Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3fdc8bc-2ff0-3c8e-94b6-86da3372f5e6.roa
File: f3fdc8bc-2ff0-3c8e-94b6-86da3372f5e6.roa (raw, json)
Hash identifier: yLokahrEjXre7S/EeaAN5+Tv9pRjqhizKGgB9lDqrYo=
Subject key identifier: 18:48:33:35:AD:57:28:FE:9F:71:B5:5F:A9:59:C6:28:53:AE:A3:5B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B2DFA831932136478E5B4000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3fdc8bc-2ff0-3c8e-94b6-86da3372f5e6.roa
Signing time: Tue 28 Jan 2025 21:51:25 +0000
ROA not before: Tue 28 Jan 2025 21:51:25 +0000
ROA not after: Mon 28 Apr 2025 20:51:25 +0000
asID: 401152
IP address blocks: 23.26.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:df:a8:31:93:21:36:47:8e:5b:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 21:51:25 2025 GMT
Not After : Apr 28 20:51:25 2025 GMT
Subject: CN=7a5e9eb2-ebdb-4596-acfb-ded17c37532a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:2c:8d:ed:26:53:bf:2c:8e:fa:ed:be:4d:
73:fb:be:02:2f:aa:1e:b4:53:98:83:93:39:9c:e7:
58:be:a5:fd:60:53:2b:8c:22:76:e6:03:0e:80:1d:
e3:22:77:92:cc:7d:e9:85:42:2c:00:40:01:79:07:
ee:b1:55:47:eb:07:8f:b0:34:c0:b8:5c:ae:be:a3:
53:62:15:ea:c0:5a:75:f5:a9:a3:f1:55:27:4a:e4:
a1:9b:cf:f6:d7:0d:81:3c:02:8b:26:9e:c1:a5:d5:
37:e3:45:0e:66:0b:f3:d1:d5:3f:c1:69:81:07:30:
ae:ec:a6:4d:45:7a:12:14:8a:43:8d:e6:fa:97:3e:
78:bb:72:29:24:39:42:b0:f7:7b:bd:9e:c3:f9:ba:
b0:20:0d:d8:23:fb:55:b2:51:68:38:e1:39:bb:78:
29:39:ff:f4:b1:6a:70:9a:ce:82:87:a7:9f:11:9c:
0d:23:ff:fa:57:2d:05:09:80:df:88:2b:e6:55:66:
ad:6a:60:d9:5b:a4:40:05:6e:66:cb:6c:3e:d1:f4:
45:30:52:aa:45:fa:fc:5d:45:5b:25:99:88:77:94:
5c:97:8f:f4:58:18:82:f4:ed:f0:98:d6:c9:f0:4c:
66:7b:84:3c:22:3a:9f:c6:b7:42:69:9f:64:5c:fc:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:33:35:AD:57:28:FE:9F:71:B5:5F:A9:59:C6:28:53:AE:A3:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3fdc8bc-2ff0-3c8e-94b6-86da3372f5e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5b:50:f3:ee:0b:99:ae:01:f1:ba:e3:ba:93:49:f6:08:62:
32:6c:4c:fd:df:f0:29:69:4b:64:20:52:ca:cb:5a:b1:7f:0b:
d4:db:83:3c:29:3a:f5:20:85:c3:a5:42:00:db:4c:64:e4:b1:
08:24:df:7e:71:98:88:c8:61:d8:db:ca:95:f9:e3:40:45:5f:
ef:31:d0:d0:7e:bd:be:d3:63:1e:18:33:b8:75:79:fa:e0:1f:
1a:02:d5:dd:5e:df:82:15:43:c5:49:29:9f:3b:17:8b:69:67:
98:86:ea:6a:82:95:e4:a3:dc:e2:e4:34:92:18:83:28:cf:f1:
05:e5:f7:43:06:9e:34:d0:6d:d5:3d:40:09:00:b3:8b:ce:a9:
48:b2:bd:ef:f4:74:e5:73:25:6f:13:d2:01:70:d7:24:e0:5a:
01:e4:4e:a3:60:b5:82:c2:2f:2d:8b:15:1e:9c:48:34:70:f0:
f9:24:ea:34:12:9a:92:93:cd:4f:93:58:f0:8e:18:ea:7e:e1:
82:9a:92:6c:30:cc:14:f2:3d:77:46:f9:5b:0d:58:eb:dc:f5:
f1:56:69:90:89:3b:69:fa:4e:29:3b:b8:57:30:46:c2:dc:fb:
d6:7b:f1:b7:7c:84:30:04:0a:fb:34:74:30:d8:f3:1d:b4:20:
3c:c9:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:02 2025 by rpki-client