Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa
File: d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa (raw, json)
Hash identifier: rf6ogJHUr40jAzZbdHSoY7+NxTnJzJCenhX2FdHUANw=
Subject key identifier: 54:D9:8A:67:8F:62:53:8A:83:36:C6:D8:AA:84:68:10:80:2D:E5:59
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584937D93CD0A21FC0316024DD00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 6453
IP address blocks: 23.237.126.0/23 maxlen: 23
23.237.130.0/23 maxlen: 23
23.237.136.0/23 maxlen: 23
23.237.138.0/24 maxlen: 24
23.237.191.0/24 maxlen: 24
23.237.218.0/24 maxlen: 24
23.237.244.0/24 maxlen: 24
23.237.250.0/24 maxlen: 24
50.7.0.0/24 maxlen: 24
50.7.8.0/24 maxlen: 24
50.7.9.0/24 maxlen: 24
50.7.10.0/24 maxlen: 24
50.7.11.0/24 maxlen: 24
50.7.12.0/24 maxlen: 24
50.7.13.0/24 maxlen: 24
50.7.15.0/24 maxlen: 24
50.7.16.0/24 maxlen: 24
50.7.18.0/24 maxlen: 24
50.7.19.0/24 maxlen: 24
50.7.20.0/24 maxlen: 24
50.7.21.0/24 maxlen: 24
66.90.124.0/24 maxlen: 24
192.240.122.0/24 maxlen: 24
198.255.16.0/24 maxlen: 24
216.227.131.0/24 maxlen: 24
216.227.142.0/23 maxlen: 23
216.227.144.0/23 maxlen: 23
216.227.146.0/23 maxlen: 23
216.227.148.0/23 maxlen: 23
216.227.150.0/23 maxlen: 23
216.227.152.0/23 maxlen: 23
216.227.154.0/23 maxlen: 23
216.227.156.0/23 maxlen: 23
216.227.160.0/23 maxlen: 23
216.227.162.0/24 maxlen: 24
216.227.163.0/24 maxlen: 24
216.227.164.0/24 maxlen: 24
216.227.165.0/24 maxlen: 24
216.227.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3c:d0:a2:1f:c0:31:60:24:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=b35986cb-04b3-4a6f-995a-5bd423bfcdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:86:ec:13:70:7e:12:45:cf:94:9b:63:6f:
79:dd:23:8f:a5:cd:c2:0c:c7:08:95:93:f5:ef:ed:
96:b7:e5:38:00:b6:41:14:86:28:7c:30:62:24:b2:
13:b5:9d:e8:50:d4:eb:6f:4d:f9:b2:ba:67:3e:8e:
3c:5a:63:6c:6e:0e:9b:05:dc:a3:4c:a9:d0:70:27:
72:d1:d3:54:43:3a:3c:ae:73:c7:13:89:84:4a:15:
6b:6b:7d:6a:50:e0:12:0e:a6:7a:75:c7:30:47:7d:
a9:d6:4a:81:9f:13:8c:63:b8:2b:08:b2:36:27:38:
8e:06:00:8b:c7:1d:aa:98:87:a9:af:d8:4a:ce:44:
27:cc:4e:1c:24:1e:eb:bb:23:50:80:b1:37:a6:75:
c0:14:59:9b:8d:54:1d:63:ee:59:71:69:01:65:f3:
52:f9:f2:fd:16:bc:76:1f:89:c5:a2:c2:0a:ef:69:
c5:38:71:bc:be:f0:71:30:48:85:2c:14:fb:40:cd:
b3:63:64:50:4b:04:17:48:b1:3a:d8:ae:47:79:d1:
df:ec:0d:8e:06:4e:a4:61:c2:57:dd:7c:63:29:85:
72:e3:02:47:80:8f:9a:de:68:cf:7d:a8:f5:31:2c:
5e:4a:21:53:1a:fd:60:77:e5:b0:04:86:93:e2:d3:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:8A:67:8F:62:53:8A:83:36:C6:D8:AA:84:68:10:80:2D:E5:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d8f62ea2-56ef-310c-a4e6-f6220dbdab9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.126.0/23
