Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7e382710-2637-366c-9a4d-bc12b8e1d769.roa
File: 7e382710-2637-366c-9a4d-bc12b8e1d769.roa (raw, json)
Hash identifier: IeU+p7RDprqDDGAeqn468je3wLDU0nAtYwB2O+zcdFU=
Subject key identifier: E8:10:E3:55:B4:25:EE:A5:74:56:6F:2B:58:04:FD:3F:8B:57:2B:B5
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE982B579B8ED5CE83A900
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7e382710-2637-366c-9a4d-bc12b8e1d769.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 23.90.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:2b:57:9b:8e:d5:ce:83:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2505ad56-b273-4b43-b982-8c6b11822271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:16:49:0b:28:91:c1:ea:d4:d5:03:99:8b:
3b:79:c9:0f:0d:9b:0b:02:0d:3d:82:54:72:58:d3:
8b:91:61:dd:30:0a:9d:66:1d:b6:fc:85:2e:b2:0d:
af:4b:eb:60:ce:5c:a2:0a:48:24:6b:65:a0:6d:0c:
20:0e:75:f7:fd:9d:73:3d:4f:db:d2:92:ae:ee:6f:
80:0f:59:d8:49:ca:68:28:06:96:88:5e:b0:b0:71:
76:99:e8:b2:e8:d8:af:38:77:22:1b:c3:24:7c:f7:
ce:02:f9:02:12:7e:58:19:bd:15:21:16:45:81:03:
ef:f7:17:bf:ca:14:ec:19:d8:95:5c:a3:70:cb:01:
17:1a:44:75:d0:d8:53:30:b3:1f:02:1b:67:fc:fe:
67:79:4b:3e:dd:c8:a3:c0:21:6c:4f:ca:ee:30:46:
31:19:e7:6a:af:bc:df:fc:82:82:3e:db:99:27:39:
c0:e3:18:08:87:90:a1:93:ed:6b:39:75:5a:fd:1c:
eb:4f:73:0d:03:27:1e:08:07:09:94:ec:24:c3:6e:
63:83:f8:53:11:54:c5:ce:b3:5a:14:3b:c9:9f:b7:
0a:a2:2b:de:0e:97:c9:41:4f:fc:19:02:d1:07:42:
29:ad:7a:b4:dc:08:c4:9d:9d:9a:a8:c7:5f:98:34:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:E3:55:B4:25:EE:A5:74:56:6F:2B:58:04:FD:3F:8B:57:2B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7e382710-2637-366c-9a4d-bc12b8e1d769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:23:72:47:1e:c0:b4:de:44:be:84:ec:8a:28:b6:6f:93:fe:
81:c6:de:67:e3:13:94:99:cc:7a:fc:85:ad:d3:c4:b1:91:4a:
f5:e8:a3:cc:68:d9:27:fc:f3:47:e5:8c:f9:fa:6e:04:fd:46:
17:d9:7b:f9:3a:9a:85:c7:07:7e:f6:cc:73:a7:52:f4:29:54:
a9:b1:15:1c:53:4c:26:f8:02:90:1a:f8:bd:16:6d:ed:db:c6:
30:4e:a4:7f:fd:fb:35:af:6c:31:9b:20:74:3e:e8:3e:3f:e3:
f1:1a:79:a4:75:36:5b:2d:a5:ef:2a:42:fe:4e:da:dc:d3:e2:
9a:05:e5:6c:6f:5a:f9:0f:c6:c8:c3:08:bf:3e:59:40:12:a7:
9a:9a:fb:f3:08:82:51:91:d2:16:1a:cb:58:2c:3f:7f:9e:d0:
81:72:ec:03:60:cf:74:38:1d:3c:c2:d7:81:f9:b4:16:76:6b:
03:1d:77:d5:0f:70:98:b1:aa:21:9d:85:26:b5:81:34:14:8e:
66:2c:e2:f0:0f:45:3a:28:b0:b9:42:ae:75:ba:88:a4:92:4b:
bf:81:98:1b:01:a1:20:83:5a:65:93:a1:f0:5b:b7:46:aa:80:
78:82:5f:ea:90:97:55:11:92:8b:21:21:b8:a6:c8:a7:dd:28:
81:89:40:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpgrV5uO1c6DqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MjUwNWFkNTYtYjI3My00YjQzLWI5ODItOGM2YjExODIyMjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE8WSQsokcHq1NUDmYs7eckPDZsLAg09glRy
WNOLkWHdMAqdZh22/IUusg2vS+tgzlyiCkgka2WgbQwgDnX3/Z1zPU/b0pKu7m+A
D1nYScpoKAaWiF6wsHF2meiy6NivOHciG8MkfPfOAvkCEn5YGb0VIRZFgQPv9xe/
yhTsGdiVXKNwywEXGkR10NhTMLMfAhtn/P5neUs+3cijwCFsT8ruMEYxGedqr7zf
/IKCPtuZJznA4xgIh5Chk+1rOXVa/RzrT3MNAyceCAcJlOwkw25jg/hTEVTFzrNa
FDvJn7cKoiveDpfJQU/8GQLRB0IprXq03AjEnZ2aqMdfmDSMTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgQ41W0Je6ldFZvK1gE/T+LVyu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2UzODI3MTAtMjYzNy0z
NjZjLTlhNGQtYmMxMmI4ZTFkNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAjckcewLTeRL6E7Iootm+T/oHG3mfjE5SZzHr8ha3TxLGRSvXoo8xo
2Sf880fljPn6bgT9RhfZe/k6moXHB372zHOnUvQpVKmxFRxTTCb4ApAa+L0Wbe3b
xjBOpH/9+zWvbDGbIHQ+6D4/4/EaeaR1Nlstpe8qQv5O2tzT4poF5WxvWvkPxsjD
CL8+WUASp5qa+/MIglGR0hYay1gsP3+e0IFy7ANgz3Q4HTzC14H5tBZ2awMdd9UP
cJixqiGdhSa1gTQUjmYs4vAPRToosLlCrnW6iKSSS7+BmBsBoSCDWmWTofBbt0aq
gHiCX+qQl1URkoshIbimyKfdKIGJQIU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:13 2025 by rpki-client