Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
File: a455dd01-9d1c-3f67-be86-99d30a672de5.roa (raw, json)
Hash identifier: y0B1UHuO3Pj4x+8q9p8TL1SA4lB0z+uPi79+IHEOvgE=
Subject key identifier: 3B:F9:19:59:A5:F0:37:28:8B:13:0C:A7:25:AF:C5:75:EB:09:24:A6
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584975445A497ED260070CCAE840
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 16417
IP address blocks: 23.90.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:5a:49:7e:d2:60:07:0c:ca:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=138dcaf7-fdc7-42d7-865e-7b4b17bd3619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:fb:06:47:35:e9:56:b7:6a:4e:57:5a:f6:
88:5b:81:f3:26:24:f1:7a:47:37:31:19:48:27:fc:
e3:db:ab:56:b0:47:8d:4b:d8:6b:f6:a0:f6:33:b2:
be:82:00:dd:95:bb:e6:23:f0:44:2c:62:c8:65:64:
51:2a:6f:74:e5:5e:2f:33:d1:62:4d:55:ed:4c:f5:
b3:1d:f5:1d:13:b6:59:fe:99:ec:77:9f:16:3f:36:
bf:dd:51:12:2b:93:dd:fc:0b:ae:90:b3:75:22:4d:
34:20:33:da:6c:20:3d:55:61:68:3a:68:19:47:c9:
a7:b4:65:d2:e8:c0:20:f4:94:15:59:57:3c:29:6d:
5f:ff:43:4e:c4:9a:11:85:67:2e:0b:3a:63:41:4b:
ee:58:b0:a3:39:b6:b9:bb:e2:f0:ac:1d:4b:88:71:
9c:5f:d1:3b:88:8a:21:39:7e:92:45:9e:74:74:88:
46:57:f2:e0:ec:4f:49:a2:8e:b2:18:6b:c1:6b:c6:
7a:19:bc:03:45:52:b7:91:a1:0d:ac:7f:7a:6f:9e:
f9:46:b1:29:95:38:91:9d:be:f6:9d:d5:d5:71:5a:
69:bf:9d:25:b8:6c:ea:63:53:f9:a0:f5:a3:79:67:
c4:84:77:56:4a:ed:d5:04:c0:45:9d:c9:11:ad:77:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:19:59:A5:F0:37:28:8B:13:0C:A7:25:AF:C5:75:EB:09:24:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:9a:88:44:0f:ad:d2:72:05:55:0d:55:65:b1:3c:7b:d9:7e:
c2:c0:42:a0:24:e8:a2:13:c9:c9:10:57:be:59:f2:aa:fa:af:
e1:e6:f4:ca:34:a8:c4:5c:4f:72:83:c1:f7:03:29:8b:69:b2:
e3:6a:7d:01:a1:d8:52:88:aa:1b:2f:ba:0a:e7:d2:7f:19:10:
d5:a4:13:e2:83:fd:11:82:7c:66:2e:57:9f:df:07:5f:b7:9a:
c2:ea:d5:4a:1a:a4:a0:bf:ab:de:8a:e5:d7:64:5b:8f:d6:39:
40:2c:60:94:1b:41:12:e7:cd:31:20:ea:34:ba:cd:f4:83:d7:
ec:75:3b:0b:55:80:f7:8f:d8:19:7f:78:e7:bf:5c:6b:6b:b7:
50:98:7a:c3:6c:a9:4f:66:24:cc:01:43:c5:70:e3:51:4c:c5:
42:4a:2f:01:b2:b1:76:43:16:05:26:d2:b6:af:b7:74:bb:96:
d2:1b:b5:cd:46:c0:90:00:a3:7a:87:dc:f0:c3:75:37:e3:07:
ba:8e:39:4f:92:eb:84:a0:94:af:8b:40:ea:08:7b:b8:2f:8d:
d2:c7:bd:9e:9e:9e:08:a7:e5:19:60:81:5f:6c:f2:ba:b9:1e:
8b:c5:4c:c1:4a:30:6e:78:25:e0:e7:cb:86:5e:bc:4a:c3:f3:
24:a6:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:08 2025 by rpki-client on console.sobornost.net