Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa
File: 6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa (raw, json)
Hash identifier: zT+R6V87PvutyRz5SyAvtvqHZn/G8FWmE1KLESTINjQ=
Subject key identifier: C2:5B:C8:47:D1:F3:34:00:9C:43:24:7E:17:54:1E:36:13:7C:3B:AF
Certificate issuer: /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial: 010D0C9F432858487FB5DE3F8D3FC33CE9A54780
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 31774
IP address blocks: 47.19.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:de:3f:8d:3f:c3:3c:e9:a5:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=4cb7610f-02f2-4add-aaf6-dd3ff4be66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:a9:7d:e3:50:e9:db:2b:f0:af:0f:50:85:
d8:a6:cb:50:18:53:93:87:9c:e2:18:ba:da:1a:18:
07:6c:43:2c:3d:28:98:0b:94:f4:9e:d2:87:0a:5e:
00:da:bb:78:48:f8:34:fe:2a:ca:63:22:e8:c2:d0:
73:87:3f:b5:3b:b4:7e:6d:1b:30:ee:56:f4:7e:48:
a6:2d:12:65:72:12:13:2e:0b:35:f6:39:4a:f9:19:
40:4a:99:e7:ef:3e:8d:b6:11:cb:45:20:e1:43:41:
2c:9d:f8:8f:42:3f:b4:b1:22:4c:b8:6c:d7:8d:ec:
6c:ed:d2:eb:2f:01:b1:84:99:81:3c:04:80:e1:11:
51:a6:1d:95:d3:6c:45:99:8e:75:21:df:81:2d:21:
a9:31:c4:87:e0:e4:1d:5f:30:ba:33:02:0b:2c:45:
48:ed:12:3e:78:72:c3:f1:e0:25:27:38:df:3c:c7:
97:96:32:44:75:d1:74:23:b1:83:6a:da:e9:17:21:
f6:cc:a8:0b:1f:6b:fb:b6:0a:ab:64:37:63:f7:aa:
6b:5e:8e:54:ef:1c:13:c3:c7:fa:28:1f:e7:9d:ab:
cb:dd:3c:25:e6:d6:fb:cf:b4:7b:be:a3:fd:76:a5:
c9:4b:86:0a:c3:e9:3d:fb:c8:45:f0:4b:20:f9:33:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:C8:47:D1:F3:34:00:9C:43:24:7E:17:54:1E:36:13:7C:3B:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
X509v3 Authority Key Identifier:
keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
sbgp-ipAddrBlock: critical
IPv4:
47.19.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:21:71:2c:23:51:63:92:49:1c:a9:23:6b:a2:71:73:d7:44:
32:d9:20:83:5d:fa:36:9d:13:ed:21:18:af:49:4a:a0:fc:40:
38:d1:9c:a5:40:6b:77:4f:1a:b4:f8:06:34:37:cb:41:55:00:
1d:6a:fb:af:f1:3f:54:75:f9:89:d7:4f:6b:d5:c9:f9:86:80:
9b:96:b0:71:c4:bf:d1:f1:0d:44:82:01:8c:6f:f3:44:c5:44:
5e:ba:a1:2c:ab:56:5f:64:c4:01:3d:2e:19:f4:a1:d9:9b:9c:
3e:95:8f:fd:35:e7:20:51:59:3a:a8:bb:46:62:a1:81:a1:41:
39:70:22:9b:72:ad:c6:3b:92:6d:99:70:6e:f3:1b:30:2a:ae:
1f:0a:fe:83:36:b0:82:fa:95:e2:95:c6:7a:c9:8e:07:25:43:
ac:f8:17:b9:4c:da:33:b1:d2:07:e7:6c:58:df:f6:a0:59:b1:
a1:bf:d6:bb:02:77:f1:f7:ca:9b:fc:fb:05:6b:b2:cb:26:a8:
bd:52:82:9d:ec:92:84:3c:7d:6d:e4:8f:ee:0a:83:fb:e9:7c:
c5:56:7c:af:53:c3:97:8d:db:44:8b:8c:f9:5b:c8:23:22:5b:
6c:53:68:50:0e:5c:91:8d:98:fb:da:c4:98:07:37:d9:c6:15:
68:3d:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:22 2025 by rpki-client