Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
File: 7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa (raw, json)
Hash identifier: pKYTwK8+BFqYZOi5aLthMDwwcKFRHz5dNaEe04K++wY=
Subject key identifier: 53:D2:93:7F:26:69:82:40:AF:67:73:9D:DC:3F:53:37:09:3A:FC:06
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584944693D07A521EFFC8C17D280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 174
IP address blocks: 23.237.47.0/24 maxlen: 24
23.237.62.0/24 maxlen: 24
23.237.78.0/23 maxlen: 24
23.237.88.0/23 maxlen: 24
23.237.144.0/24 maxlen: 24
23.237.145.0/24 maxlen: 24
23.237.146.0/24 maxlen: 24
23.237.160.0/23 maxlen: 24
23.237.202.0/23 maxlen: 24
23.237.251.0/24 maxlen: 24
23.237.252.0/24 maxlen: 24
50.7.64.0/22 maxlen: 24
192.240.98.0/23 maxlen: 24
192.240.112.0/22 maxlen: 24
192.240.118.0/23 maxlen: 24
198.255.22.0/23 maxlen: 24
198.255.124.0/24 maxlen: 24
216.227.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3d:07:a5:21:ef:fc:8c:17:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=5f832685-1586-44b7-ac0c-a1ac5665156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:8e:80:0b:13:77:5c:15:a0:a0:98:43:c5:
ff:74:07:6e:67:59:c4:00:c6:82:ed:bf:c0:f5:4f:
26:af:87:1e:19:fe:7b:ff:95:01:99:23:d2:27:79:
70:1c:f1:53:9c:af:d1:d1:f3:c2:8f:c4:cf:79:60:
45:d6:8a:22:c3:8d:cf:79:64:c0:b0:a5:bf:93:78:
97:0c:2d:1b:9e:ac:af:f7:ac:c6:bf:b5:ed:1a:ae:
98:63:a8:0a:7d:57:cd:38:b5:06:34:cc:e3:18:1f:
0e:a5:fd:10:bb:1b:73:49:61:d6:e8:ae:33:83:fe:
d8:e1:ba:0f:fd:f8:e9:5b:e2:4e:7b:3e:bc:65:64:
73:3d:fa:de:c5:d1:2c:e8:43:cf:ef:52:07:8f:9d:
8a:49:23:75:e6:b4:d5:c3:b9:d7:88:f1:84:a9:9d:
69:12:44:4b:f6:43:d1:59:69:60:b6:37:6c:0c:6e:
85:f2:27:a1:f6:60:c8:ca:c0:35:a4:bb:ab:1c:86:
8b:45:5f:65:ca:cf:18:88:e6:21:05:3c:0b:c2:4c:
b7:14:29:02:7e:93:0e:b6:bb:be:86:14:27:c2:eb:
40:1b:a3:c3:c4:e0:71:c3:20:7f:bd:a1:8d:dd:f6:
23:3f:0f:c7:0d:84:89:92:c0:b4:62:f9:93:a3:c5:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D2:93:7F:26:69:82:40:AF:67:73:9D:DC:3F:53:37:09:3A:FC:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.47.0/24
23.237.62.0/24
23.237.78.0/23
23.237.88.0/23
23.237.144.0-23.237.146.255
23.237.160.0/23
23.237.202.0/23
23.237.251.0-23.237.252.255
50.7.64.0/22
192.240.98.0/23
192.240.112.0/22
192.240.118.0/23
198.255.22.0/23
198.255.124.0/24
216.227.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:43:f4:4a:30:6e:2c:b9:c4:39:7b:ce:3b:13:b4:9b:45:58:
c0:a2:b0:9b:f3:c9:bc:cb:e3:84:18:7e:58:37:bb:34:07:6b:
8d:98:a7:b0:4f:5c:08:69:45:63:d6:47:8a:41:85:a0:aa:55:
30:b6:36:0e:e9:1b:8d:14:a1:26:b4:dd:3e:81:84:bc:31:1e:
89:f2:87:a5:31:13:8d:d7:06:aa:eb:cb:cc:99:62:39:01:49:
98:b2:35:16:a3:cb:7c:9f:68:26:27:42:ec:80:62:a5:01:cc:
58:93:b6:6e:69:0c:9e:f8:42:c4:6a:a1:0c:9d:8f:56:d3:ba:
7d:a9:36:34:3a:e0:77:64:3d:a8:53:ec:7c:2e:14:81:f3:f0:
d5:de:6b:45:fe:01:3e:fc:24:95:f8:69:b9:1d:6a:c4:91:32:
54:0d:80:cc:00:e3:ff:93:b9:60:eb:5a:f1:ac:6c:29:0d:f6:
76:6d:9a:37:dc:15:f6:66:8b:c5:43:ff:97:f7:20:74:29:80:
65:65:c2:51:8a:fe:77:8c:58:bd:86:85:8f:4e:24:a6:6d:ae:
79:01:e1:ee:43:b0:c0:df:65:bf:a9:5e:8f:a1:ef:ac:c0:62:
16:3f:e0:92:bf:48:fd:8f:70:89:ce:7b:ec:95:1a:c1:64:b3:
6c:fd:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:10 2025 by rpki-client on console.sobornost.net