Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/9c4db1ed-e717-3c8a-b0ea-92a46cded202.roa
File: 9c4db1ed-e717-3c8a-b0ea-92a46cded202.roa (raw, json)
Hash identifier: 5/tV6NUSaP7NaHs8XD63tm8k6wmV+yrBQoEL2SFWLPI=
Subject key identifier: B7:38:13:A4:03:5C:46:D5:57:AF:4C:2D:13:28:0D:D2:06:5B:57:FD
Certificate issuer: /CN=274c26e3-a417-425b-8d4b-316c68f35e06
Certificate serial: 010D0C9F4328583E94417001D1DE5FD18A08D560
Authority key identifier: 3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/9c4db1ed-e717-3c8a-b0ea-92a46cded202.roa
Signing time: Tue 21 Jun 2022 13:50:44 +0000
ROA not before: Tue 21 Jun 2022 13:50:44 +0000
ROA not after: Mon 23 Sep 2024 04:00:00 +0000
asID: 14618
IP address blocks: 208.100.192.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:41:70:01:d1:de:5f:d1:8a:08:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274c26e3-a417-425b-8d4b-316c68f35e06
Validity
Not Before: Jun 21 13:50:44 2022 GMT
Not After : Sep 23 04:00:00 2024 GMT
Subject: CN=271ffc00-97ae-4a44-96a2-56d4b0d54487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:5f:82:e1:d6:0f:f1:d5:cc:b4:c3:e5:55:
11:1e:53:6f:82:cb:6c:2f:79:10:77:4f:08:62:82:
da:c4:55:4f:fb:e2:95:e1:b6:74:6e:bf:64:12:b3:
63:a5:90:e8:96:9a:72:d5:51:f9:79:a9:d5:d8:44:
d0:8d:a9:e7:86:16:4c:d1:6d:63:b7:94:6e:b5:0b:
fa:23:65:83:64:5a:61:f1:67:c5:53:01:64:a7:f4:
10:9a:88:87:88:7e:66:62:19:07:98:c0:e8:46:17:
1c:ac:8e:fe:43:b8:89:0a:d0:c7:0f:71:87:6d:46:
81:c4:bf:ee:be:3a:09:2d:ca:75:e8:fc:db:3b:d0:
15:4d:c0:c2:06:0f:7d:85:e0:7b:ed:16:b0:f7:ae:
61:02:7c:ac:d3:40:bc:08:6e:02:53:0a:85:2a:61:
3c:3b:2b:da:50:c6:21:1e:d6:7b:f3:5f:ef:02:df:
ae:cc:da:ec:99:58:97:1d:47:cc:cc:33:9b:07:30:
a0:d9:88:6f:e1:b6:6f:18:6d:53:a3:31:e5:af:52:
bd:36:ae:1d:f9:e5:cb:a9:32:ab:e7:b9:da:a9:51:
aa:6b:67:fb:1d:f9:89:33:d1:42:01:4d:34:ba:c8:
b6:a8:b4:b9:d0:0d:de:ed:c4:6f:95:1a:ac:32:ac:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:38:13:A4:03:5C:46:D5:57:AF:4C:2D:13:28:0D:D2:06:5B:57:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/9c4db1ed-e717-3c8a-b0ea-92a46cded202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.crl
X509v3 Authority Key Identifier:
keyid:3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
sbgp-ipAddrBlock: critical
IPv4:
208.100.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:eb:f5:0a:44:b4:f9:00:f3:38:40:5f:98:6e:22:f0:db:03:
01:0c:96:e3:0b:02:5c:37:74:3b:b4:36:51:d6:ec:a6:19:9f:
29:aa:8a:23:45:ac:87:82:f9:ee:98:a7:d8:af:18:78:da:77:
6c:d8:38:3f:6d:b5:0b:24:a4:ef:4a:1d:c9:06:a9:6a:57:04:
2a:2c:75:ce:92:59:d6:11:ce:fb:5c:34:eb:a3:3c:03:c2:3d:
61:38:41:6e:2b:2b:f7:58:c0:d0:22:35:1f:a0:58:53:cf:9d:
03:14:f7:44:51:ac:3d:44:56:75:f6:da:89:6d:3e:a2:27:f0:
24:bd:d7:89:96:2d:78:36:b1:a7:07:df:44:d9:30:5e:66:93:
14:44:2a:b8:18:d5:58:d6:b3:1c:b6:49:65:c5:b5:bc:da:6c:
85:bc:40:e5:e5:f9:ab:26:3f:a0:d4:99:24:bb:d8:e1:1a:42:
c3:2a:e6:95:0c:28:d5:ad:f2:1e:25:8e:b7:86:29:0a:e1:39:
a0:08:c3:bc:88:88:cc:43:6b:85:f7:42:3b:f7:20:fa:b1:55:
15:b5:30:42:9b:e5:4e:ee:df:bb:0b:01:14:d5:2e:91:77:f6:
34:27:2c:74:82:7b:06:71:18:9d:cc:ad:6e:11:0a:36:f3:e2:
ce:4f:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:42 2025 by rpki-client