Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e20313938313235.roa
File: 32372e302e3233332e302f32342d3234203d3e20313938313235.roa (raw, json)
Hash identifier: XI5roB/emrkUrFnqrpuClfyWsYe5WqXDNJCTtxMal+I=
Subject key identifier: ED:FC:7F:BD:F8:7A:C6:0D:6D:40:83:2F:C7:16:17:5D:8C:E7:24:47
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 450CA91687F438E4297C1CB0A6536CA95166BC98
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e20313938313235.roa
Signing time: Sat 01 Jul 2023 00:44:55 +0000
ROA not before: Sat 01 Jul 2023 00:39:55 +0000
ROA not after: Sat 29 Jun 2024 00:44:55 +0000
asID: 198125
IP address blocks: 27.0.233.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0c:a9:16:87:f4:38:e4:29:7c:1c:b0:a6:53:6c:a9:51:66:bc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jul 1 00:39:55 2023 GMT
Not After : Jun 29 00:44:55 2024 GMT
Subject: CN=EDFC7FBDF87AC60D6D40832FC716175D8CE72447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:e2:06:5e:61:9f:cb:6d:9d:9d:1b:9d:65:
47:2a:92:76:41:17:fc:52:bd:61:9f:f8:85:71:80:
da:30:87:05:39:43:7f:93:2b:cc:ac:9b:a9:39:45:
20:eb:77:c7:96:a8:88:89:3c:d1:d6:33:cf:37:b9:
c4:e5:24:cb:96:19:82:75:4e:b0:68:e9:ab:62:13:
38:14:ac:8e:2f:78:fb:e0:49:75:78:3d:ab:f9:d2:
0d:34:04:76:e1:21:1e:60:31:4e:6b:39:55:6e:e8:
e2:0a:72:89:03:98:fe:07:5d:ff:8f:c9:0f:4e:da:
5b:7f:7a:de:00:51:0d:1b:0c:4c:51:9b:0e:d7:0c:
d7:f6:d6:18:5c:44:45:94:cd:5a:5e:9e:3b:fe:28:
a0:02:2d:7a:53:3f:75:96:cd:ea:92:7f:42:ac:63:
0b:b1:71:d6:d3:87:6c:83:06:b3:f3:67:c8:30:7c:
b3:a4:b5:d7:81:56:01:e9:64:ff:03:e1:69:57:42:
f7:f8:3c:db:df:48:bd:fe:c4:69:2d:b9:72:e7:76:
d3:54:e0:98:04:1e:5d:77:6b:9f:5e:5b:9b:e4:c8:
d9:5d:93:35:23:bd:cc:e3:9b:a4:16:f1:70:d4:f2:
99:7e:b3:e2:cd:d8:a3:b4:06:52:e4:92:a2:d1:4e:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:7F:BD:F8:7A:C6:0D:6D:40:83:2F:C7:16:17:5D:8C:E7:24:47
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e20313938313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7c:b9:08:77:ae:56:60:e2:f6:a7:27:42:88:4e:66:fe:62:
b7:2d:8a:04:f5:2e:42:f5:3d:b6:b9:92:19:92:f5:78:b8:e4:
50:61:10:91:9d:db:ae:f5:ca:df:2d:57:82:09:04:d6:d8:06:
dc:97:39:01:af:5a:75:e3:2c:96:a4:35:d2:1a:ba:e7:47:55:
84:d1:fb:b9:c1:3d:b3:ad:71:0b:3b:81:de:13:7c:8b:bc:bf:
e5:ab:fe:c0:29:1b:46:46:57:f6:b9:77:bc:c1:3d:19:90:c7:
2e:e0:59:84:60:0c:b9:3c:5e:b5:90:13:d4:95:eb:d4:78:f7:
38:62:76:2c:a2:58:8b:e2:bf:f5:5d:1e:38:d5:c4:49:6b:65:
b9:9b:6a:93:a9:ca:63:dd:a1:bc:9b:df:cd:a7:ff:7c:76:f8:
3e:ef:0e:f5:e9:59:0d:f0:66:fc:99:93:41:4b:37:56:d2:dc:
97:8e:6d:35:01:50:88:93:97:64:a1:d4:67:3a:51:84:7a:16:
35:1d:29:21:ee:94:76:b3:26:11:98:66:4c:6b:77:d2:ac:ae:
62:9d:5a:6d:fa:32:77:fe:eb:31:1a:f0:6c:88:41:8b:cf:f3:
99:1a:06:71:a0:26:95:36:c1:64:df:e3:d5:3f:24:8e:2f:3d:
d7:13:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:09 2025 by rpki-client