Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
File: a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa (raw, json)
Hash identifier: z24pg8vZcFkNDqfuNglhpd5LYlM9IwMUpvNoPiltCyo=
Subject key identifier: F6:05:19:47:38:8A:EC:C1:C2:80:DC:4F:01:19:7A:50:A7:98:C1:C9
Certificate issuer: /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial: 010D0C9F43285848090FA4B5D49EF4CA11A20800
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 34
IP address blocks: 128.4.0.0/16 maxlen: 17
128.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a4:b5:d4:9e:f4:ca:11:a2:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=a8c45fb7-9b9d-4d55-beff-6d4cc82fbb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:37:72:05:b7:df:57:14:32:8f:fd:86:9f:
50:2b:4d:12:af:7f:af:f8:d2:42:c4:c6:8d:0a:0b:
38:0b:8d:14:ec:2d:50:57:51:cf:5a:55:3c:36:6d:
a7:22:9e:17:b9:22:39:3e:f9:ad:c1:e1:c8:f0:67:
c5:51:c6:ee:a3:a1:43:70:f7:42:c5:34:f9:fe:c5:
a2:7c:14:cf:36:21:75:4d:4d:a2:ba:8a:87:64:2c:
c8:fb:88:e3:21:f0:e1:8a:bf:54:4c:f4:c9:e2:30:
d7:bc:53:24:c5:0a:48:fd:82:9a:98:e6:72:2f:19:
15:4f:9d:02:c3:67:64:69:4b:05:db:06:74:9b:b2:
b7:3a:fb:ac:0a:ea:16:94:cd:e6:b9:0b:c7:6e:5b:
b6:8f:f1:62:46:7e:fb:f7:4c:f9:ea:ef:44:52:4a:
30:52:dc:a7:ad:81:a6:a7:c1:91:b1:71:e3:10:5c:
06:43:f3:19:d0:29:47:36:89:1d:93:a0:42:40:7a:
03:c2:45:b3:59:21:26:83:29:75:00:e4:cf:bc:e2:
74:6d:f0:5d:4a:70:fe:55:38:64:a0:13:c8:1b:24:
ef:c5:35:9e:d0:ba:eb:41:17:04:cd:ce:75:da:05:
d2:1b:bc:4e:a4:43:a5:81:df:e3:f4:4a:7d:71:a2:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:19:47:38:8A:EC:C1:C2:80:DC:4F:01:19:7A:50:A7:98:C1:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
X509v3 Authority Key Identifier:
keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.4.0.0/16
128.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:f5:e2:4a:cc:f1:99:78:00:13:ee:c7:b4:23:00:f8:35:d7:
f7:00:11:65:e8:4d:20:64:13:88:9e:e9:95:c2:b7:9e:92:cd:
92:c4:94:ac:cf:c5:05:e4:b0:96:18:50:8e:52:e9:f9:2a:20:
ee:e4:e6:af:ff:1e:86:d0:90:ef:00:4f:f7:93:f4:18:bd:d4:
80:35:57:0d:31:52:77:04:31:6e:5f:c8:dd:3f:33:8f:0a:b9:
41:56:ef:49:61:e7:ae:e1:ad:04:71:25:0d:1e:11:83:d7:45:
ce:20:72:c5:dd:ae:22:86:73:09:16:66:b0:05:a0:68:9c:5b:
81:83:48:d6:64:83:d8:45:6a:ed:c6:0d:48:23:28:92:40:f0:
e2:90:c7:3a:68:a1:08:00:77:38:2d:ef:fc:73:79:2d:b5:36:
9d:24:f0:67:3f:80:0e:81:a3:f8:b2:d5:cf:6b:de:a1:0e:10:
f3:aa:3c:19:f8:6f:e8:80:79:84:92:f1:9e:a6:83:af:5b:5f:
8e:54:dd:b0:54:97:59:86:10:c6:d9:0a:e6:29:df:e4:55:d5:
3f:52:77:51:da:6f:b8:62:66:db:e5:a9:6e:0a:b4:3c:0b:c4:
58:10:f9:87:5a:f8:99:d2:7a:ab:4b:b5:46:f4:e0:fd:e7:72:
45:a4:f2:80
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEgJD6S11J70yhGiCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0OTQtZjA0YmYyZTM2
MDZmMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
YThjNDVmYjctOWI5ZC00ZDU1LWJlZmYtNmQ0Y2M4MmZiYjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9w3cgW331cUMo/9hp9QK00Sr3+v+NJCxMaN
Cgs4C40U7C1QV1HPWlU8Nm2nIp4XuSI5PvmtweHI8GfFUcbuo6FDcPdCxTT5/sWi
fBTPNiF1TU2iuoqHZCzI+4jjIfDhir9UTPTJ4jDXvFMkxQpI/YKamOZyLxkVT50C
w2dkaUsF2wZ0m7K3OvusCuoWlM3muQvHblu2j/FiRn7790z56u9EUkowUtynrYGm
p8GRsXHjEFwGQ/MZ0ClHNokdk6BCQHoDwkWzWSEmgyl1AOTPvOJ0bfBdSnD+VThk
oBPIGyTvxTWe0LrrQRcEzc512gXSG7xOpEOlgd/j9Ep9caImTwIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFPYFGUc4iuzBwoDcTwEZelCnmMHJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRk
MTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRiZjJlMzYwNmYvYTdlMWFjZTAtZjliOC0z
Y2JlLThhZDAtODRkOGZkZjY0NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0
OTQtZjA0YmYyZTM2MDZmL2U0NGQxNjg4LWY4YzgtNGNlOC1iNDk0LWYwNGJmMmUz
NjA2Zi5jcmwwHwYDVR0jBBgwFoAUTbwiaOwwLGXGptIvsMYSS6Gs2qowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRkMTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRi
ZjJlMzYwNmYuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgAQDAwCA
rzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQAN9eJKzPGZeAAT7se0IwD4Ndf3ABFl6E0gZBOInumVwreeks2S
xJSsz8UF5LCWGFCOUun5KiDu5Oav/x6G0JDvAE/3k/QYvdSANVcNMVJ3BDFuX8jd
PzOPCrlBVu9JYeeu4a0EcSUNHhGD10XOIHLF3a4ihnMJFmawBaBonFuBg0jWZIPY
RWrtxg1IIyiSQPDikMc6aKEIAHc4Le/8c3kttTadJPBnP4AOgaP4stXPa96hDhDz
qjwZ+G/ogHmEkvGepoOvW1+OVN2wVJdZhhDG2QrmKd/kVdU/UndR2m+4Ymbb5alu
CrQ8C8RYEPmHWviZ0nqrS7VG9OD953JFpPKA
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:12:43 2025 by rpki-client