Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa
File: 189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa (raw, json)
Hash identifier: 8UPAKZlo/nTM19HDbfSekGtvXfPgu0oz9vBN3UnOCJY=
Subject key identifier: 69:A9:9C:93:7F:60:A2:23:8C:29:65:54:84:48:B9:82:8A:E5:94:93
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD16FCAE57B3775B484C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 23.90.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d1:6f:ca:e5:7b:37:75:b4:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=f09515d8-1295-4a64-bc2a-8dc527e091d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:72:a4:06:ca:20:8b:ee:69:02:f0:71:fb:
66:3d:54:13:a2:d9:41:59:38:c2:4b:7e:0e:c7:b4:
ef:3b:51:0d:d2:bc:89:00:6d:89:83:88:89:8c:9e:
a0:b0:a9:c8:b1:96:4d:c8:87:3d:b8:03:ed:ca:14:
93:a6:86:9e:5c:11:e4:a8:65:3a:2d:85:09:63:04:
95:61:83:4a:71:25:1a:20:a6:b2:ab:fa:78:ce:1b:
c7:ff:fc:78:db:1f:37:52:0e:d2:2b:4a:e9:8a:c0:
6c:33:3b:19:6f:61:4c:7f:32:3f:f6:e4:f7:d9:25:
58:04:83:b4:f8:17:b2:89:36:ac:f2:ed:c8:7e:9f:
72:a5:60:dc:71:52:c2:b7:4b:56:54:c8:08:61:79:
5d:0b:20:27:d0:09:c9:7f:62:0c:89:18:af:7b:0e:
2d:9a:64:f8:75:1c:cb:85:a6:fc:a2:a0:5d:08:9f:
86:d5:01:92:b0:71:13:24:46:6d:06:48:1d:fc:15:
bb:d5:a6:3c:fb:a7:70:fe:30:65:be:bd:12:ab:94:
7d:ef:f7:84:f4:3c:f3:30:56:84:56:5a:ce:58:b7:
c2:6d:6c:f5:89:25:9f:41:ba:25:60:f6:c8:ca:f2:
18:98:7c:73:14:7f:3a:47:09:f3:8e:15:ca:2d:ad:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:9C:93:7F:60:A2:23:8C:29:65:54:84:48:B9:82:8A:E5:94:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5a:67:43:d2:6c:53:fd:cf:e0:ac:bf:1b:c7:bc:fc:23:9d:
bf:04:b3:4c:8b:79:0f:75:7a:98:e1:04:d3:72:74:25:c6:11:
ec:6a:06:b3:8b:67:9d:2d:7a:4b:39:ff:2b:b3:19:bf:81:35:
ff:95:db:da:a8:5d:bc:c0:d3:b1:c0:c6:83:d0:f0:95:25:44:
86:10:72:c6:07:8b:5f:c5:d9:ca:b2:77:7c:d1:1c:f2:d2:45:
aa:11:1e:b5:10:ed:01:07:ef:88:a9:b2:a7:80:7e:cc:7b:bf:
fc:66:97:14:3a:82:d5:02:4f:aa:3d:75:bd:a2:40:0d:0f:95:
c6:4a:9b:12:25:3d:e4:95:91:50:b2:f7:e2:8e:20:3d:70:56:
c7:1a:54:04:4d:c8:37:b5:cc:4b:37:2f:d3:e5:40:90:eb:91:
ef:df:49:e9:24:b5:30:e3:e5:52:69:a2:87:cd:2d:b0:98:a6:
dd:fb:05:0a:3b:a7:67:fd:cc:b0:c0:c6:a9:0a:c5:06:de:16:
2f:3e:c5:3e:1e:b6:4e:2b:76:c9:4b:25:c6:6e:ca:6b:20:92:
56:9a:80:92:27:85:af:a5:97:3c:05:97:5f:0b:15:ac:44:0b:
71:b2:f9:bf:b9:d0:6d:88:e0:46:dc:7b:bb:8b:98:e2:c3:39:
a0:4f:a5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:07 2025 by rpki-client on console.sobornost.net