Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
File: 7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa (raw, json)
Hash identifier: d1YGHa5QNiAUb/7SZYWt43OMovQBaYAa2DG15cInWNo=
Subject key identifier: F4:EF:40:FB:9A:F0:ED:11:2C:D9:35:8D:89:4B:97:C1:C1:C4:BA:09
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584863CAFC4FE5A6B1B5158910C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 174
IP address blocks: 23.237.47.0/24 maxlen: 24
23.237.62.0/24 maxlen: 24
23.237.78.0/23 maxlen: 24
23.237.88.0/23 maxlen: 24
23.237.144.0/24 maxlen: 24
23.237.145.0/24 maxlen: 24
23.237.146.0/24 maxlen: 24
23.237.160.0/23 maxlen: 24
23.237.202.0/23 maxlen: 24
23.237.251.0/24 maxlen: 24
23.237.252.0/24 maxlen: 24
50.7.64.0/22 maxlen: 24
192.240.98.0/23 maxlen: 24
192.240.112.0/22 maxlen: 24
192.240.118.0/23 maxlen: 24
198.255.22.0/23 maxlen: 24
198.255.124.0/24 maxlen: 24
216.227.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:ca:fc:4f:e5:a6:b1:b5:15:89:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=f68ac7e0-531d-418c-b15c-ede871ece0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:cb:84:54:23:dc:55:1b:5c:26:36:c8:ca:
92:10:9a:9b:34:f2:d1:01:36:c2:d8:8f:80:70:2a:
12:19:a7:f8:09:52:98:a2:e1:d5:10:b5:c4:62:02:
f6:0f:96:92:9d:28:62:6a:51:0d:75:50:31:f4:8f:
a2:a6:87:ce:08:fe:2b:be:c5:82:6a:d8:61:a1:49:
0b:e3:81:33:f5:e3:1d:9c:86:eb:ac:bb:f9:d4:8e:
36:f6:c2:10:a5:6c:61:31:a5:3c:70:d2:00:63:3e:
f2:ad:f7:cc:77:4c:07:23:22:78:19:b7:8c:70:9c:
96:30:7e:0c:62:1c:a9:d9:f8:a8:4a:9f:9d:32:39:
23:64:37:3a:a7:49:9e:50:69:08:af:a4:0d:36:a4:
6b:89:5b:fe:0d:60:7c:78:44:b3:61:77:5c:e9:4a:
82:c5:96:25:f9:83:01:32:56:16:ef:21:b5:20:fb:
6f:f2:4b:91:4e:86:c0:fc:96:9d:3a:f7:27:82:39:
77:27:25:32:94:de:e9:9c:0e:d5:44:a0:34:23:c4:
a7:36:c4:5a:13:eb:aa:bd:41:cd:ba:91:e5:a0:5c:
46:e2:76:82:db:00:69:7a:43:4c:25:6a:72:05:00:
c3:4e:aa:91:ae:2c:5e:f2:f1:34:7b:4c:02:b1:56:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:40:FB:9A:F0:ED:11:2C:D9:35:8D:89:4B:97:C1:C1:C4:BA:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.47.0/24
23.237.62.0/24
23.237.78.0/23
23.237.88.0/23
23.237.144.0-23.237.146.255
23.237.160.0/23
23.237.202.0/23
23.237.251.0-23.237.252.255
50.7.64.0/22
192.240.98.0/23
192.240.112.0/22
192.240.118.0/23
198.255.22.0/23
198.255.124.0/24
216.227.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:44:94:18:56:ef:2b:eb:5a:85:ec:70:3b:f0:dc:c3:88:f3:
35:a3:7f:3c:48:ce:42:ff:58:db:27:05:a3:a3:11:76:38:48:
e3:bf:cb:3e:e7:d6:d6:ac:15:3a:6c:dd:c8:8b:6f:4e:a1:5d:
b2:a6:73:c1:7e:0a:14:5a:40:d3:46:29:ae:44:ed:02:b9:14:
f8:21:d4:8a:f6:be:d5:d1:ef:95:74:da:9c:31:a7:7a:40:fb:
8d:8c:f9:10:f2:62:6a:35:96:ba:f3:05:55:5a:47:e5:64:3c:
b4:9b:ff:db:48:c2:1f:c6:0a:3b:4d:a6:df:ea:a0:c5:f9:f8:
fb:c2:61:2b:94:b8:98:c3:c6:c3:4c:74:ac:33:db:d0:70:a4:
80:9a:23:0e:d7:a9:14:92:89:0a:0a:3e:00:5d:af:03:b0:f4:
bb:b6:01:98:d0:3d:59:d1:11:78:49:34:94:75:bb:17:50:58:
79:74:e5:3c:27:b0:31:07:10:8a:64:16:92:49:ca:4b:7a:4f:
eb:d1:d0:24:ac:44:16:ed:c3:ad:c4:cb:a6:84:52:f8:76:be:
50:33:a5:01:04:f8:9c:e8:45:8c:22:21:55:0e:e1:ea:70:dc:
4e:a3:41:8c:02:3b:ef:b6:df:8d:fb:5c:06:e6:0a:8c:0b:6a:
62:6b:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:49:56 2025 by rpki-client