Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
File: e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa (raw, json)
Hash identifier: JxVjOYN+TanuY2dgqNjcQyBRnd7Ys6DGXdWffvoAiCM=
Subject key identifier: 4A:B2:29:7E:76:D1:23:A1:43:0B:45:31:6E:1A:EE:47:AD:06:5D:8F
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F432858494CC94F8F22721936E3F8ABA0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 30058
IP address blocks: 23.237.53.0/24 maxlen: 24
23.237.58.0/24 maxlen: 24
23.237.76.0/23 maxlen: 24
23.237.86.0/23 maxlen: 24
23.237.192.0/23 maxlen: 24
23.237.230.0/24 maxlen: 24
23.237.240.0/24 maxlen: 24
50.7.68.0/22 maxlen: 24
192.240.96.0/23 maxlen: 24
198.255.2.0/24 maxlen: 24
198.255.20.0/23 maxlen: 24
198.255.76.0/23 maxlen: 24
198.255.78.0/23 maxlen: 24
198.255.80.0/23 maxlen: 24
198.255.82.0/23 maxlen: 24
198.255.125.0/24 maxlen: 24
2001:49f0:d025::/48 maxlen: 48
2001:49f0:d050::/48 maxlen: 48
2001:49f0:d051::/48 maxlen: 48
2001:49f0:d052::/48 maxlen: 48
2001:49f0:d053::/48 maxlen: 48
2001:49f0:d054::/48 maxlen: 48
2001:49f0:d099::/48 maxlen: 48
2001:49f0:d0df::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4f:8f:22:72:19:36:e3:f8:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=9c43072a-b26c-4718-a5eb-52d232276153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:69:e2:2a:4d:d2:2c:b4:32:fe:aa:e0:54:
17:29:da:a4:49:8d:d5:8e:3d:20:77:71:4b:fb:a4:
61:04:ed:78:fc:12:f6:8a:3a:29:f4:c7:69:e0:c3:
7b:44:e6:47:20:fd:52:5f:ce:b0:3b:fd:4b:89:2a:
38:21:e8:31:26:9d:74:dd:aa:cb:3f:80:9c:c1:66:
8b:7d:3e:be:39:8c:a1:f0:4d:97:94:12:20:02:80:
34:31:15:73:66:10:44:70:a0:f9:a6:73:b1:bb:50:
f4:73:75:bc:48:1b:36:fa:0b:f4:cd:ab:29:5d:10:
3c:68:83:89:c1:14:32:d7:1c:d2:6a:97:5a:88:99:
02:ae:8a:bb:0d:95:76:35:ff:e5:b3:38:62:fa:20:
b3:c6:71:85:6a:97:9c:a1:75:93:8e:71:e8:3c:ce:
96:db:29:a3:d9:2b:7c:35:bc:77:9f:fb:cd:5c:26:
e9:86:7f:be:6b:92:be:47:bb:b1:23:5f:70:fb:b4:
b8:3e:50:5a:14:b0:49:a2:e1:8d:91:ca:78:7c:40:
df:dd:17:2d:4b:ad:1a:45:82:09:04:2e:de:b9:6f:
1f:dd:d0:5b:9e:76:25:d9:87:14:74:01:0c:08:3e:
68:f7:9b:73:a5:bb:0a:36:73:8b:ba:94:48:20:e2:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:29:7E:76:D1:23:A1:43:0B:45:31:6E:1A:EE:47:AD:06:5D:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.53.0/24
23.237.58.0/24
23.237.76.0/23
23.237.86.0/23
23.237.192.0/23
23.237.230.0/24
23.237.240.0/24
50.7.68.0/22
192.240.96.0/23
198.255.2.0/24
198.255.20.0/23
198.255.76.0-198.255.83.255
198.255.125.0/24
IPv6:
2001:49f0:d025::/48
2001:49f0:d050::-2001:49f0:d054:ffff:ffff:ffff:ffff:ffff
2001:49f0:d099::/48
2001:49f0:d0df::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1b:ff:77:9c:7a:09:7e:b2:5d:6c:8a:4b:22:a4:36:43:17:
83:44:b0:4d:97:25:a9:bd:69:0b:34:27:9f:c0:fe:2e:8b:1c:
3f:30:dc:9b:27:76:d5:32:1b:81:95:d7:e1:a6:df:1e:61:c0:
0b:f5:c3:81:35:55:94:05:e1:00:95:79:76:b9:e1:5a:a2:70:
de:79:8f:8e:ad:76:50:4f:7d:59:a7:a6:7b:0e:7f:a1:54:42:
f3:64:02:de:2c:f5:36:c2:f8:b0:a5:33:80:7b:c1:96:3f:4c:
66:eb:40:ec:1a:32:79:46:b3:6b:30:a6:83:0a:8b:fe:f4:c2:
e9:2f:de:be:07:f1:63:f6:74:60:da:d6:0a:b3:93:c4:ba:00:
59:b2:b1:3e:53:38:07:43:7c:0a:3f:eb:3e:9a:45:aa:17:f8:
07:56:94:82:de:d2:c2:8c:05:c9:1e:8c:26:15:46:3f:b9:aa:
f7:b4:bc:ae:dc:34:b8:48:53:28:24:b9:4b:c0:e9:79:8f:e5:
f5:5b:95:5a:32:9a:74:04:7d:b3:b1:b7:a6:1b:20:a6:53:bc:
c7:96:b0:b3:3a:81:c0:37:64:9f:02:c0:c2:65:4b:59:22:44:
37:65:98:05:d3:44:4a:39:92:cc:c7:1b:b3:ee:2e:e2:dc:d2:
ed:0b:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:10 2025 by rpki-client on console.sobornost.net