Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa
File: 8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa (raw, json)
Hash identifier: yS9YHqWjlhsAV6k+v+zdju/4isT5myqqFlTtZ4PNeJE=
Subject key identifier: E8:23:5F:1C:44:80:4F:8C:50:D0:CD:16:6B:84:1E:BA:6A:04:25:89
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F4328584812D53178A351036DCCD00CC0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62537
IP address blocks: 162.222.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:31:78:a3:51:03:6d:cc:d0:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=43e990e6-a209-41e9-8b1b-47722c3f53bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:c9:d2:62:c1:b4:cd:70:b1:f8:30:7e:62:
09:4b:f1:e8:ff:47:be:27:7b:b4:ef:4d:90:94:22:
a1:07:9e:98:d9:5c:b4:9b:44:b3:7f:3d:e3:27:e6:
51:0b:06:78:03:29:02:2d:73:3e:0e:4f:ff:dc:8f:
14:a9:64:68:69:96:48:73:c7:f1:42:2d:62:5a:98:
0d:d9:e8:75:fc:4a:2e:18:a7:7b:e5:13:6e:4f:d3:
18:8c:13:f5:fb:2a:2d:a7:13:b6:32:97:1e:47:2c:
3c:8d:ef:2d:2e:e6:7d:a1:20:53:bf:f7:5c:78:12:
01:9d:bd:8f:de:a4:54:8d:ac:9e:e3:05:59:e7:61:
ca:29:06:6b:6a:d4:d1:cc:42:e8:3c:1f:47:05:69:
b5:8b:7f:6b:98:48:b3:ef:82:de:74:f2:ec:03:1d:
fd:39:d6:42:77:7c:7c:de:6d:21:0c:d6:1f:63:b4:
e4:b5:3d:41:29:c0:12:8c:ee:37:96:30:1f:a2:35:
8b:33:52:f9:ea:8e:be:81:c4:22:92:ac:58:ed:64:
76:eb:8b:94:39:9d:c3:16:11:83:60:04:0b:cc:c1:
74:6a:9c:fd:50:39:9f:67:b8:b3:53:c4:49:c2:a5:
0c:03:eb:1a:c9:b8:98:a9:d7:50:59:11:51:11:5a:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:23:5F:1C:44:80:4F:8C:50:D0:CD:16:6B:84:1E:BA:6A:04:25:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c9:d2:a0:14:16:81:0c:fa:2c:a1:4a:ea:d9:e9:bd:02:e8:
29:b5:68:44:e1:12:1d:80:98:90:38:4f:42:7f:7b:9e:0e:e3:
f5:d1:c6:04:59:53:77:3a:ec:85:2f:57:94:9a:2d:60:43:97:
97:af:fb:cd:e6:85:4c:73:ce:1b:6b:d1:85:66:f3:4a:02:c9:
7b:dd:36:27:e7:f5:e2:49:f5:9b:ce:1f:65:da:cf:74:21:f0:
25:21:79:e1:2a:00:d9:06:a1:2d:92:90:4b:a3:a1:76:d8:2b:
f4:af:42:a7:48:ea:55:8d:75:a2:79:eb:9a:04:31:4d:72:67:
d1:a6:82:ef:5a:71:7a:d4:85:f9:9d:54:fc:86:cb:99:4c:0f:
57:b3:f7:9f:b9:a2:db:09:dd:9a:f8:86:5e:60:1b:33:63:5a:
bc:b9:32:34:a3:86:50:34:43:11:d7:90:bc:89:92:9d:45:1e:
2b:7e:94:8b:d7:e5:90:6c:98:74:6c:b1:b9:68:ed:d2:ef:c5:
58:e1:fa:2d:74:10:cb:65:ed:e5:8b:e0:44:c4:73:4a:2b:92:
b3:78:87:8d:39:67:60:1c:ab:1a:9f:5c:4c:5d:ad:5f:18:45:
5a:bc:ec:18:9f:d5:93:d2:76:0d:e6:91:d8:72:e3:69:4a:96:
90:14:5d:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TF4o1EDbczQDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx
NTZmMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
NDNlOTkwZTYtYTIwOS00MWU5LThiMWItNDc3MjJjM2Y1M2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6PJ0mLBtM1wsfgwfmIJS/Ho/0e+J3u0702Q
lCKhB56Y2Vy0m0Szfz3jJ+ZRCwZ4AykCLXM+Dk//3I8UqWRoaZZIc8fxQi1iWpgN
2eh1/EouGKd75RNuT9MYjBP1+yotpxO2MpceRyw8je8tLuZ9oSBTv/dceBIBnb2P
3qRUjaye4wVZ52HKKQZratTRzELoPB9HBWm1i39rmEiz74LedPLsAx39OdZCd3x8
3m0hDNYfY7TktT1BKcASjO43ljAfojWLM1L56o6+gcQikqxY7WR264uUOZ3DFhGD
YAQLzMF0apz9UDmfZ7izU8RJwqUMA+saybiYqddQWRFREVqIkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgjXxxEgE+MUNDNFmuEHrpqBCWJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj
YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvOGRkNGI0YWMtY2ViYi0z
YTM5LTgwYWItZTVhOTgzNDk3NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2
ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk
MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk
NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDot5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzJ0qAUFoEM+iyhSurZ6b0C6Cm1aEThEh2AmJA4T0J/e54O4/XRxgRZ
U3c67IUvV5SaLWBDl5ev+83mhUxzzhtr0YVm80oCyXvdNifn9eJJ9ZvOH2Xaz3Qh
8CUheeEqANkGoS2SkEujoXbYK/SvQqdI6lWNdaJ565oEMU1yZ9Gmgu9acXrUhfmd
VPyGy5lMD1ez95+5otsJ3Zr4hl5gGzNjWry5MjSjhlA0QxHXkLyJkp1FHit+lIvX
5ZBsmHRssblo7dLvxVjh+i10EMtl7eWL4ETEc0orkrN4h405Z2AcqxqfXExdrV8Y
RVq87Bif1ZPSdg3mkdhy42lKlpAUXbU=
-----END CERTIFICATE-----
Generated at Wed May 7 14:49:58 2025 by rpki-client