:4a:6a:87:e2:f1:86:6b:
42:80:84:3d:d8:35:42:54:51:cc:d7:15:36:71:f9:95:53:76:
14:45:e1:1f:29:7e:eb:a1:6a:59:1d:83:56:f7:87:ad:a3:43:
9b:79:55:15:5f:09:f2:bd:44:a5:31:59:28:f6:48:53:ef:66:
c9:f1:ec:db:93:fb:ba:d4:06:82:30:10:0b:dc:19:fe:9a:9c:
78:35:14:64:47:ee:50:e4:80:ca:c9:b6:20:e9:bb:ae:4b:6b:
d0:70:c7:2c:83:7f:7e:b8:43:fd:27:25:8c:3f:ec:55:5c:2d:
f8:bf:f0:82:5f:64:ed:38:17:3e:ba:6a:95:e2:33:6d:f5:57:
ff:63:ba:42:35:68:59:7f:e8:2d:5d:3f:c6:99:d8:3f:db:34:
09:be:5b:03:35:7c:79:ac:a0:d8:c5:9f:03:dc:30:f7:7c:b8:
47:7f:b7:3d:60:59:f9:17:73:d4:0c:22:49:36:e8:d3:5f:bc:
69:ca:7a:57:be:22:b3:8a:6d:5d:72:92:51:63:f3:7d:fd:95:
13:fe:20:7f:8c:c1:d8:27:98:e6:49:65:f4:71:29:ae:fd:f9:
b3:74:7e:a3:bb:16:85:c8:74:52:2f:0d:5b:cd:72:86:88:74:
de:44:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:54 2025 by rpki-client