Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
File: 3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa (raw, json)
Hash identifier: 5dlw+uQa/o7A9lO4IRgqEiiehDHxos44SD0xIwVpKrE=
Subject key identifier: 7F:1D:2E:E4:92:44:39:BC:FE:99:40:2C:D6:9D:55:4A:5E:B6:20:A5
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584917DC2EBE318E186E82C11640
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 30238
IP address blocks: 23.90.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:2e:be:31:8e:18:6e:82:c1:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=3edc5325-6019-461f-b613-3d64df0e2b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:3c:67:7b:cd:87:4a:57:f7:59:3c:37:b6:
54:ee:c7:94:07:0f:47:19:1d:e8:55:75:45:31:9c:
c9:81:85:39:29:fe:29:4a:4b:84:98:80:4a:6a:fb:
a8:56:de:e8:13:9d:2d:bd:4d:25:0a:ac:25:f6:f0:
ef:d7:70:33:3f:06:4c:23:93:a9:f6:d3:11:ea:8d:
04:73:ba:93:1b:ba:45:6d:b8:1c:af:c1:55:3b:16:
92:56:fa:cd:ff:fe:a6:a9:6d:51:78:42:5e:91:00:
16:e7:e5:d3:5d:ae:a2:f8:47:40:11:6b:08:3a:4a:
b0:50:5f:32:09:ea:e9:89:9b:44:b1:37:82:2b:ca:
ea:bd:68:5a:67:2f:00:e7:91:68:27:0d:af:aa:52:
18:b6:07:fa:51:80:7e:58:2c:63:07:cd:e8:d6:12:
63:e5:e7:78:d4:4d:d4:56:ce:3e:bc:af:ca:bb:ed:
61:e3:f5:6c:38:62:f7:b1:52:95:0e:bf:e1:1a:c3:
73:29:6a:a6:10:d6:3f:a7:16:a0:4b:72:c3:04:21:
63:98:81:a6:78:33:21:d2:97:3d:91:8f:48:5a:a5:
bf:38:44:5b:0d:90:3f:f9:33:3f:cf:4b:b3:3f:a1:
15:de:b3:3e:26:91:b2:13:f9:7a:70:6f:95:5e:6b:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:2E:E4:92:44:39:BC:FE:99:40:2C:D6:9D:55:4A:5E:B6:20:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:5f:63:2d:54:da:b1:27:02:30:c6:00:4c:a2:2b:f8:39:58:
19:6d:db:51:df:d7:c5:98:5a:ba:f3:6d:87:48:71:cf:0a:3e:
24:e1:d4:c0:9e:dd:8a:bc:94:38:47:4e:1e:ba:09:47:df:bf:
e5:fe:81:d1:f4:30:05:c2:bf:fb:1e:a9:cb:d3:57:01:fa:21:
97:03:ba:e5:b7:7b:91:93:26:c5:63:46:59:d6:40:1e:55:00:
28:e2:d6:00:c7:4c:d2:f9:c0:1e:57:63:3d:98:4b:f1:c3:e3:
1d:c4:72:28:3d:84:df:83:3d:32:e5:c3:36:87:c4:ff:ce:82:
98:bf:89:88:a2:3b:a4:90:8d:e7:89:cb:20:6e:50:bf:e2:38:
bc:1c:84:62:20:56:7e:53:06:31:db:e8:bb:97:20:e3:22:1c:
f0:89:7b:84:bb:35:a5:a9:01:01:31:bb:55:bd:d6:57:80:71:
2a:08:46:b2:7b:2a:f2:7e:c4:d7:f9:26:6d:f8:3b:c7:b4:06:
0a:71:fe:cd:41:f3:a3:30:51:1f:d7:44:77:a5:46:7b:b2:2d:
17:ef:3a:d9:47:ed:3b:50:6e:5f:33:d4:49:cf:77:c1:a3:2f:
db:30:db:d9:eb:89:f3:ef:20:62:81:a2:da:48:d6:f3:23:69:
67:b7:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:58 2025 by rpki-client