Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
File: f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa (raw, json)
Hash identifier: A9WW9ElBdPx2EPyLtu4JEQKIgQ7VDXRytzBOoKPQM94=
Subject key identifier: 62:53:CA:96:BC:74:5D:06:3D:52:BD:44:BA:F2:D2:D5:5B:D8:7F:90
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584917DC35201B13DDFEF56171C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 30238
IP address blocks: 23.90.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:35:20:1b:13:dd:fe:f5:61:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=d44c879c-6b4a-4a19-bde9-0d8743be80c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:0d:b6:b9:ce:8e:54:e7:4a:c7:15:cc:58:
99:c6:8c:e3:f6:8f:61:67:fb:47:6e:e8:f9:02:7a:
89:b8:19:6f:c2:ff:a8:1b:17:85:eb:75:e1:c4:df:
53:56:73:de:b0:44:a3:76:d7:9e:3a:47:c8:d8:ff:
51:ce:c5:e9:83:41:77:80:b5:dc:5b:8b:91:8a:e6:
e0:1c:1b:8c:d7:dc:6f:4e:8d:29:b1:63:91:ce:5c:
20:18:7f:5f:d9:22:6c:64:55:79:eb:72:fe:b5:97:
a5:0b:4a:90:bc:4f:92:17:d0:db:51:9e:41:a5:a9:
5f:e4:64:65:1f:00:ef:b9:0d:8b:ce:6f:13:c7:5c:
b0:5f:f7:de:dd:b2:a3:e8:3f:13:61:c0:00:1c:4c:
a1:96:cc:25:f4:9c:59:d9:7f:7f:6d:7d:a9:e9:2f:
dd:ab:dc:00:0b:17:6e:3b:ec:eb:e9:92:ca:30:01:
40:25:e0:a9:f0:55:88:50:07:47:ed:77:db:9c:e8:
7e:37:65:6f:4f:dc:78:4a:e3:a5:e8:ce:3b:02:01:
b8:76:32:47:c8:cf:aa:63:06:8f:cb:5e:3a:dd:c7:
39:69:65:fb:a0:9d:2b:3a:07:f8:43:73:b4:1e:32:
e2:1f:03:5e:1b:16:70:2f:77:09:8b:b7:af:e6:c0:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:CA:96:BC:74:5D:06:3D:52:BD:44:BA:F2:D2:D5:5B:D8:7F:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:db:9a:f9:07:47:c6:bc:f9:18:6b:96:d0:af:50:a8:48:1d:
58:f2:2b:55:03:16:fa:e4:ba:a3:ea:fe:2e:21:ec:48:55:94:
ac:9a:76:9a:ee:bb:9b:c2:b3:09:67:79:c4:a3:5e:a6:c3:df:
b1:db:ad:44:9f:0b:4b:80:b0:9e:72:30:a4:e4:12:3f:d8:de:
43:ba:71:03:f6:b0:18:a7:f6:5c:a0:b3:bf:36:c0:4a:17:66:
ed:87:9b:e8:0e:e3:9d:96:13:37:08:68:e2:67:e6:ed:61:a0:
5b:15:58:ea:98:66:e8:4d:fa:59:e3:6a:02:11:a0:8b:a5:9c:
3b:79:e6:5e:88:8b:f5:01:b5:f0:63:92:a1:65:fe:a6:3a:c5:
8c:6a:e2:5b:51:a8:e9:f1:13:61:49:e6:7c:03:b0:a0:84:35:
e0:ec:c8:2e:eb:49:e6:90:0a:16:8e:6b:2e:12:f7:81:90:6c:
dd:66:c6:59:cb:e6:c0:56:e4:84:3a:c4:99:42:4a:dc:87:dc:
cc:a0:81:a1:7b:82:b7:0c:aa:ba:82:43:91:e9:c3:6e:8b:18:
fc:91:3d:d6:5c:d5:48:ee:fe:e3:f3:c5:d1:d4:c9:23:32:0c:
f1:b7:8e:7e:f6:fe:4f:bd:a3:65:6e:7f:c4:10:31:51:e3:d7:
53:1b:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:34 2025 by rpki-client