23.237.130.0/23
23.237.136.0-23.237.138.255
23.237.191.0/24
23.237.218.0/24
23.237.244.0/24
23.237.250.0/24
50.7.0.0/24
50.7.8.0-50.7.13.255
50.7.15.0-50.7.16.255
50.7.18.0-50.7.21.255
66.90.124.0/24
192.240.122.0/24
198.255.16.0/24
216.227.131.0/24
216.227.142.0-216.227.157.255
216.227.160.0-216.227.165.255
216.227.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5d:5f:33:67:85:21:92:4b:35:bb:e3:3b:58:59:dd:19:af:
11:b3:a9:1d:13:b6:65:61:ce:dc:0b:aa:12:1c:93:49:b7:fe:
e8:ec:9f:d4:c8:3f:16:27:d7:57:d1:9a:ea:d8:a5:c7:b2:35:
da:b5:0b:78:b1:a8:06:93:f3:89:79:3a:e0:a9:ff:9c:57:42:
bc:91:e2:c5:37:ba:01:ef:9e:c1:b6:77:92:b4:fa:2d:f8:b2:
2c:15:4d:21:7c:42:05:ed:e0:9c:07:7f:7a:1c:33:55:14:31:
db:a5:37:eb:a2:30:2a:ce:87:ff:a1:e7:08:63:d2:a3:ee:6d:
fc:ca:58:ae:34:0d:0d:be:bc:e6:80:89:16:43:44:03:df:bb:
27:fd:f8:30:34:1f:ae:4a:61:b0:54:4e:05:dd:2f:33:fa:f7:
57:7e:19:ae:42:e6:5a:b0:24:0f:c8:47:8a:e5:98:91:b7:55:
83:d4:3a:a2:07:4b:02:e1:71:0e:1b:56:db:a3:33:26:15:54:
4d:75:e8:cd:e3:32:c7:95:9b:0e:8d:c6:bb:1f:ca:e6:52:4e:
20:29:2a:6d:8c:eb:64:14:76:a1:ec:93:17:35:e2:b3:13:e5:
6c:44:e1:ba:8d:81:9c:60:1c:bd:94:6b:b7:ec:e1:8d:a4:fd:
54:40:8b:f6
-----BEGIN CERTIFICATE-----
MIIG3jCCBcagAwIBAgIUAQ0Mn0MoWEk32TzQoh/AMWAk3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
YjM1OTg2Y2ItMDRiMy00YTZmLTk5NWEtNWJkNDIzYmZjZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p+G7BNwfhJFz5SbY2953SOPpc3CDMcIlZP1
7+2Wt+U4ALZBFIYofDBiJLITtZ3oUNTrb035srpnPo48WmNsbg6bBdyjTKnQcCdy
0dNUQzo8rnPHE4mEShVra31qUOASDqZ6dccwR32p1kqBnxOMY7grCLI2JziOBgCL
xx2qmIepr9hKzkQnzE4cJB7ruyNQgLE3pnXAFFmbjVQdY+5ZcWkBZfNS+fL9Frx2
H4nFosIK72nFOHG8vvBxMEiFLBT7QM2zY2RQSwQXSLE62K5HedHf7A2OBk6kYcJX
3XxjKYVy4wJHgI+a3mjPfaj1MSxeSiFTGv1gd+WwBIaT4tP8dQIDAQABo4ID8DCC
A+wwHQYDVR0OBBYEFFTZimePYlOKgzbG2KqEaBCALeVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDhmNjJlYTItNTZlZi0z
MTBjLWE0ZTYtZjYyMjBkYmRhYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAEX
7X4DBAEX7YIwDAMEAxftiAMEABftigMEABftvwMEABft2gMEABft9AMEABft+gME
ADIHADAMAwQDMgcIAwQBMgcMMAwDBAAyBw8DBAAyBxAwDAMEATIHEgMEATIHFAME
AEJafAMEAMDwegMEAMb/EAMEANjjgzAMAwQB2OOOAwQB2OOcMAwDBAXY46ADBAHY
46QDBADY478wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAZV1fM2eFIZJLNbvjO1hZ3RmvEbOpHRO2ZWHO3Auq
EhyTSbf+6Oyf1Mg/FifXV9Ga6tilx7I12rULeLGoBpPziXk64Kn/nFdCvJHixTe6
Ae+ewbZ3krT6LfiyLBVNIXxCBe3gnAd/ehwzVRQx26U366IwKs6H/6HnCGPSo+5t
/MpYrjQNDb685oCJFkNEA9+7J/34MDQfrkphsFROBd0vM/r3V34ZrkLmWrAkD8hH
iuWYkbdVg9Q6ogdLAuFxDhtW26MzJhVUTXXozeMyx5WbDo3Gux/K5lJOICkqbYzr
ZBR2oeyTFzXisxPlbEThuo2BnGAcvZRrt+zhjaT9VECL9g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:20 2025 by rpki-client