Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
File: 7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa (raw, json)
Hash identifier: 1TB1HTCG68DHUmuh9otvJ/51aDLtuEWG/Hvtvhp4yCg=
Subject key identifier: EE:63:0C:63:10:EA:A5:C1:AD:DD:14:6B:97:01:5E:68:97:A4:9F:21
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848573ADAA55FCBFA09AD546700
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 174
IP address blocks: 23.237.126.0/23 maxlen: 23
23.237.130.0/23 maxlen: 23
23.237.136.0/23 maxlen: 23
23.237.138.0/24 maxlen: 24
23.237.191.0/24 maxlen: 24
23.237.218.0/24 maxlen: 24
23.237.244.0/24 maxlen: 24
23.237.250.0/24 maxlen: 24
50.7.0.0/24 maxlen: 24
50.7.8.0/24 maxlen: 24
50.7.9.0/24 maxlen: 24
50.7.10.0/24 maxlen: 24
50.7.11.0/24 maxlen: 24
50.7.12.0/24 maxlen: 24
50.7.13.0/24 maxlen: 24
50.7.15.0/24 maxlen: 24
50.7.16.0/24 maxlen: 24
50.7.18.0/24 maxlen: 24
50.7.19.0/24 maxlen: 24
50.7.20.0/24 maxlen: 24
50.7.21.0/24 maxlen: 24
66.90.124.0/24 maxlen: 24
192.240.122.0/24 maxlen: 24
198.255.16.0/24 maxlen: 24
216.227.131.0/24 maxlen: 24
216.227.142.0/23 maxlen: 23
216.227.144.0/23 maxlen: 23
216.227.146.0/23 maxlen: 23
216.227.148.0/23 maxlen: 23
216.227.150.0/23 maxlen: 23
216.227.152.0/23 maxlen: 23
216.227.154.0/23 maxlen: 23
216.227.156.0/23 maxlen: 23
216.227.160.0/23 maxlen: 23
216.227.162.0/24 maxlen: 24
216.227.163.0/24 maxlen: 24
216.227.164.0/24 maxlen: 24
216.227.165.0/24 maxlen: 24
216.227.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:da:a5:5f:cb:fa:09:ad:54:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=fe14c939-eae0-417d-b28a-54272388bafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:ab:1b:79:0f:da:20:88:2b:dc:fd:7a:05:
ec:f3:48:42:89:85:dd:99:57:7b:49:5d:fe:6a:36:
bf:8f:7e:51:53:bb:dc:80:36:bd:42:0c:f1:f5:b1:
a5:30:3f:75:14:b9:0e:54:82:23:47:9d:20:ef:e8:
cc:b2:ee:2e:05:4a:06:d3:e7:23:c4:1a:ae:34:45:
a2:6f:07:51:59:95:4a:4b:9e:74:aa:ff:1e:d6:f7:
7b:36:46:aa:3d:2b:99:b9:80:74:16:58:7a:0e:f3:
bc:35:a3:3f:8a:1d:3c:11:cb:d8:a7:d8:c6:a0:e6:
f5:12:94:41:56:77:23:a9:ec:78:81:c2:a4:a3:b4:
4d:e2:8a:11:5d:11:c9:d5:ba:b4:c3:26:39:ff:af:
9e:14:ec:2d:da:32:7d:c5:ed:4f:3f:92:4a:a9:80:
8d:97:ab:c7:82:9f:eb:98:b8:6b:1d:31:8f:c0:3e:
3c:fd:6d:3f:c7:ae:b5:0a:74:ad:fe:1d:d5:3b:8f:
c9:9b:23:bb:bf:f7:8d:3c:ac:3c:5b:f6:bc:2e:dd:
30:7b:50:1a:0c:0f:48:f6:18:c4:b6:f3:eb:51:be:
cc:d1:2f:4b:e9:8b:20:06:07:d8:a3:02:ec:53:40:
ba:b6:db:f0:47:9c:fa:4b:62:cb:2f:75:17:4a:ff:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:63:0C:63:10:EA:A5:C1:AD:DD:14:6B:97:01:5E:68:97:A4:9F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.126.0/23
23.237.130.0/23
23.237.136.0-23.237.138.255
23.237.191.0/24
23.237.218.0/24
23.237.244.0/24
23.237.250.0/24
50.7.0.0/24
50.7.8.0-50.7.13.255
50.7.15.0-50.7.16.255
50.7.18.0-50.7.21.255
66.90.124.0/24
192.240.122.0/24
198.255.16.0/24
216.227.131.0/24
216.227.142.0-216.227.157.255
216.227.160.0-216.227.165.255
216.227.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:fe:1d:db:f6:7c:9b:64:f8:be:86:a3:8c:89:e7:6c:07:e8:
81:e8:73:27:29:62:b6:65:29:57:3f:21:09:2c:73:97:b4:0c:
a0:5e:25:30:cc:4d:15:99:8a:41:ff:51:50:6d:4a:35:33:30:
69:a6:90:98:3b:07:1a:e9:d7:12:96:e8:fc:91:eb:72:66:c2:
fa:70:b1:2e:eb:2a:3a:c0:b5:67:5c:07:ba:ac:7d:48:ff:68:
f4:7e:f1:35:3e:4d:03:a4:94:71:67:3c:91:85:46:0c:51:13:
78:a8:34:7c:c0:7b:aa:56:a0:ac:c7:b1:c2:64:8b:f0:25:0a:
77:00:fb:78:e0:b9:89:7d:5e:b7:a7:0c:63:aa:91:2b:a9:a6:
f2:f5:3d:4e:25:d3:e2:c4:ca:27:87:d3:5a:76:9e:8d:cd:b6:
46:0d:09:f9:61:a0:a0:76:30:c2:ac:ad:34:d4:18:db:dd:b3:
1e:f8:4a:85:12:29:99:35:ef:91:80:d2:61:98:ac:96:4f:11:
42:73:56:55:70:95:df:57:d6:cb:3f:43:ea:75:ea:fb:22:1e:
02:1a:81:1f:0e:94:ab:10:27:bf:3d:1b:55:ad:1a:5c:a4:da:
75:40:33:8e:27:7b:77:21:af:ef:af:d1:d3:ca:d1:cb:28:33:
cd:a4:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:48:32 2025 by rpki-client