Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/130a8500-ce56-3070-9f1e-c8b196152d66.roa
File: 130a8500-ce56-3070-9f1e-c8b196152d66.roa (raw, json)
Hash identifier: 3R1tdIeqZ1rj4rMGeFW/4Y71QcXhCmZc/MkxNkTQUts=
Subject key identifier: 89:21:1C:0A:42:C0:2E:03:6F:5D:7A:D9:A9:87:07:69:1F:20:E4:D0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AA352F7189CBF6C250A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/130a8500-ce56-3070-9f1e-c8b196152d66.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.90.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:aa:35:2f:71:89:cb:f6:c2:50:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=afdbf677-fdeb-4de0-9a63-10ed68e219cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:46:e2:56:40:62:91:60:11:6a:12:ee:1e:
29:13:0d:d1:f0:46:fb:26:b6:81:12:a0:76:c3:46:
38:68:6c:d6:14:dd:9e:33:06:82:ea:f4:cc:a0:20:
35:49:7c:2f:7e:b3:ad:b6:d4:0f:0d:d7:e0:58:2a:
92:05:11:90:6c:34:27:7d:13:4e:98:9f:f7:2e:94:
9f:c4:a3:d2:f0:54:b1:e9:6e:7d:f6:6d:88:48:7a:
7e:f6:e7:c8:dc:0b:a8:2d:62:a8:a0:38:27:71:cd:
64:21:8d:9d:48:56:68:4f:da:ad:d2:1b:4d:a4:ac:
24:c8:6c:76:e1:91:1f:f0:4a:4a:05:e4:75:32:3e:
e9:f1:cd:c2:58:83:7f:72:75:bf:5c:9f:7f:5d:85:
68:5c:08:93:00:af:89:36:e7:c9:f5:21:a8:42:34:
ca:33:7d:dd:6d:f2:20:ac:22:be:b6:1b:37:19:a3:
b9:04:6c:76:53:72:65:a9:c9:31:48:86:5f:a5:16:
f0:42:b8:28:0c:b5:87:23:6d:48:92:fc:88:cf:27:
40:8a:c9:01:17:58:7a:e5:34:3d:12:7e:e2:b0:6c:
41:c9:21:4a:6e:03:79:63:56:ea:69:a0:fd:d0:75:
14:13:36:c5:75:4f:96:83:da:38:d1:12:ff:f1:ba:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:1C:0A:42:C0:2E:03:6F:5D:7A:D9:A9:87:07:69:1F:20:E4:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/130a8500-ce56-3070-9f1e-c8b196152d66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.90.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:6f:58:56:05:40:22:df:16:92:b1:4a:4c:5e:1d:34:e0:67:
c0:81:a5:53:91:8f:e3:c5:cd:5f:c3:f0:9e:55:07:b8:8e:2f:
4d:08:06:75:24:d1:df:bd:6c:5f:bd:0e:d2:c0:cc:9d:4e:dd:
47:32:59:97:84:92:7e:5d:10:85:ef:22:73:bf:fe:c1:a9:a5:
75:04:08:a7:6a:a5:a7:60:6c:65:a9:60:5c:3f:1a:09:46:f4:
db:9a:3e:94:2c:01:3e:80:bf:30:74:a4:ae:7e:8e:0a:15:c9:
0e:2c:80:3e:c6:8a:36:dc:38:67:f5:ab:61:86:02:65:01:43:
27:db:0b:88:e7:7c:e9:a8:94:bb:ce:0f:fb:32:bf:43:fc:32:
82:98:98:54:26:ad:03:5a:59:6a:cf:0a:84:b4:42:b2:93:4e:
ba:26:cd:81:35:be:6e:53:6d:78:3e:15:50:31:e8:1b:3d:84:
c7:52:00:1b:81:0c:cf:2e:97:0a:ca:90:c7:49:65:dc:a1:97:
f6:db:fd:5a:df:bf:74:93:92:ce:b7:74:70:68:bc:e6:40:43:
f4:88:b7:b1:a1:cf:9e:5d:fa:65:62:e9:1b:e7:6e:41:e5:64:
ba:cb:8e:31:ef:83:69:68:69:20:28:91:12:07:f8:e1:14:5f:
ec:a0:a8:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1ao1L3GJy/bCUKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YWZkYmY2NzctZmRlYi00ZGUwLTlhNjMtMTBlZDY4ZTIxOWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21tG4lZAYpFgEWoS7h4pEw3R8Eb7JraBEqB2
w0Y4aGzWFN2eMwaC6vTMoCA1SXwvfrOtttQPDdfgWCqSBRGQbDQnfRNOmJ/3LpSf
xKPS8FSx6W599m2ISHp+9ufI3AuoLWKooDgncc1kIY2dSFZoT9qt0htNpKwkyGx2
4ZEf8EpKBeR1Mj7p8c3CWIN/cnW/XJ9/XYVoXAiTAK+JNufJ9SGoQjTKM33dbfIg
rCK+ths3GaO5BGx2U3JlqckxSIZfpRbwQrgoDLWHI21IkvyIzydAiskBF1h65TQ9
En7isGxBySFKbgN5Y1bqaaD90HUUEzbFdU+Wg9o40RL/8bpNIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkhHApCwC4Db1162amHB2kfIOTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTMwYTg1MDAtY2U1Ni0z
MDcwLTlmMWUtYzhiMTk2MTUyZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFoFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJvWFYFQCLfFpKxSkxeHTTgZ8CBpVORj+PFzV/D8J5VB7iOL00IBnUk
0d+9bF+9DtLAzJ1O3UcyWZeEkn5dEIXvInO//sGppXUECKdqpadgbGWpYFw/GglG
9NuaPpQsAT6AvzB0pK5+jgoVyQ4sgD7GijbcOGf1q2GGAmUBQyfbC4jnfOmolLvO
D/syv0P8MoKYmFQmrQNaWWrPCoS0QrKTTromzYE1vm5TbXg+FVAx6Bs9hMdSABuB
DM8ulwrKkMdJZdyhl/bb/Vrfv3STks63dHBovOZAQ/SIt7Ghz55d+mVi6RvnbkHl
ZLrLjjHvg2loaSAokRIH+OEUX+ygqKY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:41 2025 by rpki-client