Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
File: 55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa (raw, json)
Hash identifier: wmrAVPFWzN/10T3E7Uy9ruJug94zb9xT+Nz6x85YES4=
Subject key identifier: E5:FE:AF:4F:4A:0A:7E:8F:37:62:BF:A8:00:01:2A:3D:0A:CE:F3:62
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F43285848F22C6316D4DE042EF1252780
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 62537
IP address blocks: 162.222.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:63:16:d4:de:04:2e:f1:25:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=c5dcafdc-d79e-4947-942a-6f627b384244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:89:bf:14:68:3f:80:8e:7e:1c:91:00:9a:
cd:52:48:e3:08:59:78:93:0a:92:64:c4:f9:0c:15:
dc:e6:01:26:50:c2:b9:17:da:37:cd:2c:19:eb:e3:
75:71:bf:96:20:77:06:2f:4e:65:dd:31:74:89:2a:
00:c1:55:7b:c0:9c:f5:1b:11:74:d8:c0:f1:ef:18:
b0:cf:be:5b:d7:09:cc:f9:3e:ea:6d:b4:36:1f:78:
11:7a:69:64:87:d8:1e:82:02:c6:09:60:87:43:10:
a5:a2:78:d0:98:34:92:44:3b:70:52:b1:43:71:c5:
c2:37:de:08:10:d7:13:5f:18:26:00:07:f5:3e:d1:
cc:05:67:65:e4:07:18:56:b5:bd:a2:45:a9:89:0d:
64:b9:5a:94:62:58:21:a3:5a:88:c7:77:40:71:f5:
61:a0:41:b8:09:89:93:97:00:c3:4d:13:c3:90:18:
b5:d5:49:17:1e:c9:2f:e8:e7:fe:9a:dd:3a:7c:0c:
52:a9:b9:cd:05:15:da:13:5b:45:cd:9c:52:c0:50:
85:d7:90:7e:ec:0a:98:a9:44:4d:ce:9a:e9:7b:a7:
de:9c:48:fc:8a:42:be:ad:56:11:6e:d4:96:ee:11:
cf:88:87:30:0a:02:cc:e4:0e:77:99:67:34:27:75:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:AF:4F:4A:0A:7E:8F:37:62:BF:A8:00:01:2A:3D:0A:CE:F3:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:30:2b:c7:27:0e:04:da:4c:7f:36:c3:1b:49:1b:d7:fc:97:
83:0e:0d:16:71:b6:62:af:d5:a0:6c:32:3e:b2:79:b3:fd:0d:
94:4b:b1:ca:89:16:5f:34:dc:5e:f7:f4:92:20:a7:8b:fc:44:
94:95:33:62:83:f9:ff:01:5b:58:bb:fb:86:22:1a:a8:a0:3b:
03:0d:ae:af:3e:a8:bc:2c:00:04:dd:7e:6b:af:77:1d:e7:1d:
75:61:46:cf:6b:7c:bf:eb:8a:21:a6:0a:7d:d4:1c:62:ff:85:
21:98:8a:b5:c3:ef:82:ec:b1:0e:fa:0b:54:cf:2f:c8:d8:39:
74:74:6a:9b:9b:72:fc:b8:84:0f:10:e3:0a:eb:2e:a3:33:4e:
36:de:f5:6b:8d:4d:57:4d:d1:6e:88:25:eb:ec:02:41:4f:61:
5b:9a:d5:68:70:98:f1:3f:78:9e:e4:18:fa:e3:4f:3f:12:bb:
d5:72:c9:08:47:44:a9:95:6a:d8:cc:4a:8d:2e:84:f3:e5:57:
c2:7d:a0:96:db:3d:e9:b5:18:73:c3:2e:11:24:fd:7c:c9:93:
04:db:cd:f1:92:56:08:ad:3d:07:57:04:2c:c3:90:b9:d8:ec:
45:28:84:07:ba:36:cc:bf:89:dc:cf:5c:18:65:c2:ca:16:c1:
99:71:4d:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGMW1N4ELvElJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx
NTZmMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YzVkY2FmZGMtZDc5ZS00OTQ3LTk0MmEtNmY2MjdiMzg0MjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh2JvxRoP4COfhyRAJrNUkjjCFl4kwqSZMT5
DBXc5gEmUMK5F9o3zSwZ6+N1cb+WIHcGL05l3TF0iSoAwVV7wJz1GxF02MDx7xiw
z75b1wnM+T7qbbQ2H3gRemlkh9geggLGCWCHQxClonjQmDSSRDtwUrFDccXCN94I
ENcTXxgmAAf1PtHMBWdl5AcYVrW9okWpiQ1kuVqUYlgho1qIx3dAcfVhoEG4CYmT
lwDDTRPDkBi11UkXHskv6Of+mt06fAxSqbnNBRXaE1tFzZxSwFCF15B+7AqYqURN
zprpe6fenEj8ikK+rVYRbtSW7hHPiIcwCgLM5A53mWc0J3W8QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOX+r09KCn6PN2K/qAABKj0KzvNiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj
YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvNTVmNmQ4YTMtMWQ0Zi0z
OGExLTkyMDQtNTYwODM5NTFhYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2
ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk
MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk
NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUwK8cnDgTaTH82wxtJG9f8l4MODRZxtmKv1aBsMj6yebP9DZRLscqJ
Fl803F739JIgp4v8RJSVM2KD+f8BW1i7+4YiGqigOwMNrq8+qLwsAATdfmuvdx3n
HXVhRs9rfL/riiGmCn3UHGL/hSGYirXD74LssQ76C1TPL8jYOXR0apubcvy4hA8Q
4wrrLqMzTjbe9WuNTVdN0W6IJevsAkFPYVua1WhwmPE/eJ7kGPrjTz8Su9VyyQhH
RKmVatjMSo0uhPPlV8J9oJbbPem1GHPDLhEk/XzJkwTbzfGSVgitPQdXBCzDkLnY
7EUohAe6Nsy/idzPXBhlwsoWwZlxTfg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:15 2025 by rpki-client