Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
File: cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa (raw, json)
Hash identifier: eDZc55smGRSmujy9uRYIpTRpiww88bG7ONMJLvnbF7g=
Subject key identifier: 24:1F:B4:8D:B1:6B:75:1B:EF:65:43:34:A2:A7:B9:B2:D7:07:1C:62
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F43285848388547E51A17D4C52C623E00
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 32133
IP address blocks: 98.124.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:47:e5:1a:17:d4:c5:2c:62:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=525e76ad-f447-4680-a89c-c5198cde68d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:7f:72:7e:4c:02:45:58:36:d3:66:3a:28:
22:da:5d:90:ba:a0:d0:cd:5a:f2:a9:92:ba:fa:30:
96:9c:e7:be:3f:7f:4c:fb:12:f7:1b:3f:28:b9:56:
25:ea:c7:d0:8b:23:26:0f:1d:b6:a3:2b:fa:c9:b5:
22:fd:93:c2:ea:50:e3:8d:18:71:72:f6:8c:70:4d:
70:d6:fb:30:ad:26:46:f0:79:81:84:c7:e8:50:8d:
a6:f2:63:63:e8:50:ae:eb:04:e2:ce:9b:66:a4:a3:
de:2b:9b:6e:9e:15:ec:af:db:4b:9a:23:da:26:02:
d9:cd:07:cf:e8:6d:cd:99:53:c7:70:f6:12:c9:03:
b0:f5:2f:bd:ed:59:08:0f:f7:18:be:d0:ca:ab:cb:
3f:dd:6a:f3:3a:9c:88:8c:ae:f6:5d:3b:f5:2d:f5:
1b:c7:17:88:35:56:f0:dd:c7:d1:17:b8:bb:bb:30:
c0:c9:e7:db:ef:4f:50:b6:1e:e3:c0:d6:e3:bd:7a:
dd:7c:d3:c2:0e:50:18:fc:3b:8d:9c:b6:1d:77:3e:
ac:59:d8:0f:98:c9:e0:df:46:51:3b:35:0d:12:34:
94:75:ba:40:3d:4e:7a:48:78:a5:9c:9a:7c:a1:fc:
5a:18:07:84:13:f0:e6:b0:f7:09:6d:35:fb:36:dc:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:B4:8D:B1:6B:75:1B:EF:65:43:34:A2:A7:B9:B2:D7:07:1C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
98.124.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:9b:78:d2:5e:6d:30:f2:34:6a:2e:12:31:1a:53:7f:a4:a0:
75:b4:d0:e1:e2:2d:74:b6:df:8f:48:aa:65:7d:e3:24:41:7c:
42:5f:6a:71:ae:cf:94:cb:7a:8b:d8:c8:74:19:98:26:4a:4f:
52:e5:e1:e3:d5:2f:05:34:bb:63:0e:72:ec:8f:8a:f7:5c:ef:
85:9d:f8:84:46:21:ca:a6:d4:ce:19:ca:09:8e:7d:65:fd:67:
ee:82:ff:48:db:60:17:f5:60:1d:53:9e:db:36:36:c4:d5:61:
46:8f:b4:0f:7a:43:dc:e7:dd:24:e1:80:35:7a:24:f7:e8:89:
69:88:4a:fd:6a:9d:55:1f:ce:e2:28:42:20:61:bd:6d:18:3e:
37:37:d9:e0:38:ca:c2:41:c2:53:17:b1:94:08:c5:f0:0a:4d:
50:14:59:c5:a4:f2:24:9d:d0:75:46:47:e8:b7:5d:14:9c:a9:
f3:e7:d8:1a:70:da:ae:6f:2f:0b:15:de:80:3c:2f:07:84:01:
b5:10:5f:79:e8:5d:9c:6f:7b:da:50:ad:21:06:34:05:20:24:
4e:06:25:2a:5f:91:5e:44:79:bf:2b:b1:ab:e5:75:c4:c8:05:
95:79:38:f8:45:27:c7:a1:39:5d:59:b5:af:ae:27:a8:3b:26:
48:9b:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:31 2025 by rpki-client