Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b9228d1-a9ff-3076-b22a-de1957fc4a22.roa
File: 4b9228d1-a9ff-3076-b22a-de1957fc4a22.roa (raw, json)
Hash identifier: 0KYalShmqVs4FGO/TaNJEt+fRDFwlgH5sWt+xRRr1tg=
Subject key identifier: 89:98:67:B4:7E:A0:A8:F4:C9:54:C7:DB:15:E3:6C:93:89:BC:83:75
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5ABB58CF3DC5D39D30F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b9228d1-a9ff-3076-b22a-de1957fc4a22.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.91.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ab:b5:8c:f3:dc:5d:39:d3:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=2d151d87-3bbf-4eb6-8cd5-1b89f4b2156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:cb:fd:06:95:d0:bd:77:6f:e2:57:5b:b7:
e4:05:53:1f:01:49:34:59:ba:c7:3e:42:80:96:a3:
1b:8d:9d:a6:2f:ae:32:66:2a:bf:19:21:27:97:b7:
70:4e:d3:f1:58:41:c2:c2:04:d2:28:d2:ec:ab:98:
97:fb:d1:e0:93:67:77:c9:c1:60:77:93:bf:33:ae:
06:5f:e0:3f:63:e4:23:a8:1b:e4:e7:82:66:64:7f:
55:a0:79:66:78:c0:85:12:e0:44:49:e8:33:47:02:
0f:2c:13:dc:b1:50:52:78:7d:88:32:3d:75:96:f8:
19:e0:5d:9b:37:33:2f:16:3a:b6:4b:38:af:e0:a0:
38:f7:ac:5a:d8:52:fa:86:e2:73:be:7a:2e:8a:4a:
ff:e0:ee:b8:aa:4a:44:45:c0:0f:b5:dd:19:42:7f:
f7:ca:7f:0d:b6:61:8c:38:d2:fc:c4:27:77:11:f4:
d7:00:56:36:ed:e0:92:e7:b7:63:57:7d:a0:05:a0:
5f:28:12:4c:9f:99:e3:2f:a2:6d:06:66:30:c7:a7:
9f:9d:16:72:0f:8c:e2:55:5f:2f:36:0a:5c:9e:a0:
be:37:20:de:46:d3:9b:90:05:c0:6d:40:6f:8b:92:
7f:4d:56:f8:7e:fd:19:b5:ba:28:51:5e:a0:9c:06:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:67:B4:7E:A0:A8:F4:C9:54:C7:DB:15:E3:6C:93:89:BC:83:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b9228d1-a9ff-3076-b22a-de1957fc4a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.91.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:fd:f6:b2:f5:26:53:a3:25:36:44:d0:7b:2f:9e:ee:39:27:
19:53:6f:73:de:32:91:e3:4c:79:77:b1:f7:a3:b4:3c:19:04:
09:12:df:76:ae:03:47:59:8f:2e:9a:53:75:ab:5b:b1:6e:e7:
9b:e4:93:49:93:af:ce:b7:19:fc:75:61:e0:57:04:a6:ef:eb:
e0:a2:63:35:e1:61:13:b9:5c:0f:1d:f9:10:c2:12:38:ef:b5:
91:93:e1:1f:b0:d3:c8:86:e5:79:39:ae:ae:f8:2e:de:24:c7:
a9:fd:b0:b0:41:8a:d8:0e:d5:c0:00:7d:bc:10:97:d1:1c:7a:
94:a8:39:f3:3d:fe:27:68:47:6f:fa:49:6e:7c:d1:c7:2e:51:
8d:31:29:11:07:5b:41:fc:0d:6e:c8:d7:ce:91:be:a6:db:88:
73:18:73:c6:ab:b9:52:83:ca:c2:69:94:ad:97:4f:62:cd:26:
82:d3:64:fd:a7:d8:65:59:6f:60:df:d2:e6:b0:48:e2:c1:49:
1e:74:96:ba:29:88:cf:aa:b3:89:57:23:c4:0f:5b:bb:ea:e5:
67:84:8c:43:70:18:97:7d:ce:b4:5e:aa:f3:59:98:73:af:95:
89:c3:6a:7d:4b:82:ae:16:b0:2f:3f:55:be:2d:39:7a:97:10:
67:ed:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:51 2025 by rpki-client