Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
File: a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa (raw, json)
Hash identifier: MbecXaMPn3GORmtCP1yCQWsXCOvHm9nwd39xMujM2QA=
Subject key identifier: C4:ED:B6:6F:AD:39:A3:DE:04:70:4C:66:28:85:73:47:34:7A:4A:A2
Certificate issuer: /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial: 010D0C9F43285848E9CBECD1C333E564456925D0
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 34
IP address blocks: 128.4.0.0/16 maxlen: 17
128.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ec:d1:c3:33:e5:64:45:69:25:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=7509d100-c103-4e41-b0ce-db58f16f94db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:0f:c4:f7:c3:19:bc:99:03:81:4f:7c:83:
6d:4a:02:a2:65:3d:20:ae:19:8b:e0:09:39:d0:56:
8c:3c:90:e5:1f:5c:d3:e2:4e:81:79:25:1b:6a:d3:
d9:94:2e:d7:dc:45:cd:9f:a5:cc:a6:28:32:ce:c2:
03:86:e5:2b:08:4f:71:9a:cc:30:19:fd:5b:04:db:
52:43:18:40:44:14:7d:9a:1c:16:37:68:b2:b4:d5:
3a:ac:70:9a:c0:77:35:98:58:60:1a:34:25:3c:a2:
ec:b1:71:2f:21:b2:a3:85:7a:82:cf:eb:2a:87:22:
d2:b2:c0:e0:fd:8a:34:ea:b8:8d:7c:db:0b:5e:fc:
4a:12:e0:3e:3e:44:12:fa:31:22:0a:e9:18:23:ee:
ab:b4:5b:32:32:a1:4e:1c:e2:53:63:7b:00:5f:87:
68:51:02:68:1d:eb:a2:58:b0:fd:d2:50:9b:2a:82:
cd:78:a5:8d:12:f4:dd:0c:7d:99:c8:39:9e:85:44:
22:9f:cd:ac:23:47:2f:df:2b:49:6a:9d:46:b8:4d:
f5:da:19:76:3a:b1:6d:6f:8c:17:86:1f:64:24:d0:
50:fc:e1:4a:76:92:55:e3:e7:84:45:9f:61:74:94:
1b:65:b5:0d:d4:a8:1e:3f:0d:72:80:7f:cf:94:f3:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:B6:6F:AD:39:A3:DE:04:70:4C:66:28:85:73:47:34:7A:4A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
X509v3 Authority Key Identifier:
keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.4.0.0/16
128.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:09:93:6f:aa:86:0a:72:0c:d9:bb:06:e1:9d:39:06:7e:79:
56:20:44:ed:83:8f:d0:e4:e3:9d:78:f1:8a:84:61:5a:a7:b7:
6b:4e:25:81:92:db:38:04:0e:a3:ca:f7:9b:50:aa:66:da:00:
d8:78:2c:26:d3:ba:21:09:0d:1c:23:0c:ac:2e:8c:d0:60:ac:
62:16:1e:2b:67:1a:14:f6:03:83:a6:92:6c:36:24:5d:43:3f:
0e:08:44:bd:4d:cd:84:ba:01:20:59:8d:24:97:c9:9b:1f:40:
28:99:c5:b4:01:3b:26:96:e2:e3:31:c9:fb:0b:6c:44:9c:aa:
37:58:e6:d0:fb:c6:32:c1:0f:85:16:11:db:44:3e:a4:64:99:
03:11:d1:82:7c:0d:93:8c:fd:e4:79:ac:38:3e:c1:1d:13:c2:
02:91:9b:a9:09:c2:27:27:e2:78:7e:4f:0b:15:74:ca:c9:33:
bf:41:a7:bb:1a:0b:ad:a2:82:b3:98:19:cc:2d:20:da:dc:8c:
cf:0e:e3:72:d5:ff:af:71:cb:a7:f6:ee:83:a1:b1:65:84:4f:
1b:4f:f1:04:0f:90:0e:bb:4c:ee:1e:fd:6f:3b:a3:d3:85:34:
c6:ae:59:01:57:23:43:bf:cb:ce:52:0b:65:ed:da:89:17:48:
8e:15:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:18 2025 by rpki-client