Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa
File: fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa (raw, json)
Hash identifier: KnmCJKg7cfNt7e2Ha56UXfnhi9/bX7nR7aM++kir90M=
Subject key identifier: 3C:CE:D8:58:F2:39:1F:5F:C9:98:75:45:EE:61:1D:AC:BC:D2:A0:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B5A1D3AEDB72E3606C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.91.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b5:a1:d3:ae:db:72:e3:60:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=14a3f3e0-893e-4abc-852f-fa7706ebfac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:8d:06:5d:14:f9:2d:da:3b:37:e4:22:c9:
85:78:79:4b:0f:3a:60:66:11:91:e4:c0:67:58:40:
db:65:da:4e:22:b2:ce:4c:34:c9:6c:c2:21:5c:2d:
02:8a:04:c7:d4:ea:fd:e3:f6:c3:18:42:56:78:05:
dd:24:bd:32:2f:a0:ab:b6:4e:c7:b8:10:59:c1:25:
a0:cb:02:08:d5:84:c0:95:f2:56:11:5d:c7:35:5b:
60:ac:6e:c5:b3:eb:3f:1d:90:3b:47:27:5f:dc:4a:
34:10:e9:ae:6c:09:a5:e8:28:b5:1f:cb:81:1c:52:
d6:68:98:63:9f:39:48:a3:ab:49:5a:0d:97:6b:fb:
0d:e2:1f:5d:a9:5a:42:79:81:d9:5b:63:8c:de:9a:
13:ac:1d:b7:19:95:2c:ac:fa:87:eb:b8:16:70:42:
9f:6f:70:20:df:40:ab:71:29:cf:3a:aa:67:0d:75:
96:ed:86:bc:1b:26:8f:c8:4d:0c:8d:d4:5e:51:6b:
d0:6d:64:23:54:3d:79:dd:ac:29:a6:44:58:4a:9b:
ee:53:5d:5c:9d:40:ed:07:19:b7:ff:d7:87:96:8d:
c6:c9:2d:7b:85:52:07:d3:8e:20:4e:0d:8f:88:46:
a5:e0:c3:1f:42:5a:67:5f:16:9c:33:50:ba:ff:bf:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:D8:58:F2:39:1F:5F:C9:98:75:45:EE:61:1D:AC:BC:D2:A0:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.91.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c3:e6:8c:d6:b1:36:a7:f7:67:e9:3d:b1:67:3b:71:2f:f0:
9f:17:c6:dc:22:b1:29:92:5c:18:4e:f0:06:02:88:d4:0f:e0:
e6:dc:e8:ba:c6:7b:b6:3f:04:ed:17:ee:87:7f:da:24:32:46:
23:51:66:79:60:c3:e7:d9:a7:51:47:c0:b9:db:59:6a:6b:cf:
a2:ea:88:5d:90:38:8c:dc:42:52:66:40:ce:b4:98:39:32:c6:
bb:0e:5c:28:b2:dd:b6:4c:7d:42:40:4d:96:d8:7e:58:a7:e8:
18:08:f8:9f:ea:a9:2d:6a:53:94:21:98:59:10:34:e2:9c:a9:
5e:59:a2:f7:ef:b5:05:31:8c:cc:9b:7a:3d:bf:b9:43:cb:e4:
fc:90:de:81:da:8b:e4:38:5a:6a:c7:28:3d:b2:63:70:b4:87:
54:52:ca:1a:80:25:6f:75:cf:39:81:4f:9d:99:28:56:93:84:
5d:2f:1e:16:7b:9c:71:39:fc:14:43:3c:20:a6:df:45:70:30:
7d:43:df:fa:61:b0:37:ad:72:14:c6:94:62:7e:45:d6:e4:c4:
60:ac:e7:8e:fb:3f:69:0d:f0:45:c8:87:8b:14:08:fd:37:fd:
5a:ef:66:60:cb:46:54:a0:dc:fc:dc:99:24:79:7e:ec:ec:50:
b2:f1:66:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1bWh067bcuNgbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MTRhM2YzZTAtODkzZS00YWJjLTg1MmYtZmE3NzA2ZWJmYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg+NBl0U+S3aOzfkIsmFeHlLDzpgZhGR5MBn
WEDbZdpOIrLOTDTJbMIhXC0CigTH1Or94/bDGEJWeAXdJL0yL6Crtk7HuBBZwSWg
ywII1YTAlfJWEV3HNVtgrG7Fs+s/HZA7Rydf3Eo0EOmubAml6Ci1H8uBHFLWaJhj
nzlIo6tJWg2Xa/sN4h9dqVpCeYHZW2OM3poTrB23GZUsrPqH67gWcEKfb3Ag30Cr
cSnPOqpnDXWW7Ya8GyaPyE0MjdReUWvQbWQjVD153awppkRYSpvuU11cnUDtBxm3
/9eHlo3GyS17hVIH044gTg2PiEal4MMfQlpnXxacM1C6/7+WpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzO2FjyOR9fyZh1Re5hHay80qDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmEwYjVhNzQtYTAwNy0z
MjNhLTgyOTUtM2RmNGFiNmMyZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHD5ozWsTan92fpPbFnO3Ev8J8XxtwisSmSXBhO8AYCiNQP4Obc6LrG
e7Y/BO0X7od/2iQyRiNRZnlgw+fZp1FHwLnbWWprz6LqiF2QOIzcQlJmQM60mDky
xrsOXCiy3bZMfUJATZbYflin6BgI+J/qqS1qU5QhmFkQNOKcqV5ZovfvtQUxjMyb
ej2/uUPL5PyQ3oHai+Q4WmrHKD2yY3C0h1RSyhqAJW91zzmBT52ZKFaThF0vHhZ7
nHE5/BRDPCCm30VwMH1D3/phsDetchTGlGJ+RdbkxGCs5477P2kN8EXIh4sUCP03
/VrvZmDLRlSg3PzcmSR5fuzsULLxZj8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:02 2025 by rpki-client