Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
File: d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa (raw, json)
Hash identifier: IK9DY1csaHyDI3JeAJYiz0eAnpQDvaZSzI9OFZu5bnU=
Subject key identifier: BA:AA:85:A8:EF:E5:46:91:40:EA:EC:5D:CA:72:87:1F:A5:F6:D7:01
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F432858487755CCD4146D0BB18B9C6700
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 32636
IP address blocks: 98.124.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:cc:d4:14:6d:0b:b1:8b:9c:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=6a0961ba-b5a0-4329-ac79-9582ee648cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:59:20:bb:ab:f8:c1:38:95:6c:90:76:71:
3c:44:ed:48:3c:ee:c8:ef:1a:cf:ee:ff:c1:e5:73:
c9:8c:b1:99:a0:df:bb:8e:54:45:4c:40:51:b9:18:
f2:79:a1:48:3d:d2:cc:b1:ad:3d:81:e0:7d:fc:d7:
4f:80:b9:61:32:9f:be:5d:bb:ab:20:db:4e:5a:a1:
40:1c:db:2c:03:70:30:66:36:e6:a9:5d:82:7b:49:
ae:ae:dd:6c:6f:70:4b:b7:a7:12:19:5a:27:59:a5:
20:df:7f:9e:f1:11:40:d0:0a:8f:98:e7:1c:b1:51:
ff:52:0a:b4:ae:9a:cc:e4:13:a7:23:c8:f9:0e:8c:
36:2a:30:a4:da:a9:3a:70:43:6f:26:85:9f:2c:06:
94:49:06:ee:64:db:2a:7d:a9:05:c3:d0:6f:48:f7:
b7:c6:b7:e3:95:7c:bf:8f:88:62:99:42:32:58:a4:
fc:25:95:1b:88:8c:d8:9c:ab:22:0a:7e:65:c3:00:
61:82:65:51:4b:3a:72:9f:dd:c4:ce:1e:74:28:2f:
7a:1e:b5:19:5d:08:64:52:94:44:26:ad:00:a2:94:
f0:d7:51:d7:d8:e8:37:e3:7c:ac:66:e3:a0:4e:98:
66:b1:45:e1:e2:58:0e:75:54:37:f1:1c:a1:d7:5c:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:85:A8:EF:E5:46:91:40:EA:EC:5D:CA:72:87:1F:A5:F6:D7:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
98.124.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ca:1c:fa:35:f0:af:e1:91:39:4d:2b:5e:18:16:2e:fc:1d:
cc:be:cf:33:55:42:ea:c6:dd:1a:7a:e5:5d:a5:dc:b4:32:69:
18:e3:a1:1c:48:11:41:21:86:ed:d5:cd:14:b0:a9:a1:e1:9f:
92:a6:84:5b:ad:66:b0:ea:45:30:6d:55:9a:3d:d7:7b:45:7a:
28:16:7a:a8:2a:43:87:d4:82:bf:df:31:3e:bf:98:7f:a5:ad:
32:f4:57:63:16:fe:93:91:07:34:36:9b:56:89:89:a1:6a:1d:
98:ee:a8:5a:7d:15:a7:8e:d1:8a:91:ba:d9:ce:2c:77:74:d4:
39:93:6a:1d:13:02:55:ad:d1:c1:33:09:64:be:a7:1f:32:6e:
79:1e:f0:d9:77:ac:00:4a:cc:f9:ce:d7:ee:65:99:fd:88:c1:
9c:3c:8a:10:ea:6f:b4:6c:6f:be:a1:de:d4:8f:1a:15:ce:34:
cc:39:5b:7d:36:8c:01:0d:a6:d1:c9:41:c6:00:19:74:60:b9:
fc:6f:ad:61:58:5f:09:98:d4:36:a3:80:fe:81:79:06:5e:10:
49:db:96:e1:06:14:43:0a:98:38:a1:8b:a0:26:e2:05:81:f5:
2c:fb:b9:0e:2e:37:d2:d1:43:ea:db:10:e1:d2:46:57:43:83:
c8:0c:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:46 2025 by rpki-client