Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e20323035363633.roa
File: 32332e3134322e32342e302f32342d3234203d3e20323035363633.roa (raw, json)
Hash identifier: JQdG/DfN9wRnJIrb/b8YgayoW8t6fkd3u8/TvvFKa8A=
Subject key identifier: 61:D9:84:28:C1:7A:8F:F0:F7:C6:D7:D7:A6:68:D2:89:6F:26:E2:D9
Certificate issuer: /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial: 58E77E772E4E38ECBBAB2FFE8B83DEE9F4CF1210
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e20323035363633.roa
Signing time: Tue 17 Jun 2025 01:27:33 +0000
ROA not before: Tue 17 Jun 2025 01:22:33 +0000
ROA not after: Tue 16 Jun 2026 01:27:33 +0000
asID: 205663
IP address blocks: 23.142.24.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e7:7e:77:2e:4e:38:ec:bb:ab:2f:fe:8b:83:de:e9:f4:cf:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Validity
Not Before: Jun 17 01:22:33 2025 GMT
Not After : Jun 16 01:27:33 2026 GMT
Subject: CN=61D98428C17A8FF0F7C6D7D7A668D2896F26E2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:26:76:0b:92:26:68:6c:d5:79:ba:9a:72:
a0:b9:39:fd:ec:69:93:db:37:e1:cd:29:50:c9:f2:
32:2a:43:e3:92:00:15:10:c2:71:5f:88:62:e2:2b:
6b:04:7e:af:b6:f5:59:0f:a1:03:33:67:7b:51:c2:
b9:d6:ca:07:86:d3:d0:3b:9a:0c:d2:f6:25:1f:6d:
50:1e:b5:53:df:e0:ff:db:62:85:2f:b3:07:4f:f6:
fd:a4:8c:90:32:08:ee:c4:f8:cd:fa:3b:87:e7:62:
22:fa:14:55:ee:49:6c:1f:8f:1c:4c:3d:f1:aa:35:
72:9f:10:37:da:14:83:e6:64:2e:cd:3b:fa:9f:41:
15:1b:87:20:f4:c9:d8:23:a5:de:35:79:75:b2:0c:
d4:a8:29:d7:c9:6f:14:aa:0e:be:af:ee:2e:d1:9b:
b2:6b:37:2d:65:2d:a7:c4:4c:4c:cc:2c:9e:51:a1:
ea:ca:e5:d3:78:2c:22:2f:50:d8:c7:4b:36:b3:61:
d6:8c:9c:2d:7f:2d:3c:0f:4d:e3:28:2a:8d:74:b3:
4f:02:e6:fe:2b:5d:07:03:78:50:20:60:22:70:d8:
0c:3e:c1:a9:70:75:7e:39:01:a6:54:6e:de:a1:38:
ce:81:34:19:f7:05:1c:67:07:cc:26:fb:ed:25:67:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:84:28:C1:7A:8F:F0:F7:C6:D7:D7:A6:68:D2:89:6F:26:E2:D9
X509v3 Authority Key Identifier:
keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.142.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:32:a7:6e:6e:70:09:ba:6a:29:98:ec:4a:bf:b3:09:10:22:
6b:40:5e:4e:80:1c:a5:8b:6e:90:22:19:57:70:bf:39:4a:a1:
0c:0e:19:58:fd:b3:a3:54:16:32:28:b5:30:8c:ae:78:82:cb:
f6:e4:aa:dc:40:0c:e8:bc:f3:29:c1:bd:0e:a8:bc:16:1f:18:
65:f9:2a:74:70:84:62:0f:15:b4:70:b3:1b:cf:c0:01:f6:ea:
4e:db:4c:33:90:df:00:9a:ff:62:fb:27:03:e6:5a:1f:d5:78:
c9:d6:64:66:64:5b:70:36:13:eb:c2:a9:46:19:ea:20:63:59:
4c:7e:21:05:f2:b4:fb:77:05:9d:de:01:ab:15:47:99:43:a8:
de:ed:1f:97:d3:fc:e1:99:41:62:ef:a1:ca:cc:fa:de:8c:8a:
98:cc:51:bb:ec:36:e6:92:ba:6f:23:3c:f2:23:19:26:56:97:
3c:73:4c:e7:46:e4:f0:21:8a:c3:4b:02:d8:8f:e8:d3:7e:4e:
18:57:5a:04:58:75:30:ea:c1:d7:72:36:97:88:e0:71:24:b9:
16:51:6b:44:ac:9f:f8:75:f1:5a:2d:2f:67:4d:f4:17:0b:75:
a5:fd:ef:85:a1:39:71:27:11:9b:e2:bd:d6:3d:2e:22:e5:a1:
58:40:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:16:43 2025 by rpki-client