Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa
File: 1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa (raw, json)
Hash identifier: V69oZD+BZK+SSwBXTIg/75kcfean2Gzjwb/IAxDc3qM=
Subject key identifier: 82:86:B6:AE:5C:12:26:14:0A:C1:0F:A1:F8:5F:2E:79:DE:5E:74:95
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858494E2EB31AE8770FC82C4772C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 30215
IP address blocks: 23.90.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b3:1a:e8:77:0f:c8:2c:47:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=abe4c6c3-ff3b-4b37-9d9a-2260b0b6f1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:2e:9b:5d:4b:92:cb:20:7c:89:f1:10:88:
b2:97:3d:d3:8f:35:03:b0:56:a7:a5:2d:7d:95:7f:
94:a8:36:7b:f7:68:ec:2e:7a:24:b0:c5:ee:0f:90:
18:90:a9:2b:cf:0d:6d:e2:6b:b6:df:81:62:6b:fd:
f7:d7:39:a3:92:c0:e2:ec:67:9a:69:a7:9b:a6:19:
f6:6a:40:cc:2b:f7:20:1b:b6:84:f5:36:55:da:22:
aa:6a:d9:ed:c2:44:50:75:dc:98:e6:3a:b3:31:1f:
80:a2:11:06:11:ae:ed:a9:cd:fe:13:11:87:03:e5:
3d:e8:1f:db:c3:57:10:31:dd:e4:c2:a1:1e:b2:d1:
0d:3c:5a:4a:a2:24:0c:d1:47:8b:e1:09:fd:8c:3d:
a1:93:a6:97:9b:cf:03:79:0a:98:f1:03:80:61:a7:
44:0a:3c:e7:d7:6b:4f:b5:5f:dc:71:ed:c6:0b:27:
ba:25:2e:1d:43:3d:fa:0a:5c:ef:1f:79:b2:18:3f:
4e:7b:a6:70:10:c3:b7:a8:c3:3d:27:1c:69:d5:6d:
23:5b:d7:e0:0a:c8:91:db:0a:24:37:e7:e1:7f:6a:
83:b6:3c:6b:0d:94:18:24:a1:c7:63:e3:89:ba:c4:
16:92:58:c3:de:07:bd:51:9c:bd:f4:d5:79:05:15:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:B6:AE:5C:12:26:14:0A:C1:0F:A1:F8:5F:2E:79:DE:5E:74:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:7f:46:69:ea:2a:58:56:64:d9:6b:0c:19:66:28:47:61:8e:
cf:06:25:2d:58:12:8b:81:a8:40:2c:bc:9f:e2:11:1a:86:f3:
51:5c:2f:4c:31:ca:19:07:f2:c0:2c:94:85:26:54:e3:a5:50:
67:ee:06:6a:ff:be:c4:29:1c:7f:1a:2c:e2:1c:69:bf:4d:00:
67:27:6c:c8:84:be:b0:04:b1:5d:ee:9a:2e:01:86:b8:10:76:
c6:c7:3d:e4:be:fc:2c:45:1e:fc:d2:91:87:77:4e:12:7c:fc:
7d:50:0c:ba:e9:4f:d1:6f:08:fe:5f:61:7f:3e:21:5a:4d:2a:
c1:df:83:ed:d2:77:df:77:d6:ea:c9:da:a2:29:be:02:d9:f0:
88:34:c5:36:69:ce:92:c9:c8:56:d3:1b:82:ee:95:7d:bc:a3:
bc:b6:99:4b:9b:d4:68:be:da:06:cc:6f:fa:78:22:b2:02:c3:
19:1c:ae:75:02:f4:7f:f2:1a:42:64:c6:b0:8a:13:26:08:55:
c9:b4:16:22:b7:5a:d9:53:c7:c8:a1:f0:4f:00:a1:c7:e9:87:
27:79:29:2e:1e:d0:fc:7a:d7:55:7e:d6:e5:3a:f4:3d:7b:0f:
2d:4a:06:40:1e:79:67:b1:bb:a1:cb:96:86:4b:2b:31:87:d9:
0d:fa:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:57:57 2025 by rpki-client