Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/4bb11253-a383-386b-97c3-3aabe28aa43f.roa
File: 4bb11253-a383-386b-97c3-3aabe28aa43f.roa (raw, json)
Hash identifier: dKKTMQtJT00P/PgdMM/NtJc6o8RB61S5toMd8eNslIg=
Subject key identifier: D9:BC:6D:C5:A8:23:63:2A:34:49:99:93:3C:5D:97:A6:80:66:43:E8
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F4328584812D52D851E708375287BC800
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/4bb11253-a383-386b-97c3-3aabe28aa43f.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62537
IP address blocks: 162.222.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2d:85:1e:70:83:75:28:7b:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=7b355f3e-8a68-4da2-a0df-d44783604655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:5f:b5:0d:55:3c:a0:bc:02:9c:f6:ef:bf:
f8:e4:e8:58:70:14:90:3b:9a:31:2a:4d:eb:4f:ec:
3f:46:a5:9e:11:eb:68:06:c8:5f:bb:31:62:93:eb:
20:ef:26:64:c0:a4:ad:43:36:a3:0c:c4:3a:e2:29:
f6:e4:81:86:25:69:64:f7:60:e4:ae:46:47:fa:7f:
e1:92:55:42:6c:6b:0c:1d:0d:a3:3b:5b:b3:0c:40:
be:64:19:45:2d:ca:ad:7e:dc:b2:f6:6c:35:1b:c6:
e6:20:1e:9c:5e:0f:96:fb:fa:ab:5d:8e:d7:58:6e:
0d:84:b3:3e:aa:37:80:dd:c9:a1:03:6e:05:42:83:
32:f7:26:d3:2f:47:3e:76:33:f1:17:e0:35:91:6a:
f0:03:94:23:64:3e:32:14:d6:d6:39:9a:51:1e:ef:
ed:56:58:dd:54:ed:09:52:26:ab:10:43:89:0f:70:
45:2c:e6:5e:db:21:9f:c0:91:8c:35:bf:3d:21:8e:
60:96:69:97:9e:ce:3a:e5:ce:41:d4:48:7f:34:e0:
58:5a:84:f7:36:25:56:90:03:00:fd:70:6a:f6:75:
b9:65:24:63:9f:61:cd:71:21:5d:86:04:7c:d5:9a:
12:d8:a6:83:42:4f:f4:47:a4:bd:79:a4:e5:bc:fc:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:6D:C5:A8:23:63:2A:34:49:99:93:3C:5D:97:A6:80:66:43:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/4bb11253-a383-386b-97c3-3aabe28aa43f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:7d:38:69:81:9a:08:17:71:ac:fa:14:06:be:20:5d:2a:20:
eb:3b:3d:95:5f:13:13:24:47:f2:5a:3b:04:3a:5b:01:95:02:
56:93:04:d9:ba:1a:a5:e9:3e:bc:27:bb:df:60:70:95:74:4a:
d3:0e:1a:5f:98:71:9a:55:7f:07:37:71:c5:af:e8:cc:88:2a:
c7:6b:92:cf:d7:99:9c:e0:b8:cf:66:e6:fb:67:c8:ae:60:7f:
cf:ca:70:2b:42:05:47:99:20:c6:95:78:16:5a:39:24:04:85:
9b:ea:9d:0c:01:cd:cc:7d:07:82:9a:60:db:4f:a6:c1:44:3b:
c8:71:e5:56:98:f4:7a:76:fb:2f:3b:2e:b2:50:5f:17:44:f1:
ef:1b:df:5c:2f:e6:a7:96:c0:61:72:70:e5:f4:07:f1:bd:1f:
f2:a7:44:10:de:93:b8:b8:63:38:78:dc:35:70:b5:1a:a8:de:
f5:ae:e6:05:80:bd:db:33:b0:2a:f8:5f:d4:c6:9e:de:54:04:
dc:64:d0:7b:06:5c:71:bf:ef:52:6d:7e:7e:2b:20:85:e2:33:
8f:fe:be:8d:52:ca:7d:ca:79:61:7e:0b:b3:87:d6:4e:d3:99:
64:be:be:aa:a6:e0:47:44:bb:c9:5f:99:ec:c5:95:e1:1d:8a:
59:c7:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:38:24 2025 by rpki-client