Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
File: 472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa (raw, json)
Hash identifier: 1xoJRnYb9FIV7aEAOfSl8ttMWRNuLqsw6xVuTqXnuxs=
Subject key identifier: E3:38:BC:70:58:18:04:43:32:92:EF:E3:89:82:09:A9:2B:40:5A:DF
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584944693D3BA80E472B5292AA00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 30058
IP address blocks: 23.237.47.0/24 maxlen: 24
23.237.62.0/24 maxlen: 24
23.237.78.0/23 maxlen: 24
23.237.88.0/23 maxlen: 24
23.237.144.0/24 maxlen: 24
23.237.145.0/24 maxlen: 24
23.237.146.0/24 maxlen: 24
23.237.160.0/23 maxlen: 24
23.237.202.0/23 maxlen: 24
23.237.251.0/24 maxlen: 24
23.237.252.0/24 maxlen: 24
50.7.64.0/22 maxlen: 24
192.240.98.0/23 maxlen: 24
192.240.112.0/22 maxlen: 24
192.240.118.0/23 maxlen: 24
198.255.22.0/23 maxlen: 24
198.255.124.0/24 maxlen: 24
216.227.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3d:3b:a8:0e:47:2b:52:92:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=bd6ec141-cdc9-4701-875d-b690305a58ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:63:4e:27:63:34:8a:ea:56:13:7d:6b:cd:
93:0d:b6:5f:74:7c:bf:91:c6:14:17:71:30:cb:b3:
94:d5:b4:17:ed:ea:67:d8:e0:2c:6d:da:9d:cc:76:
c9:dc:16:d6:15:30:4b:19:d5:78:4b:2e:74:56:8f:
61:5c:4e:2d:f8:39:1c:7f:c7:47:44:54:47:c0:7e:
8c:28:73:6f:7a:83:ef:65:a7:69:56:26:36:ab:b2:
d5:4c:cd:8a:14:28:ab:8c:0c:51:52:21:de:49:cb:
2d:f0:b4:75:ca:8d:9b:29:4b:96:f5:68:06:77:a5:
66:b5:e4:83:5e:cb:ec:b6:f5:23:78:96:e2:3c:d6:
73:7c:1f:fc:aa:dd:36:92:61:bb:21:8c:19:71:77:
ea:55:be:34:0a:9b:f1:54:5e:15:20:21:aa:92:39:
08:e9:34:e3:cb:f8:39:41:75:da:e1:55:bd:f8:34:
fd:e0:20:ec:f5:56:81:f9:90:df:09:cf:10:f1:23:
d7:e7:fb:ba:9c:a7:5e:fd:85:1c:2d:19:7a:64:96:
e0:2c:74:74:d2:2c:cc:b2:bf:64:6a:46:01:80:d5:
0f:b8:a0:bf:4c:74:32:f8:d5:23:19:b6:51:1b:23:
42:87:f5:05:2c:70:30:bd:47:d9:22:17:e9:ee:bc:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:BC:70:58:18:04:43:32:92:EF:E3:89:82:09:A9:2B:40:5A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.47.0/24
23.237.62.0/24
23.237.78.0/23
23.237.88.0/23
23.237.144.0-23.237.146.255
23.237.160.0/23
23.237.202.0/23
23.237.251.0-23.237.252.255
50.7.64.0/22
192.240.98.0/23
192.240.112.0/22
192.240.118.0/23
198.255.22.0/23
198.255.124.0/24
216.227.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:c8:37:0e:7a:b4:7a:d7:10:7b:d1:1a:99:b7:ec:00:95:5f:
32:9e:32:ea:b2:5d:ed:39:57:cf:c8:6d:2f:4b:8d:47:98:f7:
77:89:94:fd:97:70:79:62:52:dc:28:d8:6d:3a:c8:df:7c:64:
b8:74:b3:c5:bd:5e:f5:7b:44:03:73:2c:80:8c:ef:cf:97:9a:
63:a9:cb:1a:ea:67:9e:78:02:4c:a4:2b:e3:fd:f7:3d:cd:04:
59:7a:24:c3:a3:b5:b4:c7:5f:59:64:8f:31:b1:a9:a7:cc:76:
61:08:60:f1:7a:98:72:51:21:f6:d4:ff:55:22:27:57:94:1a:
98:53:27:a2:c3:3a:3c:bd:0f:2b:66:7b:b3:7a:14:ce:09:aa:
3c:0f:45:84:9d:b2:9d:81:12:c6:47:be:93:91:d9:07:11:09:
9d:4f:d8:d9:58:9e:ef:9e:fe:e7:1c:95:fb:1c:38:4e:9d:de:
69:dd:2a:d9:20:75:ef:8e:f3:1c:5a:9d:c8:14:74:35:93:6c:
c3:63:a9:72:ce:69:2b:6a:00:bf:38:04:f8:24:bb:f3:6c:fb:
f5:cc:84:1b:1d:7d:4c:03:92:c4:ef:47:f6:34:8a:22:d0:f4:
14:31:f3:16:01:da:45:d5:92:6a:ec:fe:48:cb:97:11:05:7f:
a2:f5:06:ab
-----BEGIN CERTIFICATE-----
MIIGqDCCBZCgAwIBAgIUAQ0Mn0MoWElEaT07qA5HK1KSqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YmQ2ZWMxNDEtY2RjOS00NzAxLTg3NWQtYjY5MDMwNWE1OGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN1jTidjNIrqVhN9a82TDbZfdHy/kcYUF3Ew
y7OU1bQX7epn2OAsbdqdzHbJ3BbWFTBLGdV4Sy50Vo9hXE4t+Dkcf8dHRFRHwH6M
KHNveoPvZadpViY2q7LVTM2KFCirjAxRUiHeScst8LR1yo2bKUuW9WgGd6VmteSD
XsvstvUjeJbiPNZzfB/8qt02kmG7IYwZcXfqVb40CpvxVF4VICGqkjkI6TTjy/g5
QXXa4VW9+DT94CDs9VaB+ZDfCc8Q8SPX5/u6nKde/YUcLRl6ZJbgLHR00izMsr9k
akYBgNUPuKC/THQy+NUjGbZRGyNCh/UFLHAwvUfZIhfp7rwcLwIDAQABo4IDujCC
A7YwHQYDVR0OBBYEFOM4vHBYGARDMpLv44mCCakrQFrfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDcyYmMzZjQtMjNjMy0z
ZTUxLWFiOTQtMWNhZGViZGY0MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEABftLwME
ABftPgMEARftTgMEARftWDAMAwQEF+2QAwQAF+2SAwQBF+2gAwQBF+3KMAwDBAAX
7fsDBAAX7fwDBAIyB0ADBAHA8GIDBALA8HADBAHA8HYDBAHG/xYDBADG/3wDBAHY
44owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAZsg3Dnq0etcQe9EambfsAJVfMp4y6rJd7TlXz8htL0uNR5j3
d4mU/ZdweWJS3CjYbTrI33xkuHSzxb1e9XtEA3MsgIzvz5eaY6nLGupnnngCTKQr
4/33Pc0EWXokw6O1tMdfWWSPMbGpp8x2YQhg8XqYclEh9tT/VSInV5QamFMnosM6
PL0PK2Z7s3oUzgmqPA9FhJ2ynYESxke+k5HZBxEJnU/Y2Vie757+5xyV+xw4Tp3e
ad0q2SB1747zHFqdyBR0NZNsw2Opcs5pK2oAvzgE+CS782z79cyEGx19TAOSxO9H
9jSKItD0FDHzFgHaRdWSauz+SMuXEQV/ovUGqw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:32 2025 by rpki-client