Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d8e9f93f-82a7-3ea7-b796-19516abd78af.roa
File: d8e9f93f-82a7-3ea7-b796-19516abd78af.roa (raw, json)
Hash identifier: llhEvpddeMo7ExZ0/5OyDP5gtOEt6no/VmSNmQjIVec=
Subject key identifier: 2D:0E:3C:69:F1:41:0D:33:9A:2E:1A:55:11:63:BE:06:F8:40:14:FB
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F432858396A32F26E73AA42555CF44080
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d8e9f93f-82a7-3ea7-b796-19516abd78af.roa
Signing time: Thu 01 Dec 2016 05:00:00 +0000
ROA not before: Thu 01 Dec 2016 05:00:00 +0000
ROA not after: Sun 02 Jul 2023 04:00:00 +0000
asID: 10586
IP address blocks: 216.72.28.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:6a:32:f2:6e:73:aa:42:55:5c:f4:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 1 05:00:00 2016 GMT
Not After : Jul 2 04:00:00 2023 GMT
Subject: CN=fe4bb4fa-7b81-4a0d-afaf-2c1257f014ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:a1:ad:f2:5f:fe:13:08:77:84:19:7a:ce:
20:e5:4a:87:41:47:b5:70:ab:dc:f3:5b:93:dc:1d:
96:5b:bb:83:22:dd:8a:a9:a6:3b:55:cc:66:48:a0:
83:62:c9:97:c2:e8:af:86:ae:ef:b2:34:46:2f:7b:
83:6d:16:5b:97:5c:9b:49:f7:e5:6c:a9:30:5e:98:
91:e8:10:26:20:e8:0f:e1:ed:d9:ca:79:70:55:af:
3a:ea:7c:5c:24:1d:3c:7c:0a:49:93:f0:72:54:5a:
29:20:32:c8:47:60:48:77:2b:43:1b:9a:9b:85:ad:
ed:d7:8a:76:96:3a:18:5d:fe:71:7a:56:06:3c:25:
7f:ff:2c:75:78:7f:5c:74:c9:b9:b0:48:1d:2c:70:
27:2e:16:b7:9c:98:e9:9a:e3:ed:88:9a:a3:0b:d5:
c8:97:27:49:e0:b1:dd:33:a2:9d:f1:d6:ff:54:a2:
a2:9d:04:7d:29:b8:06:66:03:eb:37:64:d0:8b:87:
b9:66:83:8b:c2:e3:15:5d:87:e1:45:9d:59:6e:d5:
8d:b6:2f:ea:15:d1:b4:70:32:6a:47:0a:74:fd:fe:
93:20:c6:29:83:31:06:bc:23:df:16:27:eb:b7:b0:
08:a6:60:03:a9:3d:0d:b3:fe:03:78:24:44:0c:df:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:3C:69:F1:41:0D:33:9A:2E:1A:55:11:63:BE:06:F8:40:14:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d8e9f93f-82a7-3ea7-b796-19516abd78af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
216.72.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:33:78:99:be:56:62:aa:c1:4a:51:bb:2e:10:64:ac:22:88:
3b:4b:24:86:d0:f8:11:4e:23:52:70:82:95:fe:0b:e1:eb:bc:
c2:4f:61:dc:72:29:a0:9a:99:96:cb:f8:59:87:7b:59:a5:79:
31:b7:a5:82:f3:e0:7b:24:b5:16:2d:a1:9f:a2:10:8e:2c:86:
b3:00:38:11:8a:78:61:69:6d:6b:d5:32:e8:19:fc:45:04:14:
ef:66:dc:82:4b:b7:e4:05:41:d2:61:a5:2c:c9:bb:44:2e:ed:
6b:14:ba:83:f7:a3:b7:a0:f1:b8:bf:5c:92:21:50:1e:79:c7:
11:d8:57:1e:f0:68:61:d5:60:3e:d3:56:18:be:00:03:d1:65:
56:f6:44:22:1f:1a:c4:e3:fa:21:31:a3:b7:c1:5c:02:dd:86:
b8:a9:51:6c:3d:9b:2e:57:c9:1b:40:70:a2:b1:4c:db:cf:c6:
04:2e:02:63:9b:43:2f:d6:2c:21:84:83:1e:5a:bb:36:06:cb:
e4:20:8a:e6:4a:2b:00:bd:76:16:88:2b:64:65:ce:98:7c:81:
7a:43:e3:dc:a2:8c:a0:94:c2:45:b9:86:51:6a:1f:69:c6:75:
dc:33:94:35:11:95:7b:3d:b5:92:52:e1:40:3c:ed:0e:c4:8d:
69:d8:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:31 2025 by rpki-client