Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/72a390a9-20e0-3a50-983a-9e46e1e85d6d.roa
File: 72a390a9-20e0-3a50-983a-9e46e1e85d6d.roa (raw, json)
Hash identifier: /vsbsyx1JMxdMN0yPTwR/nrvNhlUzA43a+ZhZ5+9LvA=
Subject key identifier: 36:DB:E4:56:F3:F0:BD:5A:A7:B8:F9:B5:12:D3:7F:5F:CF:25:09:80
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F432858485B6AF7A94EF462D652F45100
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/72a390a9-20e0-3a50-983a-9e46e1e85d6d.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 19529
IP address blocks: 2602:fbe2::/36 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f7:a9:4e:f4:62:d6:52:f4:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=cc94c58d-387f-4903-8f18-080e85caed37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:43:6c:4b:7b:d9:27:c6:f4:5a:a3:52:99:
73:79:2c:2c:b4:ce:7d:8f:ed:e2:84:19:ff:cf:31:
cc:69:79:9c:b7:e9:82:36:63:4d:f7:34:af:a3:6c:
a9:b8:de:e6:df:4c:2e:e6:04:52:ea:db:18:fb:22:
4e:71:82:d0:90:c3:4c:dd:ed:1f:2e:05:b4:60:18:
41:7e:6f:56:65:46:fe:21:b0:33:c2:19:fb:f7:b2:
5d:0b:fb:ec:22:59:98:4b:e5:bb:17:32:6d:45:3c:
de:50:e3:4e:2e:8b:9d:9c:d5:cf:1e:5c:24:45:c9:
8b:0c:b3:7e:db:9d:08:86:2c:d8:04:fa:d9:e5:7d:
a4:c4:e3:3a:46:ee:94:d8:83:f7:09:d3:72:c6:b2:
36:e0:aa:39:a0:79:55:d2:80:23:87:f3:bd:c3:10:
36:e2:21:a4:8f:86:cf:95:4e:94:57:b7:77:29:e5:
60:43:f7:64:fb:8f:f4:e1:fa:9c:c1:15:12:62:ff:
db:73:da:ee:86:3b:5b:16:fb:93:83:ad:01:75:29:
69:3a:2e:3b:dd:b7:85:b3:b9:e8:b3:c6:64:e9:e2:
c0:e9:79:0e:c2:b0:f1:0a:1a:b1:0a:d2:cd:09:b8:
b7:ff:88:47:0d:54:4c:36:a7:48:cb:51:55:48:71:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:E4:56:F3:F0:BD:5A:A7:B8:F9:B5:12:D3:7F:5F:CF:25:09:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/72a390a9-20e0-3a50-983a-9e46e1e85d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbe2::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:62:f6:9e:4f:b8:c7:66:10:ac:f9:1b:ed:7b:2a:3e:57:2c:
c7:8d:06:29:e2:73:a1:12:f6:d9:ae:a9:ec:a5:92:e4:65:82:
34:d5:bd:31:e8:7b:2d:46:8b:a6:10:9f:e1:a8:f9:2b:3f:7c:
1f:28:ea:0b:47:d7:f3:cc:e8:3c:37:c4:58:23:e2:b2:73:ca:
41:c2:b2:64:f1:50:66:a4:ef:37:e9:bc:2e:c2:10:33:a6:9f:
53:0d:ac:4b:99:75:e6:44:57:b3:8e:3d:2c:f0:30:60:e2:54:
73:f3:d4:5c:c8:b5:26:1b:fb:b1:b6:ec:8e:93:d6:25:df:9a:
55:89:6c:f1:bd:2d:a6:9c:b5:76:14:18:4b:8d:13:71:1a:d4:
d5:20:e2:de:9c:24:60:b8:3e:c3:3d:e3:b1:14:76:38:a0:08:
8f:d4:c0:84:b6:4f:c6:a1:f9:2c:99:ae:66:a4:4a:4f:2e:45:
8a:2d:b3:f1:2f:b9:52:2f:76:8b:2d:fa:93:36:fe:a5:9f:ca:
ba:07:68:86:b5:5f:f6:1e:8f:fa:19:3c:0f:cc:4d:f7:9c:f4:
26:47:81:a4:54:d2:82:e1:79:17:77:eb:32:9a:54:e3:66:71:
3d:95:f6:c6:a5:9e:4c:b3:2e:74:c4:4b:b0:92:5f:bb:67:94:
06:e5:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:31 2025 by rpki-client