Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79db3490-8bef-3eb0-9791-b090bd4b3f89.roa
File: 79db3490-8bef-3eb0-9791-b090bd4b3f89.roa (raw, json)
Hash identifier: 9hQeUg3X+w3SO9Zj8+h5W4UZpuwRhOSWNheXxVcGQIg=
Subject key identifier: 00:06:28:84:EB:34:4B:1E:55:7E:94:4B:F7:46:E9:BC:06:E4:67:4A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849115E19000A7327613CB3C980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79db3490-8bef-3eb0-9791-b090bd4b3f89.roa
Signing time: Mon 03 Mar 2025 18:12:10 +0000
ROA not before: Mon 03 Mar 2025 18:12:10 +0000
ROA not after: Sun 01 Jun 2025 17:12:10 +0000
asID: 401152
IP address blocks: 23.26.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:5e:19:00:0a:73:27:61:3c:b3:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:12:10 2025 GMT
Not After : Jun 1 17:12:10 2025 GMT
Subject: CN=a87bbeb0-99cf-423e-9f32-0e22ceb3acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:e6:1f:ee:79:54:19:42:37:c3:e3:46:97:
c4:eb:17:30:e6:7a:11:d1:21:36:bf:72:0b:b5:d8:
c1:2e:96:f3:cd:47:5a:6f:32:bf:a8:7f:44:6b:ae:
7f:52:6c:bd:50:0a:34:83:82:a9:d3:2a:cc:69:57:
1d:be:ae:37:34:1e:f7:80:5a:6c:f1:81:63:b8:03:
87:29:68:2f:1b:43:ac:b2:d8:19:20:41:4c:72:9b:
0d:5a:3d:33:bf:0e:8c:63:ab:bc:1c:45:ca:08:85:
3f:25:af:0f:2c:d8:1c:80:19:8b:10:ba:20:12:02:
ed:34:05:d5:39:9c:35:e5:12:ec:f2:fa:90:60:fd:
4d:ba:d6:dc:0d:bc:94:61:bf:c7:a3:2e:91:dc:f6:
f8:a9:6a:07:b2:c7:ab:6f:da:1e:31:d0:42:de:50:
c2:2a:52:be:f9:5f:ca:71:30:a2:b5:70:c4:80:25:
82:1b:54:7d:58:73:fd:c4:e5:66:43:61:0d:84:95:
ae:50:34:a7:85:de:fc:c7:5f:45:79:26:5a:41:6f:
13:3c:24:dd:7a:7a:5e:65:b6:5f:d4:2a:fa:a5:3a:
64:32:a5:ab:a0:d8:7a:5d:63:66:f8:7f:a4:35:d3:
ff:5f:7b:9b:a2:e3:33:c6:7c:42:cd:8d:40:7a:81:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:06:28:84:EB:34:4B:1E:55:7E:94:4B:F7:46:E9:BC:06:E4:67:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79db3490-8bef-3eb0-9791-b090bd4b3f89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:18:40:2b:eb:b3:34:8a:78:09:69:ce:a0:77:3f:86:42:3b:
32:47:cb:60:6c:23:e1:e5:fb:eb:c0:92:6c:7c:a8:57:e0:da:
65:b4:ec:be:3f:4a:35:22:24:65:21:50:12:ac:6d:42:8a:2e:
6e:79:5d:9e:38:61:24:da:cd:48:8c:77:4b:35:73:9c:f3:f2:
2f:bb:99:ef:e4:ed:49:5b:dd:5f:e3:6d:46:e1:77:d9:15:ea:
dc:56:ce:8f:62:6d:af:a2:88:90:50:88:b8:47:0d:cb:47:a0:
2c:c4:c0:90:fe:66:83:a1:e6:6a:e0:2a:89:aa:d0:3d:1d:3e:
70:3c:ff:4b:ab:02:1a:5a:a3:d4:17:2b:4b:80:f3:ed:91:50:
94:d8:3c:29:10:c8:33:29:fa:2a:fb:24:b2:95:b4:93:4c:9d:
76:ca:cc:48:2c:7d:b5:e9:ff:c4:3e:c2:92:de:6c:cb:2b:7b:
73:74:e3:a8:0b:bf:7f:8a:29:49:90:67:58:1c:e1:aa:fb:b9:
c7:5e:38:e1:83:0f:88:b9:77:ec:b2:5b:31:3c:bb:4b:e7:a5:
0d:cd:42:75:95:55:25:3e:82:59:fc:b1:84:50:97:ef:65:90:
74:11:d4:68:b4:f6:63:17:97:30:a8:a7:35:55:3d:a7:41:d4:
58:1a:3d:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXhkACnMnYTyzyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwMzE4MTIxMFoXDTI1MDYwMTE3MTIxMFowLzEtMCsGA1UEAxMk
YTg3YmJlYjAtOTljZi00MjNlLTlmMzItMGUyMmNlYjNhY2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OHmH+55VBlCN8PjRpfE6xcw5noR0SE2v3IL
tdjBLpbzzUdabzK/qH9Ea65/Umy9UAo0g4Kp0yrMaVcdvq43NB73gFps8YFjuAOH
KWgvG0OsstgZIEFMcpsNWj0zvw6MY6u8HEXKCIU/Ja8PLNgcgBmLELogEgLtNAXV
OZw15RLs8vqQYP1NutbcDbyUYb/Hoy6R3Pb4qWoHsserb9oeMdBC3lDCKlK++V/K
cTCitXDEgCWCG1R9WHP9xOVmQ2ENhJWuUDSnhd78x19FeSZaQW8TPCTdenpeZbZf
1Cr6pTpkMqWroNh6XWNm+H+kNdP/X3ubouMzxnxCzY1AeoEgdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAGKITrNEseVX6US/dG6bwG5GdKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzlkYjM0OTAtOGJlZi0z
ZWIwLTk3OTEtYjA5MGJkNGIzZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYYQCvrszSKeAlpzqB3P4ZCOzJHy2BsI+Hl++vAkmx8qFfg2mW07L4/
SjUiJGUhUBKsbUKKLm55XZ44YSTazUiMd0s1c5zz8i+7me/k7Ulb3V/jbUbhd9kV
6txWzo9iba+iiJBQiLhHDctHoCzEwJD+ZoOh5mrgKomq0D0dPnA8/0urAhpao9QX
K0uA8+2RUJTYPCkQyDMp+ir7JLKVtJNMnXbKzEgsfbXp/8Q+wpLebMsre3N046gL
v3+KKUmQZ1gc4ar7ucdeOOGDD4i5d+yyWzE8u0vnpQ3NQnWVVSU+gln8sYRQl+9l
kHQR1Gi09mMXlzCopzVVPadB1FgaPW8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:27 2025 by rpki-client