Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d078457f-645f-305c-a39c-b54901ecbcb2.roa
File: d078457f-645f-305c-a39c-b54901ecbcb2.roa (raw, json)
Hash identifier: GKjPhWMvsZ1v1Nnvq39nR7cwv1scZDcDBQgJnE8ahXc=
Subject key identifier: E7:C9:BA:1B:1C:85:D6:FB:BD:DC:A1:FD:AB:F8:81:4D:0A:1A:A7:B5
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584975445A5D8C706A783D628A20
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d078457f-645f-305c-a39c-b54901ecbcb2.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 16417
IP address blocks: 23.90.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:5a:5d:8c:70:6a:78:3d:62:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=ff403bfb-d704-4ba8-bee7-88edec2ac242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:00:d2:de:1a:22:8b:b5:9a:18:a0:6f:45:
46:25:ca:25:24:5f:83:b9:7d:3a:3c:c1:3d:bd:f1:
d0:b2:4e:94:7c:a5:3b:20:10:b9:30:ee:c6:b6:14:
13:3c:5c:3a:58:33:55:ee:53:83:2b:42:e1:75:0d:
4f:19:92:26:54:da:e8:9e:12:ad:af:b6:f6:36:a0:
d1:c2:27:b2:33:2a:cf:c5:ee:fc:b3:84:23:31:ef:
1d:c0:af:2b:a5:70:e1:57:72:34:e0:55:46:ca:eb:
27:bd:66:fe:f9:ed:bd:e4:ec:2a:ef:df:c9:b2:47:
75:f3:3b:d2:b4:43:77:29:b1:42:a0:94:fc:29:03:
f3:70:44:cb:5e:0a:7a:8c:7f:a0:b0:4e:33:bc:85:
b7:57:7b:ef:8a:33:ab:8f:75:1e:fc:97:fb:97:7f:
34:cb:e7:8e:ca:21:84:8d:21:88:66:3b:96:3f:99:
b6:9c:cf:c3:88:05:c9:43:38:55:15:b5:9f:13:d6:
ae:c1:e1:0e:f5:31:5b:b3:ab:ec:02:55:70:da:5a:
fa:2e:da:77:4a:66:90:1f:62:64:86:c0:e0:f7:67:
1f:b9:ff:0d:4d:81:03:e1:e9:50:fc:08:3a:a5:cf:
e2:eb:9a:b3:2c:d8:f2:f3:bc:09:94:e5:92:9b:dd:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:BA:1B:1C:85:D6:FB:BD:DC:A1:FD:AB:F8:81:4D:0A:1A:A7:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d078457f-645f-305c-a39c-b54901ecbcb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:93:6e:24:e6:92:b8:fb:1e:0a:cd:e9:62:6a:9b:d1:1d:d5:
be:06:94:d3:af:27:48:59:79:3c:75:e9:82:29:b7:6b:a7:f2:
f6:ce:52:4a:e0:2e:7d:54:89:8e:b3:43:ee:aa:19:0a:9d:d5:
68:83:7d:18:82:82:16:6d:4a:7e:72:36:e0:74:4c:85:be:c0:
c1:87:65:91:d3:6c:06:35:6b:72:4e:2a:3e:6d:1a:4d:b0:4a:
9b:fd:4f:88:8f:0e:12:64:66:c0:d3:3a:05:5f:c7:eb:e1:44:
10:62:23:a5:1b:af:e3:5a:f6:24:69:6e:c2:24:2c:a7:3d:89:
a5:04:a0:5a:46:45:26:aa:60:07:bf:ef:66:11:6e:ce:73:2b:
41:88:d0:04:21:45:b8:49:a4:5b:de:05:bd:0b:a7:bf:24:0c:
30:e5:0d:87:02:ec:9a:8d:84:b8:21:70:27:ec:48:a1:42:69:
13:ab:67:d0:35:97:4f:1a:e5:d9:ae:a1:0c:76:39:d5:36:3d:
b0:6f:4c:d2:73:be:9f:31:1d:58:d5:ed:d8:aa:da:79:ef:a3:
7d:fe:f6:31:e6:7d:52:6e:1e:8f:73:28:5a:34:8e:8c:c4:85:
cd:33:ac:47:86:22:80:2e:aa:d1:4e:77:da:d1:6c:35:22:28:
e0:0a:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:08 2025 by rpki-client on console.sobornost.net