Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
File: bf93319f-0189-3af9-bb58-9a82a9fad60e.roa (raw, json)
Hash identifier: w30JmqC/H3uQxlAFHiwhgTpvXTTri144xZUsn/Yyvgg=
Subject key identifier: 65:A8:A9:17:DC:56:04:79:9E:25:0A:D6:4C:BE:CD:64:37:7D:90:AF
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F4328584812D52DA2E7F44C91D8F84180
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62537
IP address blocks: 162.222.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2d:a2:e7:f4:4c:91:d8:f8:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=b7b1e4fa-6254-4fee-a494-d0b71f781455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8b:34:60:67:1e:61:73:b6:53:d0:26:b4:8f:
f2:8b:39:54:15:ee:64:72:4f:49:d5:14:6e:55:01:
7a:85:11:50:f6:aa:3f:bd:56:2b:e4:fb:72:24:48:
5b:16:4a:ba:da:db:27:73:33:93:1c:e6:cd:11:a1:
4e:80:57:ac:a8:76:c8:be:7e:0c:a4:99:99:c2:81:
69:d9:5a:75:88:c4:2b:9b:ab:5c:3f:81:77:e1:15:
e2:1f:7e:23:77:76:5d:4c:a5:92:f9:81:25:6a:a6:
3f:52:5c:75:18:f8:66:b0:7d:e3:a0:ea:fe:a9:b7:
8c:05:f9:2b:eb:39:61:b7:be:c1:6e:7d:20:fc:64:
8b:59:29:22:aa:ae:58:54:6b:74:c3:59:ff:de:9c:
7e:5c:b0:e5:d2:12:16:08:e5:18:75:4b:5b:92:23:
54:bc:a0:b9:88:76:00:aa:c7:05:59:b5:f0:b5:e4:
02:f0:16:34:84:e8:04:10:e3:79:eb:b6:c6:19:75:
35:e1:e5:70:b9:36:76:eb:2e:bd:7c:1d:b1:aa:93:
7e:05:55:09:c3:db:6d:bc:2b:ca:c8:c0:90:d3:c9:
65:da:b6:dd:10:a9:70:6f:32:b2:a2:3c:51:77:47:
4f:e6:45:ba:fd:d4:1b:2a:6b:62:7c:34:d1:51:2b:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A8:A9:17:DC:56:04:79:9E:25:0A:D6:4C:BE:CD:64:37:7D:90:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:df:72:b2:1c:b1:7e:4f:55:79:5c:da:ea:69:fa:e1:ec:35:
53:0a:12:55:c5:36:84:b1:53:5f:0e:8c:ca:f2:66:30:b1:72:
4b:3a:42:f0:69:01:44:50:aa:61:5c:54:52:6c:93:dc:69:40:
9f:18:d0:d4:49:9b:5c:4b:26:e5:2d:57:6c:51:25:dd:65:af:
76:92:c9:b2:1a:80:04:c4:98:bf:91:f8:3c:c5:8d:44:68:45:
a4:1a:ea:62:5b:b4:df:44:ec:69:ff:b2:a2:14:0d:f8:70:62:
6c:dc:26:6a:40:82:b6:36:26:cb:09:32:10:0c:8e:79:cc:90:
84:a2:06:d0:49:77:a0:fe:46:15:f2:c7:44:ee:c8:25:62:0f:
d9:80:9e:b7:1d:48:5b:ea:4f:70:67:22:89:e8:36:b6:c0:9e:
75:1c:16:cf:5f:f6:45:ff:5f:e7:54:8b:0b:51:5a:1e:5a:9a:
79:2d:63:0d:2c:7e:6f:2f:2c:f5:31:55:82:7f:21:36:95:ca:
db:00:81:ac:11:8a:4f:84:eb:05:c8:d0:39:cc:84:67:13:5b:
86:e2:50:3f:f9:86:33:11:45:d2:16:58:72:e3:d5:83:b0:cd:
1f:8b:b8:9d:4f:22:cd:f3:ba:9a:8b:0d:35:04:88:3c:ed:e9:
00:cb:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:48 2025 by rpki-client