Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/289c9239-2dd4-3e61-ac0b-042bd821526e.roa
File: 289c9239-2dd4-3e61-ac0b-042bd821526e.roa (raw, json)
Hash identifier: +P7s5fQNgH/nJTte6IMxawbaLMJM1+StiHg24OJpw7k=
Subject key identifier: 29:A7:72:A6:E4:EB:44:44:CB:50:60:77:8D:F9:7B:65:0F:1E:74:BA
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858494E2EB2F46823B2208CAD09A0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/289c9239-2dd4-3e61-ac0b-042bd821526e.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 30215
IP address blocks: 23.90.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b2:f4:68:23:b2:20:8c:ad:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=95a6396b-e4c9-45af-959e-626ec67c6751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:0e:38:24:fe:b5:c5:30:6c:ed:4e:10:60:
01:19:48:1d:ec:33:eb:13:cd:5d:67:f7:71:6b:ab:
b0:ce:0c:f8:cb:78:59:e7:8a:36:03:4d:a6:71:43:
7c:9c:14:fc:61:c7:bf:71:dd:85:e9:98:3f:75:00:
7d:d5:92:cb:8b:17:17:40:da:33:40:4b:7a:d6:a5:
2c:67:8c:79:e4:d3:58:64:03:b5:27:c1:75:98:6b:
ac:a1:6d:18:fa:35:85:fc:ed:cd:40:2e:0c:e1:30:
47:d3:94:35:6c:59:a3:ba:83:41:29:76:f6:7a:b4:
1b:de:cc:33:57:67:3b:4c:03:e0:3d:ec:1d:b3:ea:
2f:6f:14:3d:b1:79:6c:46:17:c4:18:fd:f1:6f:42:
9a:53:9c:a7:e8:3d:01:47:80:ae:87:f4:b1:e5:53:
51:e3:c9:d2:af:3f:60:4b:63:db:0e:0d:33:a1:41:
aa:ac:ca:82:db:ef:1b:65:56:dc:dc:15:9e:a8:8e:
1c:44:02:c7:0a:fe:26:31:62:9f:1f:32:16:fa:a2:
93:fd:dd:ed:5f:e3:bf:75:8f:94:9a:0b:8f:02:0d:
42:6d:31:2c:83:30:be:b2:a8:c6:24:54:5f:89:60:
96:8a:03:21:2d:61:41:d4:b1:56:81:d9:58:8b:60:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:72:A6:E4:EB:44:44:CB:50:60:77:8D:F9:7B:65:0F:1E:74:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/289c9239-2dd4-3e61-ac0b-042bd821526e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:1e:5e:41:7a:05:e8:00:b3:e0:e6:6c:3b:fe:43:1e:0a:b0:
7e:87:3c:58:d6:86:88:a8:43:94:e7:c2:94:63:44:f8:12:3a:
9e:77:63:39:34:ed:43:e5:d4:91:26:96:85:ad:f4:43:e5:5d:
37:ff:f3:3a:4b:cd:3d:f0:38:97:37:f9:1b:12:64:32:d4:f9:
10:42:be:89:1b:dd:e8:23:32:2b:0b:ad:b7:9d:8a:ff:14:79:
f9:10:f3:3f:27:86:79:a7:73:88:3b:bb:66:fc:3b:e9:4e:5e:
a9:da:31:5c:57:6c:da:68:ea:4b:e7:cb:d6:c4:e4:b2:89:1a:
a1:74:c7:dc:33:30:45:80:51:f8:c7:9f:92:8e:dd:d2:70:2d:
50:7f:f3:1b:19:9e:cb:ca:13:23:70:88:17:00:a3:6a:5f:1e:
24:c5:2b:38:c0:d9:1e:e0:9a:35:c3:61:5e:d4:a8:19:06:36:
85:2d:9d:0f:fe:78:b6:e0:c4:ea:28:64:04:71:ea:20:2b:66:
e7:83:cc:cc:ee:1f:2c:0f:de:a1:45:c5:53:26:67:40:e3:7f:
58:26:fb:48:62:5e:00:ac:8b:18:3f:76:3f:11:6b:e5:9a:d0:
f4:ac:97:85:2b:e2:c8:73:a4:55:09:16:9c:47:ea:a6:4a:b9:
3c:15:b7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:07 2025 by rpki-client on console.sobornost.net