Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa
File: 90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa (raw, json)
Hash identifier: BRhG4fnF4UIhipYPhD+96fQMU/DEWS2z+UKCrxolDPQ=
Subject key identifier: A3:43:56:C6:80:9D:D7:72:67:B8:F8:4A:1E:08:09:18:3D:EC:B3:53
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584838854EDFDE3EDC3798416280
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 20473
IP address blocks: 8.9.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4e:df:de:3e:dc:37:98:41:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=4e463cc5-14ee-4186-acef-92a124166940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:75:de:52:2c:0e:5e:e2:33:56:56:eb:97:
d4:1d:07:16:47:7f:75:85:32:a1:54:2e:9c:94:81:
f6:8d:3f:be:72:88:bb:ce:a0:b2:01:2c:59:ef:2a:
d5:0e:00:61:fd:8e:19:c2:24:7d:c1:8c:54:73:98:
98:93:a6:dd:06:30:c3:9c:49:53:36:58:9a:0d:d9:
5b:47:2b:5f:2d:d3:bf:9f:4e:a9:31:75:9e:d2:f4:
2b:8a:07:e9:79:18:5e:04:f8:5b:de:83:be:6c:37:
0e:c3:d3:91:f5:b8:a2:a2:ab:8f:82:05:aa:8f:69:
93:d0:7d:a8:4a:66:fe:8f:f7:f3:9a:6a:61:21:db:
37:d2:d6:c7:81:73:58:ac:69:9f:4b:7f:b8:4e:70:
f9:dd:34:ac:66:6d:64:05:42:0f:cf:1b:23:c2:76:
2f:8e:5a:b8:29:9f:ea:fc:11:27:54:e0:68:3b:9e:
3b:98:34:4f:fc:5e:f0:c2:f2:fd:a1:45:bc:f6:de:
f4:20:9d:2c:a2:f9:ab:b1:fd:e1:09:b6:8b:9d:0d:
51:4c:14:d9:d3:2a:cf:b7:e3:11:64:99:17:6d:51:
ce:d3:3f:f8:e3:8f:a9:c8:28:65:2f:c6:3a:7e:2e:
05:3d:cd:d6:3a:7e:ca:fb:73:23:09:d6:0c:29:30:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:56:C6:80:9D:D7:72:67:B8:F8:4A:1E:08:09:18:3D:EC:B3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.9.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:eb:7c:75:5b:95:7f:2d:98:1b:c6:7f:2b:ac:81:ff:99:88:
c4:d2:55:4c:96:65:43:31:86:1e:e0:3f:78:5b:3a:26:c2:e2:
42:81:fd:af:4f:b7:fb:a5:80:9a:af:9c:94:8b:e4:8e:1d:55:
2e:2f:08:13:b1:f2:9d:a7:1d:5c:56:7c:a0:de:09:59:df:8d:
cf:5a:ce:4c:dc:a9:76:49:7a:84:16:87:08:68:81:9f:95:46:
c4:76:7e:cf:f2:62:2a:a7:c1:0d:6d:6c:a4:b0:b4:e6:4b:1a:
df:79:31:9c:d7:fe:d4:98:fa:8c:d5:f0:30:0d:23:e3:93:9b:
fc:5e:d2:ad:a3:1b:71:22:70:bc:65:55:2f:26:6a:d8:37:d5:
51:84:96:ce:c3:db:20:f5:a6:36:10:c5:93:f7:36:13:08:e0:
a7:8e:82:53:97:fe:c6:ac:86:f5:9f:42:c4:76:82:c5:11:87:
8e:1d:e0:55:b5:90:9e:f5:b3:97:f1:66:6a:4f:ff:37:8d:77:
24:64:a0:0e:6a:3d:5f:81:31:f0:25:97:b9:5e:6b:dc:8a:c2:
ee:7e:53:f6:15:ed:6a:03:d9:ca:99:c1:75:9b:ba:61:a3:e6:
6c:bc:07:00:0d:58:02:2d:56:01:98:d3:2a:96:6d:19:81:8c:
54:80:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:02 2025 by rpki-client