Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/28dc80af-b8c3-3f9a-ae3e-c3dadfe9beb7.roa
File: 28dc80af-b8c3-3f9a-ae3e-c3dadfe9beb7.roa (raw, json)
Hash identifier: 2MaJuAzS+xn07Wh8uJvpmHKIMTYtZ5wxb6yConFPS8w=
Subject key identifier: 3F:A6:B8:31:67:8D:E3:0D:41:55:29:D5:3C:7F:49:A4:28:6C:9D:23
Certificate issuer: /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial: 010D0C9F432858491246BC80313BBAF217E88140
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/28dc80af-b8c3-3f9a-ae3e-c3dadfe9beb7.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 19926
IP address blocks: 47.19.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:bc:80:31:3b:ba:f2:17:e8:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cf118a38-0576-4e81-9b99-19d572e27db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:74:1b:ac:1d:db:0a:95:53:5f:e8:0c:ab:
46:c0:fd:76:fe:b8:59:9d:5f:b1:18:89:9b:7d:d6:
87:22:b6:f3:8a:cb:00:0e:bf:08:50:21:46:d4:ac:
11:9c:a9:e8:37:b9:4b:bc:c0:4c:08:96:d0:a1:50:
1c:d6:18:81:ba:1d:a5:ed:1b:b2:35:d8:18:47:38:
61:68:44:86:94:13:d5:f3:89:fa:b5:68:c3:04:c2:
dc:97:a0:44:0a:9f:d3:8d:5f:37:47:32:4a:6f:41:
f7:ec:16:eb:3b:10:4a:c0:bd:86:1a:61:b3:0b:97:
35:aa:ed:8a:17:31:36:ea:35:3e:cf:b3:ff:36:4b:
57:f7:26:1c:8b:0f:54:df:19:91:68:fa:c0:20:04:
06:5e:3c:4a:14:83:f9:93:41:3e:bd:31:77:04:b0:
67:6d:9a:45:49:44:7e:f0:18:cf:f4:9c:fa:b5:6a:
54:54:10:ad:7c:3b:4e:9b:50:ca:11:82:99:0c:e9:
fe:65:e9:e6:a8:f6:69:fa:cf:4c:74:c4:53:07:b3:
df:e8:8c:72:2e:a2:e3:f5:8f:36:35:84:d5:0e:c5:
7f:3b:c7:60:3c:27:68:b2:97:79:c8:b1:e2:3d:88:
73:5c:60:f4:0d:17:d4:d0:96:a2:9c:0c:84:fb:c6:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:B8:31:67:8D:E3:0D:41:55:29:D5:3C:7F:49:A4:28:6C:9D:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/28dc80af-b8c3-3f9a-ae3e-c3dadfe9beb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
X509v3 Authority Key Identifier:
keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
sbgp-ipAddrBlock: critical
IPv4:
47.19.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:c5:1a:0d:fb:f1:62:b9:3b:d1:03:77:29:5c:d9:5d:50:5b:
93:18:e0:1b:6c:00:ad:59:0e:c3:54:ba:c8:98:81:d9:9a:3a:
c0:f7:2f:5e:f1:f0:02:63:33:22:1a:42:60:2a:b4:4a:57:78:
b2:bf:77:cc:a6:cd:81:a3:44:82:7f:cc:1e:a2:11:0d:fa:e1:
e2:4f:0b:c2:b4:59:42:08:a0:dc:d3:91:23:26:8b:3d:c4:7a:
2b:6a:88:4f:a1:88:e3:3b:87:39:c3:2c:4b:4c:dc:56:25:d4:
49:fc:c8:9a:56:a2:e3:cc:26:34:03:a2:c7:02:a0:9b:06:f6:
7d:01:7f:fa:d0:d4:21:54:8a:b2:95:b1:a8:8c:84:a0:a6:b2:
f7:f3:7d:1f:2c:7b:ac:bc:2b:ad:cf:71:d0:93:09:ee:c0:03:
58:f6:d2:3c:09:4e:aa:9d:43:89:27:e3:47:36:08:dc:58:14:
54:ac:f4:a4:e8:9c:4e:87:3a:a7:d5:87:17:b5:20:e5:81:ce:
3a:34:78:1e:1f:0f:1c:ec:d4:9c:fa:af:d4:30:18:9b:92:4c:
27:09:97:8f:d9:17:e9:f7:d3:a8:c7:eb:4d:2a:35:5f:cd:ad:
25:af:72:7d:2a:c7:46:68:76:c2:43:50:a1:75:59:3a:45:4f:
1f:11:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:20 2025 by rpki-client