Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
File: 7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa (raw, json)
Hash identifier: bExfsu1KNypU/3Xp0KZ/YNnGrKjur0uxPOS2M66IKYQ=
Subject key identifier: BF:D6:C5:2E:DA:FD:3C:C5:04:82:6C:16:CB:CC:C6:BB:38:51:8F:BF
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584937D93C7C14965F02BFACAB00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 174
IP address blocks: 23.237.126.0/23 maxlen: 23
23.237.130.0/23 maxlen: 23
23.237.136.0/23 maxlen: 23
23.237.138.0/24 maxlen: 24
23.237.191.0/24 maxlen: 24
23.237.218.0/24 maxlen: 24
23.237.244.0/24 maxlen: 24
23.237.250.0/24 maxlen: 24
50.7.0.0/24 maxlen: 24
50.7.8.0/24 maxlen: 24
50.7.9.0/24 maxlen: 24
50.7.10.0/24 maxlen: 24
50.7.11.0/24 maxlen: 24
50.7.12.0/24 maxlen: 24
50.7.13.0/24 maxlen: 24
50.7.15.0/24 maxlen: 24
50.7.16.0/24 maxlen: 24
50.7.18.0/24 maxlen: 24
50.7.19.0/24 maxlen: 24
50.7.20.0/24 maxlen: 24
50.7.21.0/24 maxlen: 24
66.90.124.0/24 maxlen: 24
192.240.122.0/24 maxlen: 24
198.255.16.0/24 maxlen: 24
216.227.131.0/24 maxlen: 24
216.227.142.0/23 maxlen: 23
216.227.144.0/23 maxlen: 23
216.227.146.0/23 maxlen: 23
216.227.148.0/23 maxlen: 23
216.227.150.0/23 maxlen: 23
216.227.152.0/23 maxlen: 23
216.227.154.0/23 maxlen: 23
216.227.156.0/23 maxlen: 23
216.227.160.0/23 maxlen: 23
216.227.162.0/24 maxlen: 24
216.227.163.0/24 maxlen: 24
216.227.164.0/24 maxlen: 24
216.227.165.0/24 maxlen: 24
216.227.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3c:7c:14:96:5f:02:bf:ac:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=e337e033-0273-4f2e-a471-6ece466eaddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:0e:fa:9d:27:1f:68:93:01:98:b0:5a:6d:
4e:19:43:80:37:bb:88:7a:3a:2c:39:3e:2e:c7:66:
e5:71:58:04:5e:4d:a1:0e:ee:91:fe:38:83:8b:74:
8e:a4:2b:b2:e0:38:36:84:76:2c:a6:86:79:73:77:
30:fd:f9:17:e1:ac:26:66:35:6d:69:b1:bc:d5:e3:
39:b2:5c:26:47:8a:22:f6:14:c4:d5:d0:5a:5e:ce:
a4:c5:95:bf:b4:05:40:9e:e9:61:a9:04:c5:76:bb:
6d:d0:d7:84:08:1d:31:03:4d:3f:fb:8d:c7:9e:a2:
61:ee:9a:0c:01:00:f4:af:20:d1:95:b7:b8:2b:95:
b0:02:da:8c:fd:8c:99:ca:81:56:16:29:7c:71:6d:
d7:43:5d:03:af:5d:d8:c1:ef:dc:3e:47:08:fc:0b:
d7:c9:38:75:28:b2:b0:66:c2:6b:6f:d1:42:7b:d0:
55:57:dd:ea:61:94:32:ed:84:b0:eb:9c:72:e1:18:
9b:4f:01:07:24:93:ac:63:da:b9:b9:9c:d0:25:fb:
2a:4e:6b:e4:1e:89:c9:4e:78:e3:b0:8c:09:66:b9:
fb:e6:6b:13:d5:85:83:d3:52:93:85:3a:94:80:10:
37:1d:ce:c8:ef:78:4a:eb:a1:ec:f3:11:43:09:72:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:C5:2E:DA:FD:3C:C5:04:82:6C:16:CB:CC:C6:BB:38:51:8F:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.126.0/23
23.237.130.0/23
23.237.136.0-23.237.138.255
23.237.191.0/24
23.237.218.0/24
23.237.244.0/24
23.237.250.0/24
50.7.0.0/24
50.7.8.0-50.7.13.255
50.7.15.0-50.7.16.255
50.7.18.0-50.7.21.255
66.90.124.0/24
192.240.122.0/24
198.255.16.0/24
216.227.131.0/24
216.227.142.0-216.227.157.255
216.227.160.0-216.227.165.255
216.227.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:37:ac:d1:b4:1a:23:ee:28:c1:99:45:b2:cd:de:7d:21:af:
be:ee:e3:ff:d0:1f:82:51:ca:06:ce:fc:9e:49:b8:d9:cc:57:
f2:4a:b4:18:9a:bf:65:b6:96:c4:aa:0b:d3:7c:d3:6a:a3:5d:
bf:21:11:30:a8:0b:dd:98:60:78:92:2a:d7:bb:63:cc:dc:92:
44:3c:73:5a:a9:76:79:79:7c:59:4d:d3:26:cf:49:80:2b:0e:
df:a0:1a:53:ab:57:eb:90:d8:78:b3:77:68:ca:72:43:1a:ae:
a6:12:8c:9f:0f:20:df:55:4f:2a:b4:72:85:7a:41:84:aa:b6:
77:44:f4:b2:39:90:ba:48:c6:6c:00:62:03:02:a5:ff:6f:16:
f1:0c:31:86:e2:c2:fc:8c:2b:cf:55:3e:d9:58:62:44:1a:cc:
a6:12:eb:c5:97:b3:9d:61:0e:f4:9c:09:df:e6:e5:ee:ab:9a:
ac:66:2b:17:ab:56:4d:df:84:6b:ba:1d:4b:fd:31:6a:eb:e7:
79:a0:6d:32:c2:6a:b4:5d:93:37:fd:bd:a0:3e:4a:2e:35:e2:
31:1c:61:c3:75:77:bb:63:b1:92:a1:30:b6:b2:f4:b8:2f:f8:
26:6e:08:21:9c:34:a7:1e:26:94:1e:40:23:c8:1a:b1:7f:b7:
eb:5b:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:34 2025 by rpki-client