Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c56fbe0-4dd0-3a4c-aba0-e8e6b185ca58.roa
File: 9c56fbe0-4dd0-3a4c-aba0-e8e6b185ca58.roa (raw, json)
Hash identifier: HLL1jDdBFT3LKkY6xzc3CQQXbjh3WVScwv3DM97RZZc=
Subject key identifier: 7A:0E:7B:AA:9A:68:25:B6:F1:39:D6:34:AD:87:DA:3F:8A:36:3D:12
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D0ABB3242034E83645611E40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c56fbe0-4dd0-3a4c-aba0-e8e6b185ca58.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 19318
IP address blocks: 23.26.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b3:24:20:34:e8:36:45:61:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=d2fbea70-e474-4205-b0ea-2be7e2a43b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:0c:23:13:6a:a2:91:ee:35:82:32:cb:a7:
0f:18:41:6e:55:ce:8b:8f:6e:fa:2e:c7:a3:01:26:
69:f1:d8:53:1b:9e:3c:14:0c:3e:4d:60:f4:58:74:
92:15:af:5d:32:1f:02:0f:ed:aa:8d:73:3d:3d:eb:
85:48:b7:5b:b6:96:0f:0b:d2:83:07:3d:dc:8d:c3:
f8:7c:e1:17:aa:f3:46:86:27:ee:08:97:fe:91:5d:
e2:c3:fb:10:2c:c3:dd:85:7f:0e:11:8a:37:94:8c:
b7:5e:ce:44:f3:7a:94:94:b7:6f:fd:71:3b:ba:3c:
0e:98:a5:f8:c7:bf:eb:a1:fe:4b:28:ce:7f:a6:d7:
8e:14:56:b6:67:6a:a7:f6:c9:f3:13:b8:12:f3:ea:
12:7f:7f:a1:f6:8d:49:e5:85:85:24:0d:ee:c0:04:
92:9c:2a:d3:7f:2f:6f:aa:7e:8b:34:8a:5e:03:d0:
dd:ed:07:96:e5:71:f3:de:1e:44:b1:e9:04:06:90:
71:3e:55:3c:a4:68:0c:29:d5:42:08:49:26:ae:82:
7f:a9:89:fa:17:49:04:57:43:e1:79:4b:1b:1d:19:
cd:2b:45:f5:af:9f:ac:08:84:f6:f3:fa:84:e7:33:
a5:85:3f:3a:1d:5b:29:32:22:69:27:8c:12:78:94:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:7B:AA:9A:68:25:B6:F1:39:D6:34:AD:87:DA:3F:8A:36:3D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c56fbe0-4dd0-3a4c-aba0-e8e6b185ca58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:9f:b8:fd:99:69:48:f5:7b:8b:4a:d6:80:c5:fb:77:95:b2:
9f:5c:7b:95:4b:69:2c:89:6a:56:9c:e1:a5:8a:91:04:68:03:
64:e6:65:65:b5:ce:cf:c2:e8:9d:2b:44:ca:2f:b2:e0:6d:97:
7e:dc:cc:59:db:80:22:84:0b:bf:25:3c:4e:6d:1e:b6:7b:88:
eb:9d:9d:a2:2d:3c:00:cc:73:bb:eb:db:1d:77:b0:88:e1:64:
49:b3:54:6a:f8:8e:c0:f9:0c:7f:fe:9d:3c:ae:52:de:a8:d4:
36:d3:01:41:55:94:88:f3:5a:74:68:18:73:c1:4c:ae:a0:29:
44:a5:0f:98:9d:9c:26:36:e4:87:4b:c9:12:d7:33:8e:83:d3:
db:eb:01:06:04:07:eb:12:e3:a8:82:01:b7:d2:fc:60:4f:a5:
9c:2f:55:4d:44:63:37:3a:70:17:50:32:1b:dd:78:dd:52:e1:
8e:a7:bc:07:63:fc:d3:1f:cd:53:86:d2:8b:9e:c1:d5:40:cb:
60:ef:de:a4:00:d4:55:35:9d:b1:ca:c5:0d:34:e6:36:c8:10:
dc:73:ce:9e:a5:71:bd:5b:b6:f4:be:dc:ef:01:53:62:05:36:
98:2d:9d:de:57:9c:4b:be:1a:b7:80:12:e3:20:b9:dd:23:53:
84:ed:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:22 2025 by rpki-client