Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa
File: d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa (raw, json)
Hash identifier: T/pAlGzK7bL3jK19pOYQUHKXOY/HRMbIfWB9n2SYgt0=
Subject key identifier: 38:B7:78:D4:1D:58:50:B8:45:D5:A7:DF:78:E8:6C:B5:08:C9:9A:E2
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848573ADAF0B896146864A2BD80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 6453
IP address blocks: 23.237.126.0/23 maxlen: 23
23.237.130.0/23 maxlen: 23
23.237.136.0/23 maxlen: 23
23.237.138.0/24 maxlen: 24
23.237.191.0/24 maxlen: 24
23.237.218.0/24 maxlen: 24
23.237.244.0/24 maxlen: 24
23.237.250.0/24 maxlen: 24
50.7.0.0/24 maxlen: 24
50.7.8.0/24 maxlen: 24
50.7.9.0/24 maxlen: 24
50.7.10.0/24 maxlen: 24
50.7.11.0/24 maxlen: 24
50.7.12.0/24 maxlen: 24
50.7.13.0/24 maxlen: 24
50.7.15.0/24 maxlen: 24
50.7.16.0/24 maxlen: 24
50.7.18.0/24 maxlen: 24
50.7.19.0/24 maxlen: 24
50.7.20.0/24 maxlen: 24
50.7.21.0/24 maxlen: 24
66.90.124.0/24 maxlen: 24
192.240.122.0/24 maxlen: 24
198.255.16.0/24 maxlen: 24
216.227.131.0/24 maxlen: 24
216.227.142.0/23 maxlen: 23
216.227.144.0/23 maxlen: 23
216.227.146.0/23 maxlen: 23
216.227.148.0/23 maxlen: 23
216.227.150.0/23 maxlen: 23
216.227.152.0/23 maxlen: 23
216.227.154.0/23 maxlen: 23
216.227.156.0/23 maxlen: 23
216.227.160.0/23 maxlen: 23
216.227.162.0/24 maxlen: 24
216.227.163.0/24 maxlen: 24
216.227.164.0/24 maxlen: 24
216.227.165.0/24 maxlen: 24
216.227.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:da:f0:b8:96:14:68:64:a2:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=a00fa84a-1552-4db4-be98-d2c01413bef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:ab:b8:c3:ef:b4:e7:4e:eb:0d:df:1a:56:
e2:aa:80:ec:32:3f:2f:81:f9:5a:f8:8f:cb:3d:4a:
9b:a9:64:7f:30:9b:77:3d:88:0a:14:53:2d:ad:89:
54:21:f7:97:d0:20:33:c3:29:cf:b3:a2:69:09:c8:
d1:cb:ce:73:87:7f:69:c8:81:db:66:b2:27:f5:80:
8c:94:bf:42:ab:62:e5:7c:96:ea:12:6d:1d:a5:88:
54:e3:41:c4:f2:6b:db:cb:b1:32:0d:82:9b:b1:a9:
3b:65:f5:f7:21:e0:2d:01:e6:dd:ae:33:70:be:b7:
b7:dc:b4:89:d0:68:7a:34:25:f7:da:5d:b3:e3:9b:
24:93:1f:9e:eb:62:0c:16:77:4b:8e:22:cd:ec:da:
40:6c:55:b6:10:06:06:97:02:a3:1e:df:48:62:0e:
ed:2e:70:7b:95:17:5b:a1:c0:52:e3:92:4e:a6:9e:
d7:46:4e:96:da:31:91:ca:91:6b:60:90:a3:33:1c:
93:f8:b9:a5:bc:d4:44:9b:54:52:49:83:40:6b:db:
74:7b:d3:9e:3f:f0:9f:8d:50:ab:3a:07:f5:62:32:
e6:4d:60:54:52:51:a7:96:a4:4c:a9:b6:69:42:25:
1d:04:ca:3f:e0:4b:08:24:14:1e:b2:03:39:f9:ed:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:78:D4:1D:58:50:B8:45:D5:A7:DF:78:E8:6C:B5:08:C9:9A:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.126.0/23
23.237.130.0/23
