Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
File: 472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa (raw, json)
Hash identifier: LOYClT8LlB8ky0O1pwJS/Hm96DtWzcESt1JPHUFq/o4=
Subject key identifier: C4:91:CA:90:90:FD:7F:CE:7B:20:68:A6:05:EA:D1:A3:A9:13:3A:3D
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584863CAFC8FE428B18DBA9C1C80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 30058
IP address blocks: 23.237.47.0/24 maxlen: 24
23.237.62.0/24 maxlen: 24
23.237.78.0/23 maxlen: 24
23.237.88.0/23 maxlen: 24
23.237.144.0/24 maxlen: 24
23.237.145.0/24 maxlen: 24
23.237.146.0/24 maxlen: 24
23.237.160.0/23 maxlen: 24
23.237.202.0/23 maxlen: 24
23.237.251.0/24 maxlen: 24
23.237.252.0/24 maxlen: 24
50.7.64.0/22 maxlen: 24
192.240.98.0/23 maxlen: 24
192.240.112.0/22 maxlen: 24
192.240.118.0/23 maxlen: 24
198.255.22.0/23 maxlen: 24
198.255.124.0/24 maxlen: 24
216.227.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:ca:fc:8f:e4:28:b1:8d:ba:9c:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=8750f865-a1e5-41e1-bf68-614eddb9a961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:37:0a:48:9a:12:94:77:70:0b:e3:f7:bc:
6c:c0:f1:fa:c5:73:e0:04:a0:2e:cf:04:08:7c:ef:
ca:38:3a:32:6e:fc:fa:11:78:ca:f4:a2:00:83:0c:
9c:dd:b8:6a:3a:41:e4:be:47:20:19:4c:0f:6f:5a:
13:53:cf:cb:bd:35:6b:cc:c5:9b:f8:46:33:b1:b5:
db:5e:40:1a:99:e6:70:60:66:c1:db:e3:7a:fc:b0:
4d:aa:c4:c9:6b:7e:53:32:cf:3a:d9:e3:c4:e2:2e:
af:f1:d0:47:07:d8:60:6f:0a:de:10:e5:a9:da:9a:
9b:f6:06:35:54:dd:0e:0b:1e:d7:b3:ac:fa:7f:ae:
63:45:fd:c5:40:1e:26:cc:56:f3:60:c0:b6:9d:de:
e7:a4:b5:73:d3:b0:9b:b2:f0:85:88:3a:ff:12:92:
51:65:9e:60:a8:f0:b3:82:be:83:37:0b:45:b9:12:
2d:f0:3d:18:ee:d2:70:bd:7f:52:cf:a0:b9:49:24:
ac:13:11:18:e3:2f:c3:25:0c:18:20:e9:96:b4:91:
cb:f9:37:8c:c2:77:5f:93:8f:fc:ce:58:8b:98:20:
cd:a8:ae:63:1f:93:ea:57:c8:d2:03:c4:f4:e6:cf:
d7:a9:5f:40:29:6d:aa:2c:a4:d8:2e:69:dd:49:41:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:CA:90:90:FD:7F:CE:7B:20:68:A6:05:EA:D1:A3:A9:13:3A:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.47.0/24
23.237.62.0/24
23.237.78.0/23
23.237.88.0/23
23.237.144.0-23.237.146.255
23.237.160.0/23
23.237.202.0/23
23.237.251.0-23.237.252.255
50.7.64.0/22
192.240.98.0/23
192.240.112.0/22
192.240.118.0/23
198.255.22.0/23
198.255.124.0/24
216.227.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:5d:04:b3:e7:15:60:16:b7:af:1a:53:64:dd:4e:a0:8f:2f:
59:f5:69:22:62:3a:ae:ef:88:9c:92:f4:a0:ed:90:a8:98:bf:
83:14:e5:9f:56:cd:ba:7d:8a:4b:39:ea:50:20:10:3d:72:6a:
79:bd:62:95:4f:b5:eb:b7:d6:4c:cf:57:8c:43:19:75:e5:95:
3d:d2:e8:72:2a:8b:20:a4:d9:32:2e:37:c2:99:55:9d:e9:73:
a4:d5:07:a4:64:c0:78:7d:4d:e4:6f:20:b1:d7:e2:27:22:b9:
d7:c7:73:7a:d8:4e:33:ab:8e:72:8b:9a:2c:96:82:cb:0e:e4:
61:db:81:5c:cd:9b:ec:b8:cb:fb:ee:49:ec:da:c0:88:b9:dc:
fe:f5:7b:63:f5:f4:b1:68:56:14:55:75:6b:e9:06:93:fb:f0:
c4:85:63:16:ad:77:8c:05:fd:b2:c5:1c:9f:32:6f:2c:69:62:
5b:b1:ec:9b:f9:d1:d7:cb:1c:76:88:a5:7e:01:f7:d0:26:c9:
8a:b7:bf:81:95:00:59:94:71:ad:de:dd:8e:9e:05:a3:08:c1:
82:b0:d6:fb:ef:31:15:57:e9:38:bd:6d:6f:e2:2a:67:5a:7f:
70:0c:18:a0:42:68:fe:37:4c:c7:63:70:2e:fe:27:6a:8c:e3:
d0:85:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:52 2025 by rpki-client