Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea2e7bf9-e97e-3740-b659-8fd095167f5c.roa
File: ea2e7bf9-e97e-3740-b659-8fd095167f5c.roa (raw, json)
Hash identifier: TShJEPEyjqqtNbQF2FGSKyEOJbcL7inaDgco6qm1e+U=
Subject key identifier: 93:BB:00:06:B3:79:15:42:BB:D8:E2:DF:B6:F4:45:5B:5A:14:01:8E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285845533317DCDBC8951C58A5ABE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea2e7bf9-e97e-3740-b659-8fd095167f5c.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 204.30.32.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:17:dc:db:c8:95:1c:58:a5:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=53973dfe-2b55-484e-8ee0-e1a2a6cd9ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:cf:5c:ef:96:b9:2f:84:ed:fb:9a:ab:22:
24:ad:71:57:98:a2:ca:1f:59:70:eb:8d:a9:81:ae:
56:0c:0c:54:a7:b0:47:ce:5f:74:55:4d:1c:ba:dd:
2a:94:6d:8c:f5:b3:c2:7e:bf:bf:35:ce:12:18:fe:
c3:93:57:00:14:6f:c4:9d:fb:7d:c2:a4:e0:0a:14:
bf:66:44:e1:6e:0c:c3:dd:70:4d:4e:f2:b4:9d:e0:
aa:9d:06:7d:36:ef:c9:2f:4b:57:80:56:27:17:ab:
80:e2:ee:de:ac:27:70:96:fa:59:74:46:59:17:69:
65:13:89:ff:20:33:7f:6e:c9:25:f7:7a:c8:11:1b:
59:31:e9:83:03:02:d0:bd:96:4b:4d:25:af:1a:5a:
6c:62:4c:d4:4a:fa:9d:7e:78:20:c5:86:0a:5d:6b:
c8:ba:9c:3d:02:5e:d5:90:a4:88:63:ae:3f:49:9c:
6d:ec:d6:fa:5a:37:3c:c6:36:ab:5a:db:3b:47:55:
5b:c3:27:c2:15:86:48:2b:21:93:85:e0:72:0e:fc:
95:73:2a:8d:3c:0b:b2:a7:d8:db:5a:09:eb:f0:e6:
45:70:07:dd:2d:29:de:0d:6b:9f:70:d0:dd:8b:4e:
27:00:93:24:e5:2a:27:05:22:62:ec:b4:35:eb:38:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:00:06:B3:79:15:42:BB:D8:E2:DF:B6:F4:45:5B:5A:14:01:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea2e7bf9-e97e-3740-b659-8fd095167f5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.30.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:83:0b:69:da:e5:aa:f6:4a:86:ef:db:c1:6a:e1:5f:8f:64:
28:7d:87:1c:06:31:6a:6e:c2:7a:1d:81:3f:5b:fd:79:ab:d6:
4d:de:98:f2:70:bd:3e:a1:26:a6:84:bf:93:ec:3f:ad:d1:f4:
ae:f9:03:49:56:e0:32:95:1d:51:2d:ff:39:6e:b2:73:52:73:
3c:c2:98:83:a7:62:04:e7:37:f1:43:8d:08:b7:0b:00:85:fd:
61:d3:16:d2:d5:07:87:a8:71:5e:6b:2d:1e:00:09:ff:e7:35:
d6:cc:87:e1:41:b7:33:5a:a7:7b:83:6e:be:78:39:00:4c:26:
e4:ab:8c:f9:73:02:17:80:03:89:67:b5:df:1f:62:d4:f4:d0:
f7:e5:1d:7d:b6:a9:3c:a9:7b:23:c0:06:a1:21:dd:1d:b8:69:
76:2e:74:36:83:04:ed:13:fe:ac:88:5b:1c:e0:c7:5b:8c:e7:
4e:15:fd:b3:6f:fb:3b:3e:f3:69:a8:e4:35:4e:7b:12:ee:b8:
5a:b8:60:e8:60:8e:4f:75:f6:19:7c:ba:64:95:8b:45:79:5b:
25:e7:f7:34:3c:e1:d0:3e:bc:00:b2:d7:ee:a6:9c:f5:cb:fd:
35:51:37:71:00:df:b3:8f:c5:e9:10:d5:de:3d:d4:b0:a9:e1:
4f:5c:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:45:17 2024 by rpki-client on console-fra.rpki-client.org