Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e20323030353134.roa
File: 32372e302e3233332e302f32342d3234203d3e20323030353134.roa (raw, json)
Hash identifier: psIkFFSe1ru2s22HnwNwKVa5u0tu/vaU8rWKEL27X3E=
Subject key identifier: BB:CC:C8:37:73:97:D8:A5:3B:D7:28:A3:41:43:A9:EB:C1:0D:89:BA
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 09DF3AC2681910477A96F85D1080F616EC6EE135
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e20323030353134.roa
Signing time: Thu 01 Jun 2023 13:47:43 +0000
ROA not before: Thu 01 Jun 2023 13:42:43 +0000
ROA not after: Thu 30 May 2024 13:47:43 +0000
asID: 200514
IP address blocks: 27.0.233.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:df:3a:c2:68:19:10:47:7a:96:f8:5d:10:80:f6:16:ec:6e:e1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jun 1 13:42:43 2023 GMT
Not After : May 30 13:47:43 2024 GMT
Subject: CN=BBCCC8377397D8A53BD728A34143A9EBC10D89BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:48:61:dd:a4:80:67:f4:c4:65:b4:da:26:
60:f1:51:08:a8:80:2f:28:1b:00:c3:6c:62:35:04:
35:29:2b:00:4b:7d:22:ba:1d:33:e6:62:ba:43:ec:
76:96:a7:0a:37:61:1e:69:2f:48:a8:32:2e:ac:80:
d8:a1:5c:00:28:23:02:3a:40:bd:2c:52:b3:e6:ca:
39:a0:f6:83:4e:73:76:e9:1e:88:96:c2:b7:3f:06:
a5:58:70:0d:ce:83:c5:bc:58:b3:43:62:23:f8:cf:
1b:f7:62:9e:33:de:78:45:86:aa:ec:49:36:5b:f8:
b1:39:d4:95:46:a1:00:32:ef:d6:77:bc:7e:a3:c3:
86:8f:dd:19:1e:02:86:c2:53:d2:81:20:d7:e5:a5:
77:d5:11:1e:df:7f:95:3f:e3:b9:96:4c:9d:4c:c5:
7c:8a:21:1b:21:48:58:64:b8:f3:35:0d:0c:51:cf:
93:d5:14:e0:68:ae:7d:68:c7:c6:5e:c3:58:a3:39:
bf:7c:8f:87:ac:c7:33:70:a1:74:00:f2:2f:b2:a6:
5b:d4:10:fc:af:b9:7c:4d:70:40:a7:5a:1f:00:5e:
96:c7:58:ea:0d:57:11:65:3b:35:a8:ef:fd:90:32:
82:d2:7a:87:77:39:6a:24:bc:ee:60:05:5b:96:bf:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:C8:37:73:97:D8:A5:3B:D7:28:A3:41:43:A9:EB:C1:0D:89:BA
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e20323030353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:31:47:a0:30:c8:96:d2:96:e7:8d:94:8b:b2:fe:8f:51:22:
49:66:15:5f:ea:d1:df:cb:cb:c4:c1:33:f5:8a:07:30:0c:61:
09:85:72:32:d6:15:0c:9e:35:30:ee:dc:92:eb:a8:28:e7:e2:
e7:c7:20:ff:dd:3c:81:89:38:f7:f3:2f:86:90:64:e6:ce:c1:
05:e2:81:0a:7f:ec:8e:9c:7e:59:c1:95:2f:f8:13:9f:cb:2f:
b0:09:cd:07:a2:5b:9e:e3:83:03:5d:a0:2f:55:18:3d:45:3e:
c9:22:95:a6:c9:b7:7f:a9:0a:e3:21:88:f3:b5:b0:46:81:7f:
5f:81:0a:e1:d0:5d:29:80:8a:d1:6a:c4:af:0e:4b:e8:27:85:
00:c5:fe:09:22:6a:ca:61:f5:eb:6e:1e:1c:13:e3:70:56:7c:
3c:de:fc:75:d9:26:9d:c3:9c:a0:1a:0e:97:64:2b:ab:bc:8d:
31:08:0d:b6:58:1b:ff:90:82:94:ec:cf:fa:ac:6f:fc:e0:39:
64:b1:63:57:d4:54:32:2c:01:f1:af:a9:c5:e8:86:be:62:40:
67:3a:29:94:d4:10:ae:0f:3e:a0:f4:8a:63:ef:76:e3:21:9d:
64:86:49:66:0b:40:ce:5a:75:c7:47:44:f6:d1:74:fd:a5:03:
7e:16:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:07 2025 by rpki-client