Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
File: 5107cb12-7dcd-3137-83ab-78d947b463bc.roa (raw, json)
Hash identifier: Dq8mFcEWE6Cvh/zEgcKVIkIQYldidoDAjgvid/n0gp0=
Subject key identifier: 3C:FE:D3:1D:94:65:0C:3D:E8:EB:4C:3A:D1:21:E6:62:99:AB:76:C4
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD13F872455A425F39F18
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 23.90.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d1:3f:87:24:55:a4:25:f3:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=d0d38f58-af36-45c3-a9ba-102962c3328f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:ac:cc:34:e9:53:32:e2:c3:52:6b:49:89:
dc:5f:1f:68:27:ac:19:98:23:f8:9e:59:fe:37:ef:
fb:90:f3:e7:89:88:d2:c1:c4:05:13:e1:1e:30:b0:
e9:3f:bb:59:7d:57:db:c8:dd:3c:93:9c:a1:89:7a:
09:23:45:0e:80:a6:4e:db:3f:ee:e5:1e:fd:7c:05:
19:15:2b:5e:6f:b1:e5:66:2f:41:f2:d0:7e:86:b5:
0a:76:5c:79:45:7c:db:af:61:77:72:25:f5:5f:5a:
40:9b:29:6e:8f:31:d3:22:5d:5a:47:ac:b2:4c:31:
da:7d:2d:ce:3a:b9:f4:ef:48:83:23:be:39:fd:e2:
20:3d:03:3e:f7:2f:9a:c8:8a:7a:c4:7c:7b:6c:41:
df:b3:6a:0d:66:83:98:d6:bc:a2:46:fe:7a:2e:4e:
78:e9:49:b2:1c:87:59:cb:81:18:a3:3b:40:bd:28:
98:f9:30:f3:2a:64:42:94:6a:38:f9:35:7c:ec:5c:
55:fe:5a:04:1d:ed:6d:f8:ce:e6:cb:09:db:bc:47:
c6:0b:03:15:c5:51:0a:16:df:10:27:0a:52:1e:fc:
ae:27:76:05:0e:1c:32:0f:0d:74:0a:77:46:56:2f:
3d:87:fb:7c:93:01:af:6e:42:3c:1f:82:6a:f9:54:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FE:D3:1D:94:65:0C:3D:E8:EB:4C:3A:D1:21:E6:62:99:AB:76:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:df:93:3a:ac:1a:ee:45:bf:88:98:db:b4:44:83:d8:54:a1:
7e:2d:7a:d0:0b:63:fe:8f:36:81:95:f0:64:bf:73:cf:4f:d3:
99:25:52:f2:03:2c:15:70:95:d9:52:7b:1e:07:4e:77:ae:f3:
6f:df:ce:fa:57:ee:76:f5:95:6d:2b:90:c4:26:02:b6:6d:c1:
ed:9f:a9:ce:c4:cd:4e:61:db:36:a3:1b:5d:3e:cf:0a:8c:51:
6d:b3:4f:3e:bc:96:5b:b1:ea:8e:fd:20:28:9f:cc:4a:b8:1c:
a2:ce:9a:d7:b2:2e:74:b7:f0:3f:d9:23:75:4b:29:42:71:0b:
f7:a3:ac:f1:bd:85:ce:7e:16:00:6a:8a:1d:3f:05:fb:33:a2:
31:39:45:0e:6f:ae:3b:2b:e9:7c:8f:94:c2:9b:d4:21:f6:04:
0a:ca:6f:02:e7:8e:69:7e:a5:4c:e9:97:93:9d:67:4d:0d:4d:
8d:5e:42:7d:5f:6b:ee:bd:57:6b:da:57:30:1e:21:85:2b:e0:
63:f8:87:80:23:5f:68:fe:16:04:d1:87:b3:18:39:13:ed:bf:
77:a0:17:b8:08:aa:28:2e:da:8b:40:e4:1d:8f:10:00:7a:db:
5f:26:86:f8:aa:9c:c9:f5:81:3d:52:e8:24:d5:d2:21:36:cc:
1d:da:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:45 2025 by rpki-client