23.237.136.0-23.237.138.255
23.237.191.0/24
23.237.218.0/24
23.237.244.0/24
23.237.250.0/24
50.7.0.0/24
50.7.8.0-50.7.13.255
50.7.15.0-50.7.16.255
50.7.18.0-50.7.21.255
66.90.124.0/24
192.240.122.0/24
198.255.16.0/24
216.227.131.0/24
216.227.142.0-216.227.157.255
216.227.160.0-216.227.165.255
216.227.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:35:04:2c:d5:96:19:87:1e:d8:77:c4:5a:0b:51:3e:50:b7:
1a:a5:e1:e5:6d:53:14:40:22:6b:19:38:73:44:7a:f5:45:23:
4d:fe:83:d1:28:8a:40:ec:4c:f6:2e:b7:70:a6:95:7b:fb:04:
b2:a6:6b:d5:2c:2e:e2:2e:ee:5d:d8:0d:50:ad:64:94:cc:7f:
94:fd:f0:ab:e9:12:5b:2e:d9:34:fd:a6:e6:43:8d:77:a4:37:
07:5f:87:16:89:72:16:e9:ce:95:d3:9b:9f:e4:de:de:5a:00:
c3:29:3c:a5:4b:78:7b:94:68:68:0b:aa:0c:09:34:35:28:f4:
7c:16:44:b4:1c:83:a2:7d:cf:67:f1:84:20:55:74:c8:81:ca:
3f:17:22:47:de:9a:11:dd:29:96:7b:8f:93:7f:58:83:cb:ef:
2a:e3:ec:91:94:e7:87:08:6e:c7:35:42:13:cf:fc:1c:c2:f5:
67:ce:33:18:4b:14:48:18:80:a7:4a:62:d0:93:2f:8f:fe:3d:
a5:b5:f6:5e:35:56:1c:bd:d9:70:6e:2c:f7:6f:38:00:74:1b:
33:9c:e6:2c:6c:dc:5f:fe:86:72:83:da:db:af:64:24:58:24:
ae:31:a3:bb:30:41:e4:29:4b:90:5e:8d:45:2a:62:f8:0f:0e:
4d:40:88:e0
-----BEGIN CERTIFICATE-----
MIIG3jCCBcagAwIBAgIUAQ0Mn0MoWEhXOtrwuJYUaGSivYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
YTAwZmE4NGEtMTU1Mi00ZGI0LWJlOTgtZDJjMDE0MTNiZWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5yruMPvtOdO6w3fGlbiqoDsMj8vgfla+I/L
PUqbqWR/MJt3PYgKFFMtrYlUIfeX0CAzwynPs6JpCcjRy85zh39pyIHbZrIn9YCM
lL9Cq2LlfJbqEm0dpYhU40HE8mvby7EyDYKbsak7ZfX3IeAtAebdrjNwvre33LSJ
0Gh6NCX32l2z45skkx+e62IMFndLjiLN7NpAbFW2EAYGlwKjHt9IYg7tLnB7lRdb
ocBS45JOpp7XRk6W2jGRypFrYJCjMxyT+LmlvNREm1RSSYNAa9t0e9OeP/CfjVCr
Ogf1YjLmTWBUUlGnlqRMqbZpQiUdBMo/4EsIJBQesgM5+e3ZqQIDAQABo4ID8DCC
A+wwHQYDVR0OBBYEFDi3eNQdWFC4RdWn33jobLUIyZriMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDhmNjJlYTItNTZlZi0z
MTBjLWE0ZTYtZjYyMjBkYmRhYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAEX
7X4DBAEX7YIwDAMEAxftiAMEABftigMEABftvwMEABft2gMEABft9AMEABft+gME
ADIHADAMAwQDMgcIAwQBMgcMMAwDBAAyBw8DBAAyBxAwDAMEATIHEgMEATIHFAME
AEJafAMEAMDwegMEAMb/EAMEANjjgzAMAwQB2OOOAwQB2OOcMAwDBAXY46ADBAHY
46QDBADY478wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAXzUELNWWGYce2HfEWgtRPlC3GqXh5W1TFEAiaxk4
c0R69UUjTf6D0SiKQOxM9i63cKaVe/sEsqZr1Swu4i7uXdgNUK1klMx/lP3wq+kS
Wy7ZNP2m5kONd6Q3B1+HFolyFunOldObn+Te3loAwyk8pUt4e5RoaAuqDAk0NSj0
fBZEtByDon3PZ/GEIFV0yIHKPxciR96aEd0plnuPk39Yg8vvKuPskZTnhwhuxzVC
E8/8HML1Z84zGEsUSBiAp0pi0JMvj/49pbX2XjVWHL3ZcG4s9284AHQbM5zmLGzc
X/6GcoPa269kJFgkrjGjuzBB5ClLkF6NRSpi+A8OTUCI4A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:27 2025 by rpki-client