Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa
File: 02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa (raw, json)
Hash identifier: 35zTIgy7EG8mfuPU/+so04N8EWvKj6P9xGxt5a0sA3w=
Subject key identifier: 9B:8B:01:2E:3C:1B:54:A6:E5:52:01:CC:98:F6:85:99:03:45:D3:5E
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD17F84C593300380D4C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 23.90.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d1:7f:84:c5:93:30:03:80:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=01e324f8-fe52-48a2-a074-2a0fa3c53961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:09:12:d0:0d:89:5f:f9:f1:2f:34:2e:f1:
7b:c5:c9:e8:d4:77:99:4d:13:6c:59:3a:56:63:1f:
de:b2:46:27:9f:42:aa:ad:09:ce:4d:78:9d:01:f4:
0b:a1:ba:04:eb:27:c0:ee:b4:ae:8d:de:84:d5:e5:
ea:40:66:36:5c:61:43:3c:7a:5c:15:17:76:ef:61:
41:7d:a4:48:6e:45:8f:4b:de:84:71:e1:6f:92:e0:
45:6e:b2:40:18:31:88:f2:60:cf:b3:9a:19:9f:ca:
ea:ab:f1:81:bf:54:06:d5:08:fe:48:d1:2c:dd:87:
90:13:2e:cc:02:10:84:2e:db:75:81:e2:e8:ae:7f:
66:0e:02:19:34:a9:1b:b1:3d:97:67:8c:98:86:c8:
b2:25:b8:de:90:5b:16:61:24:4d:16:79:9e:ef:13:
31:33:08:07:25:ef:a4:87:ee:20:45:bf:03:9a:a8:
e8:fa:98:ba:78:96:39:a7:52:aa:b2:30:9a:f3:35:
f7:5e:6a:56:59:6e:88:89:79:de:16:83:87:17:4e:
1e:87:91:be:44:27:11:42:fc:76:6b:a9:d1:c1:9a:
5d:52:6f:d0:79:7d:f0:2e:8c:ae:92:9f:f3:33:1c:
4d:fe:ff:f7:3c:82:60:e8:fb:e2:84:fa:ba:f5:9f:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:01:2E:3C:1B:54:A6:E5:52:01:CC:98:F6:85:99:03:45:D3:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:39:76:c1:62:a8:a0:b8:db:ae:d7:88:9a:67:5a:15:9c:42:
a5:6c:ee:00:f4:00:a0:a1:8b:64:f3:d8:34:e0:54:bb:15:eb:
2c:45:a1:a4:c6:5b:2d:ec:c4:9e:b1:da:57:b2:76:c7:f4:14:
80:f5:55:e3:18:81:46:d0:85:b7:9f:a9:57:80:e0:bf:b2:35:
94:d5:c6:9f:65:f1:a0:0e:40:bd:69:28:db:3c:b5:ee:76:c6:
9f:e4:05:41:6f:07:a1:a5:f7:f6:11:b5:d3:8d:f5:0a:13:39:
57:2a:c1:a3:ba:2a:10:b9:f0:9a:81:3f:5b:7d:93:30:7b:fd:
b9:72:c2:3e:df:cb:96:76:7e:09:d9:03:28:30:ad:72:e6:f6:
d4:05:36:d7:e4:85:31:35:46:21:83:df:19:63:9b:0c:f0:72:
19:63:11:b0:14:52:13:67:ff:80:8f:fb:b5:c5:1c:73:9d:92:
a1:a6:1e:fa:4d:13:35:24:aa:04:30:e7:a5:11:76:f1:ce:6b:
3d:aa:72:2f:a4:fc:27:a1:f7:10:15:6a:10:84:5c:b7:39:d2:
b3:26:d0:f7:f0:da:5b:60:e8:95:c0:bc:64:8b:50:d0:9d:12:
a7:32:a3:6d:6e:e0:b8:62:03:7a:a6:d6:d2:7c:a3:4f:c5:06:
6d:37:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:49 2025 by rpki-client