Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ef6a8228-54f2-3d74-b766-75528515eeb6.roa
File: ef6a8228-54f2-3d74-b766-75528515eeb6.roa (raw, json)
Hash identifier: Iz0KepKE/PY+NOih3m2LhuUMZh4sXnfAsBRTCCtf4bo=
Subject key identifier: 57:9E:38:16:1D:25:C3:1A:5C:19:AE:BD:5C:EF:B3:7B:DF:5E:B5:D7
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE981C2950E99D15470680
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ef6a8228-54f2-3d74-b766-75528515eeb6.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 23.90.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:1c:29:50:e9:9d:15:47:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f37e57e6-be81-4a50-bcf6-6491b47b0c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:7f:c4:2b:a3:58:b9:64:c0:94:10:c2:0a:
4d:84:fd:18:ee:9e:f3:3b:93:c0:a0:e0:5a:4e:46:
6a:ea:61:cc:10:0e:d0:08:ad:55:1d:8e:74:01:3b:
76:64:26:0b:d5:6d:2b:76:37:a8:55:53:2c:cb:83:
d5:72:84:4b:ba:ea:3b:3f:0c:d5:fc:69:75:93:7b:
9d:87:18:d6:a2:3e:d2:c8:a0:44:8f:4a:91:1f:f3:
3b:c6:57:49:11:da:8e:c0:4d:f8:9f:37:05:c0:26:
68:e3:22:80:7a:d3:e6:cd:48:03:46:be:fa:6f:4b:
1f:17:cf:86:e6:64:3e:17:20:94:a0:08:db:f4:6c:
1b:be:2b:38:65:f7:31:a1:b4:15:e6:da:1e:12:7b:
7f:9b:3e:2d:31:56:6d:36:18:61:69:ee:4a:57:a2:
70:b0:ca:88:e4:c9:fa:dc:0f:a9:f2:3b:31:b6:ca:
f1:da:f2:20:9a:a8:88:a5:83:d0:50:87:ce:2c:5b:
1e:25:08:fd:7f:2f:d3:95:74:e2:b0:9b:10:28:d9:
bf:c1:ff:52:77:7b:c0:58:a3:35:06:42:2f:76:bb:
c8:4c:c1:c6:03:38:dc:b3:d7:c8:f6:08:0d:d1:dc:
6f:8d:e4:0a:f3:9e:bb:eb:27:36:09:be:58:e9:84:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9E:38:16:1D:25:C3:1A:5C:19:AE:BD:5C:EF:B3:7B:DF:5E:B5:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ef6a8228-54f2-3d74-b766-75528515eeb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:01:50:8e:f1:d7:e9:cd:c7:ff:45:23:ac:11:7e:ef:b3:18:
74:35:10:9b:ef:cb:95:02:fc:8a:77:4d:08:8b:cf:10:4e:94:
83:5a:35:fe:95:19:39:aa:84:ff:84:51:10:a7:82:bb:d1:21:
59:ec:26:27:55:74:34:4b:8e:83:fd:b8:a5:62:56:14:ac:09:
a8:71:0b:5e:0c:cb:8e:ec:bb:55:25:a4:90:c3:6f:2e:b0:d8:
74:69:cb:22:da:52:23:24:a4:4f:c1:26:bc:57:49:54:27:97:
e1:7d:5e:70:cc:a0:75:6a:78:01:59:10:b8:b4:06:5f:98:e8:
28:6f:c5:57:d8:ef:96:92:27:33:a4:1c:8e:99:f0:07:26:4a:
e9:34:9d:aa:dd:78:6f:0a:34:a8:5d:f6:83:d8:98:b1:be:85:
d0:24:e5:39:fd:70:38:18:d7:19:d8:67:02:58:e1:ff:21:5d:
83:85:72:2d:70:ca:4a:f5:47:95:1f:5b:0d:3e:4d:e2:4d:27:
56:dc:39:52:68:72:98:dc:ff:a0:b6:9b:a1:85:69:02:b2:56:
ca:82:52:18:92:6e:ea:e7:7a:97:26:48:c9:df:15:8c:59:81:
dc:a5:a5:93:0b:e5:8b:09:e5:37:e8:e6:4d:8f:5c:d6:bf:63:
57:31:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:37 2025 by rpki-client