Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
File: e0124a56-00b3-397d-94b4-a8fccac56c0c.roa (raw, json)
Hash identifier: XhevfaBs7z4Kc2U7VnEkHhdTevujAB8CAEcTtBQiFP0=
Subject key identifier: 38:19:8A:B2:6D:3F:44:17:32:E5:BF:0E:41:DE:56:1D:47:80:48:67
Certificate issuer: /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial: 010D0C9F43285848E9CBECDF5758AF87DBB5B000
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 2
IP address blocks: 128.4.0.0/16 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ec:df:57:58:af:87:db:b5:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=236ec0d9-77bf-4129-8056-dc953d0a54ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:4c:67:42:b4:9e:ca:76:80:96:16:6a:7c:
c3:34:48:56:f5:0d:79:ed:38:5d:85:0e:95:16:d4:
a3:c0:1d:84:73:f8:80:78:fd:4f:0e:9a:28:3b:74:
2b:f6:1d:5b:50:89:f1:2c:05:94:3d:5b:3a:08:6a:
a4:33:e5:fc:ac:de:84:54:69:92:7f:cc:99:ff:47:
a5:c6:d5:20:7f:de:e8:6e:05:ad:41:e1:d2:be:6c:
f9:c6:9f:34:a4:ef:47:e9:6c:a4:01:08:7b:e0:24:
cc:46:10:dd:92:0b:a5:ce:8e:2f:5e:51:57:19:06:
2f:90:72:fe:9d:51:73:aa:20:68:5c:b6:f3:2a:9c:
27:58:13:07:f9:18:ad:bc:5d:7c:d5:5f:1a:c7:f4:
4d:45:ed:b5:e3:25:3e:ee:7a:ce:6f:a3:b4:3d:65:
87:f4:5c:d0:3d:4a:21:72:5b:79:72:ff:46:70:8d:
ad:a4:cc:5c:64:4f:ea:d2:40:a8:4f:6f:97:21:86:
ec:50:a5:b1:1b:8b:08:68:65:b0:f7:12:b3:72:36:
d3:35:7c:c6:98:f0:c5:38:4d:72:71:4e:f6:45:21:
b5:69:94:1e:17:c5:eb:88:47:55:5d:ec:a0:5f:2e:
83:b7:de:33:e1:ea:97:d7:4c:87:42:47:35:30:5b:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:8A:B2:6D:3F:44:17:32:E5:BF:0E:41:DE:56:1D:47:80:48:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
X509v3 Authority Key Identifier:
keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:df:cc:ac:51:ec:cc:f3:48:7b:fd:df:e1:c0:ff:0a:77:42:
41:d3:1f:57:c1:81:6f:a7:57:63:f0:bb:46:45:1c:c1:8a:43:
f0:9f:0d:a0:25:24:3c:22:54:9e:ac:cc:2f:da:95:9a:02:02:
3b:cb:54:94:22:e0:a1:34:fb:54:99:08:eb:05:fa:7d:79:80:
f3:91:44:95:87:83:66:40:4b:74:9e:02:7f:4c:98:61:6b:68:
dd:ea:fa:72:cb:00:83:7a:ac:b2:1d:71:93:e0:4e:29:e8:5d:
03:b4:e0:a1:e2:62:ad:e6:bf:6e:b0:07:10:51:1e:05:e7:06:
4a:46:e5:02:f8:cc:60:75:ce:7a:3b:d7:df:6b:5b:dd:b5:82:
ad:2f:15:46:60:f6:b9:1e:d3:86:84:0a:3d:5f:9c:6f:e9:de:
c7:7d:8e:38:b7:5f:d3:e0:01:31:6a:fa:d5:5f:60:23:56:49:
74:f3:a0:3b:f8:d3:37:04:e7:7f:82:b1:01:aa:bc:05:4b:1c:
01:82:d0:65:98:43:52:fb:21:ac:73:bb:d8:d4:19:f7:de:41:
85:36:26:5c:59:63:50:d1:ba:b8:cb:35:2f:4d:aa:00:d9:41:
31:2f:a4:5f:1a:e8:ad:2e:62:05:41:28:91:ab:17:95:05:9f:
d2:c2:ed:8b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjpy+zfV1ivh9u1sAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0OTQtZjA0YmYyZTM2
MDZmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MjM2ZWMwZDktNzdiZi00MTI5LTgwNTYtZGM5NTNkMGE1NGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9FMZ0K0nsp2gJYWanzDNEhW9Q157ThdhQ6V
FtSjwB2Ec/iAeP1PDpooO3Qr9h1bUInxLAWUPVs6CGqkM+X8rN6EVGmSf8yZ/0el
xtUgf97obgWtQeHSvmz5xp80pO9H6WykAQh74CTMRhDdkgulzo4vXlFXGQYvkHL+
nVFzqiBoXLbzKpwnWBMH+RitvF181V8ax/RNRe214yU+7nrOb6O0PWWH9FzQPUoh
clt5cv9GcI2tpMxcZE/q0kCoT2+XIYbsUKWxG4sIaGWw9xKzcjbTNXzGmPDFOE1y
cU72RSG1aZQeF8XriEdVXeygXy6Dt94z4eqX10yHQkc1MFtWMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDgZirJtP0QXMuW/DkHeVh1HgEhnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRk
MTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRiZjJlMzYwNmYvZTAxMjRhNTYtMDBiMy0z
OTdkLTk0YjQtYThmY2NhYzU2YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0
OTQtZjA0YmYyZTM2MDZmL2U0NGQxNjg4LWY4YzgtNGNlOC1iNDk0LWYwNGJmMmUz
NjA2Zi5jcmwwHwYDVR0jBBgwFoAUTbwiaOwwLGXGptIvsMYSS6Gs2qowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRkMTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRi
ZjJlMzYwNmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADd/MrFHszPNIe/3f4cD/CndCQdMfV8GBb6dXY/C7RkUcwYpD8J8NoCUk
PCJUnqzML9qVmgICO8tUlCLgoTT7VJkI6wX6fXmA85FElYeDZkBLdJ4Cf0yYYWto
3er6cssAg3qssh1xk+BOKehdA7TgoeJirea/brAHEFEeBecGSkblAvjMYHXOejvX
32tb3bWCrS8VRmD2uR7ThoQKPV+cb+nex32OOLdf0+ABMWr61V9gI1ZJdPOgO/jT
NwTnf4KxAaq8BUscAYLQZZhDUvshrHO72NQZ995BhTYmXFljUNG6uMs1L02qANlB
MS+kXxrorS5iBUEokasXlQWf0sLtiw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:43 2025 by rpki-client