Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
File: 8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa (raw, json)
Hash identifier: 4CJB9MtK8Ajc4U6UmiA9urR1T8HtDBDQXKc1/jNTEhQ=
Subject key identifier: 46:12:1E:F1:8C:2A:15:2C:81:16:2E:A7:11:42:74:AF:C4:FE:B6:A9
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285849287E6F18A6B4A07E00B044E0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 174
IP address blocks: 23.237.48.0/24 maxlen: 24
23.237.68.0/23 maxlen: 24
23.237.70.0/23 maxlen: 24
23.237.102.0/23 maxlen: 24
23.237.104.0/23 maxlen: 24
23.237.140.0/23 maxlen: 24
198.255.86.0/23 maxlen: 24
198.255.88.0/23 maxlen: 24
198.255.122.0/24 maxlen: 24
2001:49f0:d04d::/48 maxlen: 48
2001:49f0:d04e::/48 maxlen: 48
2001:49f0:d055::/48 maxlen: 48
2001:49f0:d0a9::/48 maxlen: 48
2001:49f0:d0aa::/48 maxlen: 48
2001:49f0:d0bf::/48 maxlen: 48
2001:49f0:d138::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6f:18:a6:b4:a0:7e:00:b0:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=24e0def6-2c7e-4192-aef2-212a1776d0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:58:44:0a:c9:ee:24:2b:78:44:3d:91:c2:
69:fb:d7:eb:66:f5:f3:36:7e:70:b3:24:5d:03:8b:
c6:e6:c2:f0:3c:6e:a2:d8:2d:9f:15:34:69:a4:bb:
e1:76:32:6c:6a:48:45:f1:66:cf:14:ec:e1:2c:58:
f8:4b:38:c0:6f:bc:10:9f:7b:64:0b:bb:d0:a7:f3:
9e:0e:de:7e:e6:ae:05:ad:37:54:90:82:b1:c9:07:
44:8b:ad:65:54:a3:00:0b:19:a3:8a:55:c6:76:b3:
f0:5b:17:cb:4f:62:0e:c8:43:a4:3a:77:e7:70:03:
53:1e:1e:28:6d:3b:88:87:c0:28:66:3b:bb:b5:ee:
3e:ff:a0:ad:3f:cf:47:70:19:63:55:3c:b4:c9:b8:
c8:21:66:e4:41:b7:41:13:dd:12:23:57:fa:55:10:
57:b5:76:94:8e:8d:53:da:1b:1c:07:63:c7:9c:df:
e4:6b:31:92:f8:63:15:c5:82:fa:5e:44:be:30:70:
87:c0:fe:99:fe:98:57:f9:a9:93:a3:b1:02:c2:c8:
59:ed:44:0b:47:f8:86:69:1d:21:0f:d9:aa:17:4e:
b5:bf:5b:01:81:f4:42:12:c1:a0:da:77:eb:c5:e9:
d9:2f:50:a4:7d:0e:40:38:14:5b:1a:d5:20:f8:6a:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:1E:F1:8C:2A:15:2C:81:16:2E:A7:11:42:74:AF:C4:FE:B6:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.48.0/24
23.237.68.0/22
23.237.102.0-23.237.105.255
23.237.140.0/23
198.255.86.0-198.255.89.255
198.255.122.0/24
IPv6:
2001:49f0:d04d::-2001:49f0:d04e:ffff:ffff:ffff:ffff:ffff
2001:49f0:d055::/48
2001:49f0:d0a9::-2001:49f0:d0aa:ffff:ffff:ffff:ffff:ffff
2001:49f0:d0bf::/48
2001:49f0:d138::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ca:5e:b8:81:47:d6:0d:a9:cc:1f:21:8b:0f:8d:7d:0e:23:
06:30:fe:35:41:a0:c6:8b:05:99:a6:09:29:dd:90:90:4e:7d:
4f:d0:30:26:10:b2:f4:6c:b3:51:8e:fe:d3:3c:2b:d5:22:25:
60:a9:fc:54:04:86:cb:41:9c:4e:3b:7d:d8:57:cf:36:b3:61:
49:3e:3f:36:d1:98:0c:d2:0a:2d:89:23:18:bd:86:d4:c6:ff:
3c:44:20:87:65:da:b1:2d:5d:e9:4a:0a:e7:0b:1a:9b:39:69:
b7:ab:13:3c:d2:22:ce:29:df:51:6c:33:c5:cd:6d:aa:88:98:
fd:88:5c:9b:b2:3b:6f:d6:49:ad:b4:f0:b1:a1:45:f9:a9:f1:
ea:f8:33:22:69:de:6f:33:73:74:a6:5c:d8:ee:19:e2:83:8e:
f0:bb:8d:ef:1d:cd:ec:c0:6d:27:82:91:aa:e6:ce:94:6a:e8:
7d:81:6a:50:3c:64:a8:7f:d7:7a:24:12:e8:17:a5:11:be:de:
e0:0b:9d:d5:26:2f:aa:70:8d:bb:f6:02:3d:1f:a4:88:dc:4a:
3c:bc:d1:9e:9f:e0:19:2d:96:64:ad:ff:c3:6c:e4:d4:ca:ff:
81:2e:1e:1c:ad:76:ae:55:29:97:61:d0:b3:14:ce:8c:1f:41:
c5:a7:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:10 2025 by rpki-client on console.sobornost.net