Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa
File: 42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa (raw, json)
Hash identifier: L2/pgDOh0hsM903yK8O8YQsfxUeDNSf3ysvwL5iKuEw=
Subject key identifier: 91:C2:F9:D0:7A:6B:C1:B1:C1:65:15:F3:9B:C9:A5:F3:ED:7C:5F:BA
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848573ADABB9498ADEA0AC678C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 1239
IP address blocks: 23.237.126.0/23 maxlen: 23
23.237.130.0/23 maxlen: 23
23.237.136.0/23 maxlen: 23
23.237.138.0/24 maxlen: 24
23.237.191.0/24 maxlen: 24
23.237.218.0/24 maxlen: 24
23.237.244.0/24 maxlen: 24
23.237.250.0/24 maxlen: 24
50.7.0.0/24 maxlen: 24
50.7.8.0/24 maxlen: 24
50.7.9.0/24 maxlen: 24
50.7.10.0/24 maxlen: 24
50.7.11.0/24 maxlen: 24
50.7.12.0/24 maxlen: 24
50.7.13.0/24 maxlen: 24
50.7.15.0/24 maxlen: 24
50.7.16.0/24 maxlen: 24
50.7.18.0/24 maxlen: 24
50.7.19.0/24 maxlen: 24
50.7.20.0/24 maxlen: 24
50.7.21.0/24 maxlen: 24
66.90.124.0/24 maxlen: 24
192.240.122.0/24 maxlen: 24
198.255.16.0/24 maxlen: 24
216.227.131.0/24 maxlen: 24
216.227.142.0/23 maxlen: 23
216.227.144.0/23 maxlen: 23
216.227.146.0/23 maxlen: 23
216.227.148.0/23 maxlen: 23
216.227.150.0/23 maxlen: 23
216.227.152.0/23 maxlen: 23
216.227.154.0/23 maxlen: 23
216.227.156.0/23 maxlen: 23
216.227.160.0/23 maxlen: 23
216.227.162.0/24 maxlen: 24
216.227.163.0/24 maxlen: 24
216.227.164.0/24 maxlen: 24
216.227.165.0/24 maxlen: 24
216.227.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:da:bb:94:98:ad:ea:0a:c6:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=6af17bfe-edf0-478f-9613-caaebf925a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:2c:a4:6f:16:2c:4b:db:6f:50:ca:65:32:
7a:4f:71:46:de:52:70:79:ca:9f:fa:7e:48:a2:f5:
41:61:41:0c:a5:28:5d:c1:3f:ef:3c:9c:0e:38:d3:
63:21:61:83:41:b5:f7:7b:2e:8b:38:90:67:1b:35:
99:08:58:9c:d6:bd:18:17:59:01:0b:3b:67:e9:61:
55:40:8d:fa:fa:68:9a:13:47:5b:c7:fd:42:c8:2a:
02:58:01:35:ff:7e:85:85:eb:d9:76:b3:42:94:3e:
42:3a:3e:36:af:77:83:75:74:f6:e0:5f:9b:2a:17:
59:72:65:0a:7e:21:64:60:ba:84:12:af:51:e9:c6:
0e:82:8c:96:55:d8:dd:a6:15:6a:34:82:e4:d7:de:
20:05:a2:f5:93:66:be:00:1e:bf:17:43:43:60:9d:
4d:db:a6:36:83:2e:67:b0:fa:74:13:02:62:4a:16:
09:11:42:2d:f7:e2:3c:81:6a:a7:3e:9a:ef:ff:f0:
50:08:e8:f9:59:62:10:16:cc:54:8b:da:7f:dd:82:
09:49:e8:81:14:ea:8e:ed:86:81:3d:79:fb:84:5e:
d7:54:cf:25:4b:11:dc:9f:00:e0:2e:62:43:03:11:
45:50:84:a4:3c:26:fd:ab:dd:46:79:95:1c:f4:3a:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:F9:D0:7A:6B:C1:B1:C1:65:15:F3:9B:C9:A5:F3:ED:7C:5F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.126.0/23
23.237.130.0/23
23.237.136.0-23.237.138.255
23.237.191.0/24
23.237.218.0/24
23.237.244.0/24
23.237.250.0/24
50.7.0.0/24
50.7.8.0-50.7.13.255
50.7.15.0-50.7.16.255
50.7.18.0-50.7.21.255
66.90.124.0/24
192.240.122.0/24
198.255.16.0/24
216.227.131.0/24
216.227.142.0-216.227.157.255
216.227.160.0-216.227.165.255
216.227.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:55:06:92:19:3d:da:ea:8e:4f:74:70:c3:79:b1:fb:be:56:
f0:b4:14:87:38:16:a5:a6:7a:5b:58:c0:bb:b6:ad:de:33:b0:
82:34:ca:f1:9e:43:95:c2:f5:15:c2:78:b8:d0:dc:25:b7:b7:
38:70:7c:c7:fd:96:92:84:3e:f4:13:4a:5d:b2:17:c4:90:d5:
ee:05:05:76:2b:1e:39:eb:59:ce:f9:9d:78:b6:07:64:37:cc:
b1:de:76:f4:be:97:f6:b5:30:1e:75:f8:af:76:48:ca:1d:a0:
a1:ae:b0:77:e2:42:6e:34:bc:67:9a:73:67:b6:c0:6d:5f:33:
ae:6f:fb:af:9c:ea:d4:bc:a1:6e:88:d8:a9:fa:40:ae:78:8c:
4b:e3:40:21:94:d8:26:2c:30:d8:f4:f2:29:c6:80:f2:fc:f8:
b2:fb:75:af:0c:cb:c5:c4:06:9d:6a:30:d6:18:d2:c9:05:08:
8a:3a:43:29:27:cb:59:ea:09:60:ab:ad:c5:12:c9:57:da:13:
ee:66:75:d6:86:f7:a8:85:08:f3:9f:1d:1b:f9:79:50:34:38:
3d:cf:4a:21:85:d5:c0:45:ae:11:c2:76:39:c8:31:7f:41:3b:
88:82:2c:31:1e:b2:eb:47:96:ca:a8:cf:9c:16:bc:a8:61:a3:
15:3d:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:09 2025 by rpki-client