Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
File: bf93319f-0189-3af9-bb58-9a82a9fad60e.roa (raw, json)
Hash identifier: IcTm7LVtmEJcS2k+9APZM1tOsalR2djC1Qd80Ld178E=
Subject key identifier: 6E:F6:6A:5C:C8:09:36:C5:36:E5:C0:DF:0B:16:BE:30:7B:9D:4E:87
Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial: 010D0C9F43285848F22C632232CDD183EDBE4440
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 62537
IP address blocks: 162.222.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:63:22:32:cd:d1:83:ed:be:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=eb944963-1e1d-45cb-aeda-2b7bbfce5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:d2:f5:39:45:dc:a2:ab:37:45:0b:53:d7:
f6:a7:c5:a7:4a:b3:d0:c8:63:0a:35:cc:9f:a5:ee:
10:bd:87:5e:a2:e8:c3:98:22:f0:6f:92:16:fe:1b:
14:20:2b:fa:1a:b7:5a:c4:f0:6f:c6:e4:97:47:03:
c4:53:60:32:a6:20:0a:02:a2:d2:6a:cc:00:b3:98:
d4:eb:af:7f:a6:37:37:e6:9a:a5:0b:bd:c2:e5:01:
cf:76:1e:ef:98:3b:cb:a9:c1:c4:bd:b7:0d:da:b8:
7f:0b:24:32:76:b1:56:bf:73:ee:e2:b2:e7:77:64:
05:fe:3b:9f:b3:a9:0e:a5:5d:94:d7:3b:f8:2e:ac:
4a:d9:04:8a:f5:a9:4c:15:ab:3c:bf:10:23:72:84:
63:47:5c:d5:6d:3e:cb:3c:9a:43:70:63:4b:fd:b6:
ed:39:cf:52:39:c7:93:74:80:9e:99:95:27:ab:5a:
f6:2b:db:8f:aa:fa:b0:03:bb:26:d8:23:12:f7:bc:
45:e9:84:e0:23:47:ce:8e:3c:3d:4d:94:68:0d:8a:
83:14:17:e9:8d:52:06:c0:ba:f5:de:a7:88:78:4e:
32:98:2c:33:4d:f6:d0:4a:f6:d7:95:d7:4a:da:e5:
fe:08:e3:ee:e1:3e:03:bf:7e:1a:4f:d8:2f:34:63:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F6:6A:5C:C8:09:36:C5:36:E5:C0:DF:0B:16:BE:30:7B:9D:4E:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
X509v3 Authority Key Identifier:
keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d3:3a:c9:de:66:12:68:0d:5f:07:20:63:f0:4e:5c:99:67:
cc:29:71:41:ad:fc:7b:81:ef:f6:74:c5:32:d7:9a:92:6b:79:
06:a5:72:04:68:a4:06:35:e7:a2:00:72:91:81:26:20:54:08:
e1:12:7f:33:9e:c8:c3:a8:92:ae:6b:16:b4:3e:52:f0:94:65:
d2:02:4a:54:1f:91:ec:06:04:53:e6:40:00:9c:84:66:8e:42:
16:03:fe:a9:44:84:3a:e3:96:73:c5:3d:fe:cb:1a:48:ba:bb:
1d:2b:a1:77:2f:50:1c:ad:09:35:19:14:9e:fc:0c:3d:d7:92:
8e:a4:be:80:e6:80:35:fb:56:67:3c:90:f0:7b:8b:b6:86:ae:
87:67:6d:1e:70:5b:d2:e3:1e:16:1f:10:f1:dd:fe:ca:f7:8f:
59:94:df:d8:9e:08:d9:99:38:93:65:40:5e:94:05:f3:a0:f0:
53:ca:c8:f6:25:24:24:b4:f4:36:a7:74:07:dd:d4:84:0d:2b:
1c:5f:29:c1:47:2c:d4:b1:bb:c6:5e:c4:7e:01:75:77:12:cf:
55:eb:a8:81:da:2f:cf:61:bf:c8:85:a8:96:14:d1:9f:92:d5:
1d:da:38:0f:e5:bd:1e:65:ad:e8:44:f6:6a:11:c4:75:3d:ae:
e4:39:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:55 2025 by rpki-client