Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/6dc83cfa-6151-30b0-838c-47627c690f8b.roa
File: 6dc83cfa-6151-30b0-838c-47627c690f8b.roa (raw, json)
Hash identifier: 8S2Ph1JPImlHMbb7eRRxMoffTB4R8S04K+41QtVoJ/A=
Subject key identifier: 9A:84:E7:8F:5E:BB:EF:F8:71:A3:58:5E:3D:EF:B2:3C:AC:16:32:A0
Certificate issuer: /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Certificate serial: 010D0C9F432858486738C873D673E6AFDE73DBA8
Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/6dc83cfa-6151-30b0-838c-47627c690f8b.roa
Signing time: Wed 01 Jan 2025 19:29:33 +0000
ROA not before: Wed 01 Jan 2025 19:29:33 +0000
ROA not after: Tue 01 Apr 2025 18:29:33 +0000
asID: 15149
IP address blocks: 64.29.184.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:38:c8:73:d6:73:e6:af:de:73:db:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Validity
Not Before: Jan 1 19:29:33 2025 GMT
Not After : Apr 1 18:29:33 2025 GMT
Subject: CN=39eb7b13-b7e1-444f-8478-0637c4c5ca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:70:1b:e8:42:58:c3:b6:fd:8f:11:a5:5f:
6d:dd:f3:f4:c5:c7:61:40:bc:ef:29:50:85:91:36:
1a:f1:e2:13:0e:08:36:34:1b:db:b4:cd:76:d8:32:
fa:c8:e7:4b:44:f8:d2:82:bc:ae:d5:65:07:59:a6:
47:80:4c:ca:82:b9:35:b8:7a:1e:91:c6:ce:61:f4:
e2:ef:77:c9:7f:e4:2e:c0:e4:dc:06:65:49:14:48:
cc:e8:c5:44:e2:46:87:90:87:3c:da:6b:50:c5:34:
ad:1c:24:1b:06:47:e3:d0:45:d0:ee:90:97:4b:06:
21:5f:38:fa:53:54:4b:d2:d8:6c:b3:67:76:ca:0a:
80:d5:c7:58:a4:43:1f:2d:99:07:1c:3f:31:07:a6:
b1:8c:a8:85:09:0a:e5:4b:3d:dd:a1:9e:37:b4:fe:
64:24:60:92:2f:f7:c8:42:0b:a1:78:fc:99:93:47:
8c:b5:f1:55:8c:5d:6e:c7:09:6d:fd:11:91:aa:f3:
70:e8:5c:26:f5:f3:80:81:6c:83:66:60:d7:bc:d0:
53:07:5e:2e:10:a4:72:4e:45:2b:e1:1c:6b:89:00:
76:45:d8:47:cb:6c:55:78:a8:3d:d3:17:87:4b:e0:
c4:00:aa:c7:eb:54:bd:82:f4:5a:15:67:b4:52:e2:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:E7:8F:5E:BB:EF:F8:71:A3:58:5E:3D:EF:B2:3C:AC:16:32:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/6dc83cfa-6151-30b0-838c-47627c690f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl
X509v3 Authority Key Identifier:
keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:85:32:d7:8e:52:9d:f0:a9:e5:eb:b6:bb:27:17:d9:37:1f:
c0:ff:c5:ca:c5:2b:c5:37:12:7c:0f:5e:a1:23:c3:de:7d:6d:
2c:be:b8:16:5e:80:fe:a4:93:02:b6:8e:cc:53:8f:0a:0a:e8:
87:c8:0a:8e:10:9c:1d:26:2e:24:ee:ed:fa:c1:89:5f:76:f9:
8c:42:b6:1e:5c:65:e5:d6:02:24:f1:9c:a1:8d:1a:5d:a2:21:
6a:a1:14:71:5b:48:77:7a:38:7d:2c:47:7f:60:cb:c3:f5:36:
c5:cf:96:9f:ed:53:39:d3:14:f8:a5:a7:41:ae:fc:f4:0c:f5:
3b:e2:49:41:81:f3:e6:30:8e:7b:4d:22:45:bd:90:e6:5e:9b:
2d:09:cd:6b:98:3f:80:68:89:46:67:dd:aa:d5:25:59:e1:3b:
f7:ac:12:58:71:04:cf:7e:62:4d:f1:3a:58:96:40:b1:ca:a3:
75:a3:b6:c6:1f:5e:1c:a1:d6:bc:45:cf:6c:c6:f6:a9:21:7c:
33:d4:87:19:1b:7d:4c:23:00:ed:14:0e:7a:d1:7c:f5:23:fe:
ba:32:df:ef:9a:e1:8c:6e:4e:55:b5:c6:09:56:85:77:6b:66:
84:ac:bc:86:d8:36:0d:8f:2a:eb:29:53:8e:ae:c7:0e:2b:d5:
e8:fb:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:18:26 2025 by rpki-client