Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/aaacb076-92f6-3a56-be1e-7bc755a9876d.roa
File: aaacb076-92f6-3a56-be1e-7bc755a9876d.roa (raw, json)
Hash identifier: 3BausEJW5+CL1Z6oJSiRNYYeaQofJZobPFt3vj2WSd4=
Subject key identifier: 86:C9:80:84:A3:0E:52:FC:31:65:71:98:28:20:B7:CB:22:64:7B:2A
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584950F96CFCCE6553BE71E55700
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/aaacb076-92f6-3a56-be1e-7bc755a9876d.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 30215
IP address blocks: 23.90.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6c:fc:ce:65:53:be:71:e5:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=ada56fec-2d2f-4a9c-9b22-039b40716ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:43:ad:21:e7:b5:8e:97:ff:d3:f0:67:cf:
b1:a1:28:b4:0e:77:c4:22:54:79:3d:48:9e:34:5f:
a9:48:bf:cd:41:50:8d:73:44:08:89:55:9b:60:59:
9c:aa:95:15:a1:6c:6b:3a:4d:5b:d4:ef:e2:ee:78:
5a:28:a8:1d:aa:eb:d8:df:a1:d2:5a:90:a3:55:da:
ac:92:e4:01:93:12:8d:41:ae:d2:d2:e7:68:64:23:
18:50:e3:f3:0b:e3:2f:e6:57:80:1b:a5:20:cd:b5:
d6:cd:93:41:02:66:15:f5:5d:22:b8:2b:08:07:a4:
a1:5e:97:8f:bf:21:70:b7:32:19:8c:3b:62:7c:5e:
f8:5b:b9:8c:67:c2:e3:20:e4:b0:16:98:b5:f1:b0:
a6:33:99:62:c4:14:53:1e:4b:83:21:b3:9f:8e:e2:
0e:bf:da:3a:b3:48:1c:d8:04:8f:05:d4:6f:cc:e0:
77:dd:f6:3c:59:38:ce:90:db:ad:72:d1:fd:8e:96:
28:c2:89:a7:85:bb:54:e5:b6:2d:b1:e2:34:55:8f:
ff:94:de:b3:73:ec:b3:93:2e:6a:18:05:64:bd:8a:
70:6f:3c:de:bb:75:5a:98:fe:26:d4:36:29:ca:22:
2b:62:1f:fc:93:9a:ea:2f:95:6d:9d:23:c2:35:50:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C9:80:84:A3:0E:52:FC:31:65:71:98:28:20:B7:CB:22:64:7B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/aaacb076-92f6-3a56-be1e-7bc755a9876d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:df:26:a5:75:c4:6a:18:32:00:cf:26:5d:a7:d3:68:b3:b1:
78:72:6f:44:23:0f:51:c7:2e:72:7f:76:39:36:ba:9e:ad:84:
71:51:fa:34:17:69:b2:e9:4f:14:b2:1a:6f:41:0d:15:61:0e:
26:bf:27:c5:28:86:ae:8e:7e:38:65:f6:77:3c:e9:5a:a4:05:
f7:67:39:7e:bc:91:fc:24:7d:c3:31:a5:0a:94:7d:32:2c:c7:
78:09:d9:26:57:5c:3a:57:17:0b:91:35:dd:f6:76:78:1f:0f:
8e:e2:05:0f:0a:c8:93:07:28:cb:b3:dc:47:08:97:8d:27:0b:
73:d0:45:55:1e:eb:22:30:e0:e6:53:ce:ca:c2:48:ad:80:02:
8f:93:d4:75:a1:52:9a:af:30:89:7e:b7:6e:70:26:06:4c:a9:
f7:44:a7:ec:4f:e9:16:11:0c:4c:01:1f:5c:ff:25:73:03:61:
d2:92:77:0c:5d:4c:cb:80:05:a5:83:8d:0b:ec:c7:82:20:b0:
c6:a0:26:f0:48:f5:87:f7:83:d9:0f:69:86:60:c4:dc:2a:a4:
8a:0f:fc:b3:a5:f9:01:34:24:bf:36:69:15:d9:50:cc:99:0d:
56:60:23:15:4c:26:80:d4:54:db:8a:56:78:a9:c7:28:bd:98:
18:83:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:08 2025 by rpki-client