Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/a4c5e963-770d-3825-a03e-4047a728d459.roa
File: a4c5e963-770d-3825-a03e-4047a728d459.roa (raw, json)
Hash identifier: fh7zON5B6z/aW/yJyS9DImdblcgXNC8MTXUw6tjzC7Y=
Subject key identifier: 62:A5:79:AE:C9:44:49:D6:70:0D:B5:87:47:A5:59:0F:35:5A:31:CB
Certificate issuer: /CN=274c26e3-a417-425b-8d4b-316c68f35e06
Certificate serial: 010D0C9F4328583E7D4FFCE498CE6FB3572BF180
Authority key identifier: 3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/a4c5e963-770d-3825-a03e-4047a728d459.roa
Signing time: Tue 21 Jun 2022 13:50:44 +0000
ROA not before: Tue 21 Jun 2022 13:50:44 +0000
ROA not after: Mon 23 Sep 2024 04:00:00 +0000
asID: 14618
IP address blocks: 208.100.192.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7d:4f:fc:e4:98:ce:6f:b3:57:2b:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274c26e3-a417-425b-8d4b-316c68f35e06
Validity
Not Before: Jun 21 13:50:44 2022 GMT
Not After : Sep 23 04:00:00 2024 GMT
Subject: CN=472a38eb-1796-4b7a-b836-89331f46da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:b7:65:06:01:ac:46:7a:02:68:79:6f:7d:
ba:6b:cc:5b:44:84:b1:11:e1:bc:3b:0d:ec:18:ef:
13:96:8d:45:6f:f7:75:e2:bc:f4:09:ce:87:7b:a3:
93:8e:1b:a6:50:4a:a4:80:b2:65:e9:e7:11:0e:01:
34:66:6f:71:e4:75:69:de:98:19:c3:13:27:27:51:
a8:0d:cf:8b:5a:d6:44:79:6b:d2:4f:09:ae:9d:a8:
32:0a:74:de:9e:e4:82:c0:02:c3:1f:f7:8e:31:9d:
be:7a:de:23:2d:3b:b8:bb:87:61:61:e0:ae:36:64:
a4:d0:01:98:f7:6d:d4:7b:e5:a6:b7:82:2d:b1:5b:
d0:4a:88:c7:f1:65:ff:10:8f:20:38:35:39:4e:b1:
1b:90:80:68:3c:8f:42:57:79:2e:c4:5e:00:9f:ff:
9c:8c:e0:ea:a0:47:cd:25:e1:ab:da:82:d6:52:80:
96:b3:48:8f:64:9c:df:6e:b6:27:43:58:5a:51:9c:
97:5d:e8:f2:8d:7c:cb:13:1a:54:a2:fa:7f:60:1d:
a1:9e:50:e8:23:59:ea:16:57:5c:2a:ea:a1:f2:c3:
6f:90:2c:57:f0:c0:0b:56:a3:d4:71:67:ab:b3:24:
1a:82:3f:af:0b:fa:93:21:f4:03:53:dc:cb:d0:df:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:79:AE:C9:44:49:D6:70:0D:B5:87:47:A5:59:0F:35:5A:31:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/a4c5e963-770d-3825-a03e-4047a728d459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.crl
X509v3 Authority Key Identifier:
keyid:3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
sbgp-ipAddrBlock: critical
IPv4:
208.100.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:73:b9:fa:06:a4:59:b3:a1:c4:32:d2:ad:1c:a2:61:10:fc:
55:a1:68:8d:6f:8c:dd:80:f2:ba:b9:15:fe:10:45:4c:25:0a:
3e:85:a4:47:b2:d8:99:9d:f2:87:48:df:cb:c9:f3:24:e8:24:
63:a4:db:22:2e:31:68:bf:4b:1c:e8:c5:a7:16:ec:31:7e:06:
f0:cb:4f:71:b0:74:cb:12:3c:e1:ac:3f:6f:58:7b:d2:33:90:
cf:e5:52:77:53:a6:16:db:35:d9:f9:4e:6e:d4:91:90:b8:ee:
8d:2e:8a:fb:fc:71:77:16:88:ef:49:73:54:c6:ac:ab:f6:99:
74:43:4c:d4:d3:62:e1:77:fd:7b:8e:cc:64:27:29:c9:d3:ce:
37:16:8a:ab:5e:e7:cb:41:bf:46:e3:0c:81:aa:64:0c:fe:8b:
c1:20:90:3f:0b:c7:e0:ed:2b:ad:56:7a:76:cd:01:db:ec:a5:
10:50:d8:6f:97:45:f7:a8:31:d9:e0:38:e0:ce:7a:51:b4:09:
71:96:39:c4:7d:d9:8c:1e:11:e9:97:4e:fe:de:f8:c6:71:81:
5f:59:8d:2c:b1:8d:03:42:b3:ad:99:2b:c9:b9:4e:9d:86:2d:
26:92:2a:e8:dc:dd:3b:a4:07:93:27:7a:e6:64:55:08:48:65:
20:a2:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:57 2025 by rpki-client