Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa
File: fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa (raw, json)
Hash identifier: XHiWYspeKjaoucDt4TbixcyTP1PPV6YvSc05d8Du77s=
Subject key identifier: E9:25:A6:05:DA:E8:93:91:BE:36:55:A8:48:B4:9B:D0:E7:9F:99:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC0CF791E1D635AB20160
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.91.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c0:cf:79:1e:1d:63:5a:b2:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f85510be-8565-40f4-8ffd-914439bcd918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:41:5d:ae:83:60:90:46:e9:b2:29:4f:a1:
11:47:39:35:6b:8e:05:74:2b:77:1f:2c:67:7a:e8:
ae:f6:cc:6e:32:18:b9:87:52:39:e2:0e:21:35:d7:
fc:bd:d9:84:37:25:6e:2f:f4:be:ad:61:dd:b4:ba:
b5:46:f1:ee:e6:3d:c7:49:9b:48:41:c8:92:d3:18:
ce:20:4c:68:13:6a:d5:ba:68:b8:5c:b0:73:bd:c6:
85:a3:8e:5f:7a:ae:44:b8:49:2c:d7:a5:81:04:07:
a0:b2:6e:e3:05:66:25:d7:e3:da:cd:0c:91:8b:f4:
fc:91:1c:0e:9d:d7:1e:a0:af:62:80:e8:25:40:8f:
24:6f:c5:50:78:c9:ba:a3:e8:8e:cc:dc:91:57:40:
4d:72:d0:76:62:3f:18:6a:fe:11:3a:07:00:be:50:
c9:54:ed:26:fa:5a:dc:34:a2:71:bd:4e:42:7d:f2:
ba:1a:b2:ce:de:50:e7:fe:ae:4e:fd:7c:78:55:1f:
02:bd:be:3d:ef:48:b4:50:6a:18:bb:eb:d6:8c:90:
92:9a:c2:a1:76:ca:4a:bf:76:24:00:cc:6d:83:7c:
df:42:e4:3f:94:a9:66:6b:71:c4:36:15:44:99:2a:
40:0a:ec:4e:36:09:a2:73:3f:65:eb:f7:88:3d:93:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:25:A6:05:DA:E8:93:91:BE:36:55:A8:48:B4:9B:D0:E7:9F:99:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0b5a74-a007-323a-8295-3df4ab6c2e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.91.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:7e:70:78:7c:c4:da:e8:3d:65:23:d6:e2:c9:96:75:be:1b:
ab:46:da:67:48:84:02:14:b2:13:37:11:fd:61:5e:2c:5c:39:
ba:b7:a0:f0:c1:cd:69:b2:e6:c7:26:a5:8c:eb:b7:61:70:69:
a4:34:01:6d:b5:49:5f:dd:d5:47:8e:8f:9d:95:35:b9:e2:7a:
53:de:a5:88:66:20:7b:36:64:bb:a0:41:9d:2a:80:b6:9a:f0:
3c:5d:8a:6b:cc:df:eb:46:77:c2:cd:9d:b5:70:c5:3b:a4:0a:
6f:81:86:e4:43:28:26:74:05:12:44:bf:84:c7:af:29:52:58:
89:87:e8:ee:46:51:dd:76:00:fc:77:65:7b:f6:8d:80:37:89:
8b:1e:8d:e1:5f:70:cf:b2:d4:1d:c5:69:ad:bd:b5:04:8c:e0:
8d:61:bb:67:b4:75:b6:44:f3:db:97:1e:ff:f9:6d:4e:98:be:
d7:a7:c8:2a:41:fa:73:ed:f8:31:1d:a8:19:13:1e:ad:a8:86:
40:1c:57:53:f1:f2:cf:47:25:0c:30:bc:f1:46:60:63:fd:d5:
81:94:fd:22:af:15:d7:07:31:f9:05:3f:40:6a:89:62:7d:63:
d9:f7:41:84:10:bd:44:72:bb:fa:87:a6:50:7b:02:71:33:db:
95:54:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:10 2025 by rpki-client