Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
File: 55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa (raw, json)
Hash identifier: i8Bpybrzr2LNqQfpUxSO0q7URj5DAadqjEDxJvKMajM=
Subject key identifier: 86:DB:27:82:FB:DF:20:5C:A0:0D:31:97:C3:FA:2F:F2:0C:B4:06:CC
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F4328584812D52D94D38059B3E7AEA080
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62537
IP address blocks: 162.222.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2d:94:d3:80:59:b3:e7:ae:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=69d4e888-764d-479f-834e-9d97443a4ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:1b:28:8b:2f:75:8c:f5:91:79:f1:27:36:
af:cb:24:65:aa:d9:da:a9:9d:52:53:aa:23:ad:e5:
3b:69:1d:dc:83:c1:51:9a:64:ba:c4:94:7a:32:89:
26:a4:23:4a:c4:01:8d:4f:be:20:61:87:34:3d:dd:
85:17:d0:98:ca:2b:35:8b:95:90:e4:c1:7b:87:cd:
9e:48:dd:ae:a2:4e:8f:eb:33:90:37:f3:17:e6:22:
57:01:d8:e0:ba:10:85:b1:ab:7f:64:84:e1:b3:6d:
b9:91:07:ba:1e:42:f2:42:b4:f3:c6:5a:e2:9a:f2:
29:c6:cf:e1:31:e5:1b:d3:e0:28:33:fd:25:82:7a:
8d:65:66:ac:d0:7a:1d:b3:57:a1:fd:40:48:35:af:
23:37:92:b8:48:91:cb:6a:18:6d:fc:ac:0d:42:19:
1c:bb:a9:92:84:77:c0:b9:10:fe:1a:12:90:b7:79:
c3:47:e5:94:d1:88:a4:df:9a:15:73:2b:71:41:67:
ca:a4:ec:7d:6e:fe:d8:5d:56:03:ff:87:0a:9b:fe:
47:5c:8e:6a:5f:3c:b8:17:65:db:9f:88:82:fb:86:
a6:ef:01:25:dd:27:7e:08:fb:48:1c:67:5e:2f:87:
20:03:a1:4f:3b:1c:89:89:86:b8:7d:78:a0:da:d9:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:27:82:FB:DF:20:5C:A0:0D:31:97:C3:FA:2F:F2:0C:B4:06:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8e:dd:b9:19:2f:0a:3c:71:01:a3:bf:bc:c5:65:1a:de:56:
af:f1:4f:4d:57:f2:12:12:39:28:81:06:a6:46:78:96:87:ab:
35:c0:b2:4f:7c:7e:c9:c0:66:0f:95:24:79:e2:cd:4c:4e:21:
b6:4b:d9:17:c0:05:82:bd:46:e7:4a:49:1a:f5:26:ef:9c:ec:
84:2e:bf:85:2d:b8:b6:4c:6e:e3:a9:be:67:75:d2:78:a0:a6:
22:0c:00:5f:6b:cd:37:0f:ef:7d:8e:ce:91:bf:95:44:a0:cb:
f9:f2:51:e4:a3:82:7c:4e:52:54:74:39:f8:e7:fc:e9:86:ea:
a4:c3:8a:5d:e4:f5:8f:b6:02:a7:2f:69:c3:d7:fd:22:14:21:
18:ff:5f:84:bb:20:f9:4c:cd:2e:83:39:2a:e1:76:1d:f8:21:
8f:3d:84:69:54:78:f6:c2:19:16:23:47:71:50:14:c0:cd:e2:
0b:71:6d:9d:1c:fc:70:78:f9:41:27:fa:97:de:d4:ea:21:c9:
e5:ab:fd:87:8b:01:50:2c:5b:63:34:89:ef:76:15:f6:c3:13:
be:65:f1:6e:60:35:1d:24:87:63:49:92:71:ff:67:aa:f9:59:
34:c4:a1:f1:0b:1e:75:c6:1b:83:50:53:2d:60:cb:28:59:7a:
e6:ca:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:38:05 2025 by rpki-client