Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
File: 58f97502-a21c-3db1-8649-e4de440334ed.roa (raw, json)
Hash identifier: LD9vk0lXa1wxEnCIYJd8NAsPKzfLI6T+0Q3sqZE8rhY=
Subject key identifier: 2E:40:EF:F4:E0:08:DE:67:27:26:29:8E:96:20:A7:24:3B:36:86:50
Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial: 010D0C9F43285848A049121CB0A1303321394F80
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
Signing time: Wed 22 Jan 2025 06:03:27 +0000
ROA not before: Wed 22 Jan 2025 06:03:27 +0000
ROA not after: Tue 22 Apr 2025 05:03:27 +0000
asID: 19165
IP address blocks: 136.28.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a0:49:12:1c:b0:a1:30:33:21:39:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Validity
Not Before: Jan 22 06:03:27 2025 GMT
Not After : Apr 22 05:03:27 2025 GMT
Subject: CN=ef46f48f-d7a5-4ff2-bed4-f79276ec4dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:7d:2c:50:e6:4e:52:02:6c:d5:2d:4c:eb:
27:d8:fc:4a:0e:78:dd:8a:dd:a1:92:55:6a:88:c6:
d6:38:e1:56:e0:60:cd:50:cd:ea:fb:a5:12:bb:6f:
72:a8:f2:3a:11:6d:6a:51:b8:da:2c:14:09:e8:25:
e5:03:09:78:a7:da:af:4c:2a:b5:d1:f6:bb:0c:83:
a7:76:7d:e9:6e:c1:d2:1e:63:98:dd:1f:1b:33:cf:
af:f5:9a:6f:8a:90:98:45:cc:fa:90:4d:2c:76:55:
f7:b1:45:33:48:f3:3c:76:d9:40:11:98:d1:51:23:
0f:8a:cc:a2:69:dc:d1:48:42:27:5a:ed:d8:85:44:
24:c4:7f:a7:2a:e4:bf:b4:c7:48:ce:ab:7c:56:ec:
6e:8a:de:c4:2e:a9:64:14:69:d0:af:73:67:25:60:
71:b4:df:29:fa:9b:e3:a3:b2:01:87:1a:18:ec:50:
b4:49:9a:87:3c:ed:72:d8:ea:2d:d3:1b:8d:91:1e:
f1:34:b9:81:e7:c5:32:3a:25:01:4a:a7:69:0a:3e:
ff:44:8d:8a:19:67:ea:ec:5f:2e:e6:2f:46:68:f2:
b2:fc:a1:cc:ff:83:1f:05:d8:ef:bf:25:23:60:a9:
bd:d7:f9:f4:95:ee:1c:70:90:81:75:00:7f:cf:b2:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:EF:F4:E0:08:DE:67:27:26:29:8E:96:20:A7:24:3B:36:86:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
sbgp-ipAddrBlock: critical
IPv4:
136.28.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:76:ee:d8:0d:b2:bb:ec:d7:a3:bf:2a:aa:ad:4e:91:45:cf:
0f:0c:de:bb:56:1f:67:29:f4:f2:1b:fa:f8:d8:65:e7:00:5a:
a1:9d:13:d1:6c:ab:4a:90:d9:95:7c:e1:d0:c1:d6:bd:4f:02:
cd:27:f1:03:00:13:b8:a1:05:83:bb:29:fd:fc:c7:30:9b:d2:
a6:5f:39:f4:96:db:00:22:06:9b:75:06:bb:2a:73:68:6d:5d:
d4:9b:32:46:0b:66:0f:75:74:a9:4e:d1:08:d8:36:51:34:c7:
dc:55:d5:c2:d3:29:99:4f:3d:46:14:c7:1c:f5:09:71:ba:be:
6a:f8:e4:dc:be:ef:f2:70:f8:1a:eb:2f:1c:84:70:bb:9e:8b:
e4:a5:6c:ad:75:f9:9e:44:bc:b3:ab:cf:8d:08:6d:b8:cb:bd:
15:37:b8:fc:c5:95:27:73:95:58:71:60:f5:63:72:c0:5c:6b:
29:47:b0:6f:52:72:3e:4c:f3:9d:da:c7:25:cb:d5:a0:c7:ba:
91:6b:72:3c:f9:09:7d:63:4e:9a:b3:90:94:0b:ef:65:af:e7:
c0:65:76:3b:35:45:98:d8:c4:1b:fb:be:5c:95:cf:38:e1:52:
43:cd:fe:33:10:4b:ea:98:12:5d:5b:f8:ec:c6:66:03:c3:3a:
31:bd:43:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRIcsKEwMyE5T4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk
ZWY0NmY0OGYtZDdhNS00ZmYyLWJlZDQtZjc5Mjc2ZWM0ZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36V9LFDmTlICbNUtTOsn2PxKDnjdit2hklVq
iMbWOOFW4GDNUM3q+6USu29yqPI6EW1qUbjaLBQJ6CXlAwl4p9qvTCq10fa7DIOn
dn3pbsHSHmOY3R8bM8+v9ZpvipCYRcz6kE0sdlX3sUUzSPM8dtlAEZjRUSMPisyi
adzRSEInWu3YhUQkxH+nKuS/tMdIzqt8Vuxuit7ELqlkFGnQr3NnJWBxtN8p+pvj
o7IBhxoY7FC0SZqHPO1y2Oot0xuNkR7xNLmB58UyOiUBSqdpCj7/RI2KGWfq7F8u
5i9GaPKy/KHM/4MfBdjvvyUjYKm91/n0le4ccJCBdQB/z7IdEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5A7/TgCN5nJyYpjpYgpyQ7NoZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNThmOTc1MDItYTIxYy0z
ZGIxLTg2NDktZTRkZTQ0MDMzNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiBwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACd27tgNsrvs16O/KqqtTpFFzw8M3rtWH2cp9PIb+vjYZecAWqGdE9Fs
q0qQ2ZV84dDB1r1PAs0n8QMAE7ihBYO7Kf38xzCb0qZfOfSW2wAiBpt1Brsqc2ht
XdSbMkYLZg91dKlO0QjYNlE0x9xV1cLTKZlPPUYUxxz1CXG6vmr45Ny+7/Jw+Brr
LxyEcLuei+SlbK11+Z5EvLOrz40IbbjLvRU3uPzFlSdzlVhxYPVjcsBcaylHsG9S
cj5M853axyXL1aDHupFrcjz5CX1jTpqzkJQL72Wv58Bldjs1RZjYxBv7vlyVzzjh
UkPN/jMQS+qYEl1b+OzGZgPDOjG9Qww=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:49 2025 by rpki-client