Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27c70b14-1730-3652-b8ab-c3b7703babdf.roa
File: 27c70b14-1730-3652-b8ab-c3b7703babdf.roa (raw, json)
Hash identifier: 26FG7+5JdilD7MCERSP0jq8bHssxj8KCzTo+XHmjvKQ=
Subject key identifier: 50:6C:24:B6:C4:10:9C:2A:35:B8:E8:AB:B2:5F:69:ED:EF:43:48:DE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584553331A7723A287E9A885B280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27c70b14-1730-3652-b8ab-c3b7703babdf.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 206.214.96.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:1a:77:23:a2:87:e9:a8:85:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=ed0e3c50-0bd8-4168-889c-61ced2bd0c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:a3:59:65:2f:1b:3f:20:f3:be:4f:c1:79:
3e:c1:94:5a:4e:b0:c2:a9:fd:d7:ed:53:51:3d:00:
f6:cd:03:c1:58:63:c3:44:84:3b:91:1c:16:75:35:
bb:ac:1c:07:3f:1d:ff:55:6b:3c:68:89:00:3a:4e:
7b:03:9a:5b:1d:c1:59:cf:bc:ca:1e:48:66:3d:e2:
9b:00:be:d1:47:ea:e3:78:be:d1:63:94:dc:ca:68:
99:5c:8b:9a:14:af:85:24:09:3b:48:9d:e4:0e:98:
c1:48:0d:4a:7e:fa:04:be:63:d4:94:9d:b6:83:7b:
09:c6:d8:b2:71:98:35:83:a3:4c:76:c1:2a:6a:63:
fa:ab:27:ea:70:a9:e5:02:6a:24:6b:9b:6e:56:c4:
45:c6:0e:e3:c4:3c:b8:c6:84:21:e0:3d:77:97:cf:
27:58:07:3d:72:18:bf:d9:25:48:58:40:8c:f8:14:
55:ac:c0:36:8f:86:d1:9f:9f:16:59:04:f4:0e:5c:
d5:8b:8d:5c:7d:de:9f:31:e1:4d:86:89:52:57:86:
85:d5:f5:40:a6:62:81:39:76:50:31:6d:22:1b:0e:
8d:38:96:9c:5c:15:49:a9:1c:93:da:02:0d:12:17:
b5:00:a0:68:5a:2f:3c:3d:df:2b:c5:e3:34:66:f9:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:24:B6:C4:10:9C:2A:35:B8:E8:AB:B2:5F:69:ED:EF:43:48:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27c70b14-1730-3652-b8ab-c3b7703babdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.214.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:41:50:d8:18:21:d3:b5:c6:0d:99:f4:1e:1c:cf:d7:79:80:
3c:19:67:19:5f:d4:f9:a1:c3:bd:20:70:f5:f4:5c:5c:17:ad:
a0:38:59:1a:94:f1:fe:0d:be:ff:4f:f5:bd:43:d3:58:d3:e5:
09:94:22:46:02:57:22:6f:ff:e0:e7:8d:1c:62:e6:7d:aa:9d:
5b:5e:a6:36:dd:b6:4f:0f:dd:af:63:31:98:46:f3:36:da:18:
0d:ba:81:01:f0:57:57:d5:3d:12:0b:b8:f9:10:13:1e:56:9d:
35:f2:70:93:d2:fb:0b:63:ac:29:d9:e9:72:12:7c:3d:59:7a:
1b:33:da:b5:b0:94:de:17:79:30:d1:31:2c:1f:1b:83:a5:c6:
39:11:03:32:8a:65:dc:10:ff:17:b8:73:fb:fd:d7:84:f9:1d:
a9:ac:0b:56:e3:07:ea:04:23:bd:b3:4e:3a:aa:b6:b9:3b:92:
7d:6e:f3:5a:fa:15:63:cf:b9:45:30:b2:48:74:cd:ed:50:91:
b1:51:2f:06:fb:7d:92:d1:5b:16:2f:cd:9b:98:88:e0:34:39:
c1:76:df:c7:7d:78:1a:30:e3:2c:3e:7b:4a:bf:eb:bf:07:54:
dd:98:d0:c4:aa:ac:50:9a:78:ae:ab:db:8d:d0:f5:12:9d:e4:
c7:6f:51:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxp3I6KH6aiFsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
ZWQwZTNjNTAtMGJkOC00MTY4LTg4OWMtNjFjZWQyYmQwYzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pKjWWUvGz8g875PwXk+wZRaTrDCqf3X7VNR
PQD2zQPBWGPDRIQ7kRwWdTW7rBwHPx3/VWs8aIkAOk57A5pbHcFZz7zKHkhmPeKb
AL7RR+rjeL7RY5TcymiZXIuaFK+FJAk7SJ3kDpjBSA1KfvoEvmPUlJ22g3sJxtiy
cZg1g6NMdsEqamP6qyfqcKnlAmoka5tuVsRFxg7jxDy4xoQh4D13l88nWAc9chi/
2SVIWECM+BRVrMA2j4bRn58WWQT0DlzVi41cfd6fMeFNholSV4aF1fVApmKBOXZQ
MW0iGw6NOJacXBVJqRyT2gINEhe1AKBoWi88Pd8rxeM0ZvmkYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBsJLbEEJwqNbjoq7Jfae3vQ0jeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdjNzBiMTQtMTczMC0z
NjUyLWI4YWItYzNiNzcwM2JhYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNBUNgYIdO1xg2Z9B4cz9d5gDwZZxlf1Pmhw70gcPX0XFwXraA4WRqU
8f4Nvv9P9b1D01jT5QmUIkYCVyJv/+DnjRxi5n2qnVtepjbdtk8P3a9jMZhG8zba
GA26gQHwV1fVPRILuPkQEx5WnTXycJPS+wtjrCnZ6XISfD1Zehsz2rWwlN4XeTDR
MSwfG4OlxjkRAzKKZdwQ/xe4c/v914T5HamsC1bjB+oEI72zTjqqtrk7kn1u81r6
FWPPuUUwskh0ze1QkbFRLwb7fZLRWxYvzZuYiOA0OcF238d9eBow4yw+e0q/678H
VN2Y0MSqrFCaeK6r243Q9RKd5MdvUWA=
-----END CERTIFICATE-----
Generated at Tue Mar 26 17:45:14 2024 by rpki-client on console-fra.rpki-client.org