Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9407ac41-d404-3eb0-8644-45f78be58c06.roa
File: 9407ac41-d404-3eb0-8644-45f78be58c06.roa (raw, json)
Hash identifier: BGRlGvpjEum5mxKlZqMfAgx0WXHXCD/CU/3xjDNDbTs=
Subject key identifier: 6E:E0:72:3F:FE:39:1D:4E:86:47:CF:C7:6D:37:70:7A:0D:ED:CF:B5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC0FEA4F903AB7AA44700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9407ac41-d404-3eb0-8644-45f78be58c06.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.91.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c0:fe:a4:f9:03:ab:7a:a4:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=96efefd7-24fb-4581-ac7a-255abf71b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:da:d3:c6:16:c8:ad:c4:fe:11:c1:20:6e:
10:24:28:c2:23:e7:ca:a3:e9:66:b1:14:0b:48:a8:
78:81:f2:de:f6:e5:9c:ca:ab:c4:6f:c3:61:e6:e4:
ec:d8:e5:46:89:73:c1:34:dc:14:84:a5:89:87:85:
32:16:f6:99:3f:85:73:3d:7c:84:85:7f:37:1f:a9:
74:8f:17:fc:ea:12:80:67:e2:ae:a6:9d:6d:a6:ba:
56:51:b4:d2:64:05:b8:7d:48:02:46:53:11:dd:aa:
25:ce:72:44:ad:4a:d2:5d:54:35:bc:ba:1f:7c:28:
2f:40:44:26:70:19:1d:d9:da:d6:aa:b0:7a:d4:7d:
44:80:e4:a0:47:3c:7d:ee:79:87:73:36:39:27:d5:
b1:7d:bf:53:64:95:6b:80:21:53:ba:3f:4e:a5:b7:
c2:04:a2:c9:72:2b:72:d4:3e:6d:e7:79:d7:89:b6:
b0:78:8f:95:a8:24:4d:b1:11:4e:c8:d4:b8:bb:46:
8b:50:a7:6a:c4:df:b0:dc:49:e8:9d:be:3e:8d:3c:
df:3f:f5:f9:5f:4f:49:32:59:4e:c9:62:e5:2d:52:
58:9e:01:6d:fc:ae:33:2e:87:dc:5a:02:ff:af:f5:
01:31:34:6a:18:b2:f1:d4:de:8c:d7:e6:ff:1d:c0:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E0:72:3F:FE:39:1D:4E:86:47:CF:C7:6D:37:70:7A:0D:ED:CF:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9407ac41-d404-3eb0-8644-45f78be58c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.91.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:8b:4e:79:f2:91:95:66:d7:40:a9:30:65:5b:1b:34:88:ae:
c5:00:0b:f3:4d:6d:7a:f9:39:42:f3:a1:7a:5d:e0:36:11:e9:
2a:ad:7b:3a:ff:80:e4:ff:3b:ff:dc:12:b9:90:f0:51:3e:47:
eb:8b:b1:a5:00:e6:9d:de:dd:51:a5:60:e3:84:aa:a9:46:c1:
bb:6d:cc:76:1a:e0:6c:97:fa:e8:20:51:99:0a:e7:20:6f:1f:
61:c9:47:20:26:29:84:b6:25:c1:3c:03:d0:52:20:67:f8:ea:
11:5f:f7:41:b3:d8:96:ae:6e:55:73:9f:0f:7a:6a:06:b6:88:
b2:12:28:4c:5f:9c:d2:9c:c3:62:06:89:49:e1:a2:c0:52:5c:
0b:26:d0:90:10:35:13:ae:35:49:ae:e3:78:1b:43:03:83:a0:
dd:35:be:22:df:cd:51:6f:10:b7:cf:df:65:c0:63:76:07:3d:
d1:11:9b:a1:d1:65:13:b3:b2:f3:d3:70:65:14:c2:35:2e:8c:
4c:f9:bd:5c:44:ef:7d:5d:af:fe:25:8d:30:e2:ea:41:84:02:
26:12:24:46:60:15:45:28:c7:6b:14:4c:dd:9a:80:06:95:2b:
32:93:50:35:e8:0f:76:b0:23:b4:c0:75:01:45:80:0c:ab:14:
7c:b8:6b:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DsD+pPkDq3qkRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OTZlZmVmZDctMjRmYi00NTgxLWFjN2EtMjU1YWJmNzFiOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCva08YWyK3E/hHBIG4QJCjCI+fKo+lmsRQL
SKh4gfLe9uWcyqvEb8Nh5uTs2OVGiXPBNNwUhKWJh4UyFvaZP4VzPXyEhX83H6l0
jxf86hKAZ+Kupp1tprpWUbTSZAW4fUgCRlMR3aolznJErUrSXVQ1vLoffCgvQEQm
cBkd2drWqrB61H1EgOSgRzx97nmHczY5J9Wxfb9TZJVrgCFTuj9OpbfCBKLJcity
1D5t53nXibaweI+VqCRNsRFOyNS4u0aLUKdqxN+w3Enonb4+jTzfP/X5X09JMllO
yWLlLVJYngFt/K4zLofcWgL/r/UBMTRqGLLx1N6M1+b/HcA+GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7gcj/+OR1OhkfPx203cHoN7c+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQwN2FjNDEtZDQwNC0z
ZWIwLTg2NDQtNDVmNzhiZTU4YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFtEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyLTnnykZVm10CpMGVbGzSIrsUAC/NNbXr5OULzoXpd4DYR6Sqtezr/
gOT/O//cErmQ8FE+R+uLsaUA5p3e3VGlYOOEqqlGwbttzHYa4GyX+uggUZkK5yBv
H2HJRyAmKYS2JcE8A9BSIGf46hFf90Gz2JaublVznw96aga2iLISKExfnNKcw2IG
iUnhosBSXAsm0JAQNROuNUmu43gbQwODoN01viLfzVFvELfP32XAY3YHPdERm6HR
ZROzsvPTcGUUwjUujEz5vVxE731dr/4ljTDi6kGEAiYSJEZgFUUox2sUTN2agAaV
KzKTUDXoD3awI7TAdQFFgAyrFHy4a8k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:18 2025 by rpki-client