Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
File: 8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa (raw, json)
Hash identifier: ovyk3FlU4n6v+hF4J9ohFB7D0rSNUbuJQX6bubhMHyE=
Subject key identifier: 88:8A:CB:1F:E0:FE:A0:76:2D:C9:66:44:C7:7F:60:91:45:5D:85:FA
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848494561ACEC4C418A2309AE00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 174
IP address blocks: 23.237.48.0/24 maxlen: 24
23.237.68.0/23 maxlen: 24
23.237.70.0/23 maxlen: 24
23.237.102.0/23 maxlen: 24
23.237.104.0/23 maxlen: 24
23.237.140.0/23 maxlen: 24
198.255.86.0/23 maxlen: 24
198.255.88.0/23 maxlen: 24
198.255.122.0/24 maxlen: 24
2001:49f0:d04d::/48 maxlen: 48
2001:49f0:d04e::/48 maxlen: 48
2001:49f0:d055::/48 maxlen: 48
2001:49f0:d0a9::/48 maxlen: 48
2001:49f0:d0aa::/48 maxlen: 48
2001:49f0:d0bf::/48 maxlen: 48
2001:49f0:d138::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:61:ac:ec:4c:41:8a:23:09:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=7be24eab-1d30-40bf-bfe2-71cba1c2f534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:cd:b2:2a:d4:c7:d8:9b:85:29:62:37:de:
62:47:60:3c:62:a1:75:6d:6e:fd:db:5e:17:4f:40:
27:40:4d:80:a2:83:b0:d6:d2:bd:0d:c0:ee:bc:be:
a1:6a:f0:fb:bf:5a:b4:77:00:b9:2a:f4:5b:45:1f:
32:cd:43:38:f4:ed:5b:4b:60:52:7b:6a:2a:80:41:
c3:30:65:e8:3a:1d:14:ae:7a:b9:81:6a:22:fd:d6:
18:97:89:9a:94:c1:95:35:03:50:fe:20:31:67:f2:
74:3a:01:34:66:57:e8:1c:50:dc:a4:3a:36:f7:39:
9b:49:cd:44:ab:31:97:43:f8:49:de:a5:1f:44:70:
c2:80:3c:27:a9:b3:8d:84:cc:fa:6a:4a:a8:51:fa:
af:97:a0:3d:6c:bd:a2:44:ee:f9:04:d2:65:2f:a0:
9c:e7:ff:d7:b8:4f:22:38:33:95:ab:5a:92:be:29:
ce:53:d9:f2:72:28:7c:49:c8:fe:3e:f9:52:22:4e:
9a:93:47:27:db:6c:1e:e2:cc:3c:54:af:ef:18:eb:
02:22:4c:5f:a8:d4:16:dc:27:65:0e:9e:4a:be:ea:
31:8a:a1:df:26:24:c5:f6:f4:df:3e:f6:48:a5:da:
39:66:43:65:7d:73:8b:41:d6:72:cf:e7:35:c3:08:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:CB:1F:E0:FE:A0:76:2D:C9:66:44:C7:7F:60:91:45:5D:85:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.48.0/24
23.237.68.0/22
23.237.102.0-23.237.105.255
23.237.140.0/23
198.255.86.0-198.255.89.255
198.255.122.0/24
IPv6:
2001:49f0:d04d::-2001:49f0:d04e:ffff:ffff:ffff:ffff:ffff
2001:49f0:d055::/48
2001:49f0:d0a9::-2001:49f0:d0aa:ffff:ffff:ffff:ffff:ffff
2001:49f0:d0bf::/48
2001:49f0:d138::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:f4:0b:61:58:74:bb:99:89:02:f4:bf:d9:ed:c6:f3:59:b5:
40:68:1f:62:e6:02:5d:33:46:a5:b9:bd:be:73:b1:31:ed:2b:
82:68:88:7b:28:5b:c2:08:7f:3d:70:c4:00:3f:12:ce:86:36:
34:7b:b2:ae:1f:ac:8e:a3:86:3a:ae:a0:84:e3:05:9e:bd:1c:
d1:81:89:98:c2:9c:a8:cf:f9:05:fd:bf:9f:1b:80:fe:dd:f1:
35:b0:7f:05:83:26:63:e7:f7:40:e1:43:81:82:22:49:d9:1b:
d9:a5:c4:e9:89:64:8b:fd:4a:21:64:30:ac:f6:26:07:13:0f:
88:c9:6d:a5:3c:16:37:97:b6:0f:ad:19:1f:cf:90:e4:b3:c5:
ad:60:24:17:ab:fc:18:5c:42:a8:bc:c5:45:60:aa:1e:2a:a6:
8f:23:c5:53:19:b3:97:a5:75:ab:2f:75:66:a0:30:06:3f:1c:
5a:23:fd:55:ea:73:c4:f1:06:0f:ff:4c:f4:14:0a:62:64:97:
3a:8e:40:52:aa:c9:10:b2:2f:10:c6:34:53:25:43:20:37:39:
23:46:d2:c6:49:73:1d:04:43:c0:66:0a:e1:95:1b:8f:1d:29:
07:d8:8a:49:b1:e0:34:43:9e:0d:05:aa:64:12:ab:99:1b:e1:
72:8b:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:18 2025 by rpki-client