Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/19d733a5-0024-30de-84da-c06a1d653d7b.roa
File: 19d733a5-0024-30de-84da-c06a1d653d7b.roa (raw, json)
Hash identifier: TjoECXJcZCUjxVhoiwFMQTIu2qAEGH5uUtDpy87hpA4=
Subject key identifier: E3:FF:5B:35:A3:08:7E:25:62:C2:F5:B0:55:EF:FC:A7:30:1C:F7:38
Certificate issuer: /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial: 010D0C9F43285848222FEB66B01467BFF62E0600
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/19d733a5-0024-30de-84da-c06a1d653d7b.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 395279
IP address blocks: 134.199.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:eb:66:b0:14:67:bf:f6:2e:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=ba8ed407-111c-4645-8219-2f869c03b1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:aa:78:da:d6:57:61:32:f8:f7:f1:79:8f:
55:07:0a:1b:5b:4e:d3:79:de:40:c3:e3:e5:cb:86:
3a:79:14:b5:cc:c7:88:41:07:bc:09:a2:78:6d:8e:
1f:bb:15:35:a4:d0:8d:79:8b:03:d4:bb:d9:18:20:
92:31:c7:a8:a1:ea:3c:2a:76:14:aa:a0:7f:cc:ed:
e1:39:ad:52:34:b4:5d:df:91:eb:02:13:3d:b6:df:
c1:1f:68:95:df:39:da:5f:e5:3b:76:33:f1:23:a2:
3b:17:90:86:b4:23:6c:fb:eb:69:93:4e:3a:bd:c5:
1d:61:d1:10:23:2b:b1:42:da:69:3c:20:18:fe:68:
0b:4e:0e:4b:96:6b:16:7b:08:fb:32:f2:c0:40:e1:
cd:0d:c4:32:7a:44:f1:da:71:77:3f:44:c4:fd:63:
9f:65:c4:44:12:6b:98:14:cf:95:ea:44:f7:c4:29:
4f:bd:9f:c8:51:fd:2e:16:72:a5:8c:c5:27:04:b1:
12:a1:5f:fa:bd:73:77:e2:18:8f:7c:4d:40:42:17:
26:63:c4:12:ad:11:63:8d:e8:52:9d:22:17:79:97:
97:b4:b2:59:68:8b:33:33:4a:6d:93:99:1b:59:22:
12:d2:92:ad:8f:06:e9:6d:3d:5f:8b:a4:c3:b1:6d:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:5B:35:A3:08:7E:25:62:C2:F5:B0:55:EF:FC:A7:30:1C:F7:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/19d733a5-0024-30de-84da-c06a1d653d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
X509v3 Authority Key Identifier:
keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
sbgp-ipAddrBlock: critical
IPv4:
134.199.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:f0:03:de:18:e5:ca:8b:1c:0b:8b:26:04:ca:0c:cc:04:5f:
78:40:c3:5c:17:ee:84:f8:d5:53:39:b3:be:d0:6b:e3:fe:00:
e9:28:53:5c:33:32:1e:77:bc:23:8f:03:cc:b1:f4:cd:07:60:
e0:01:5f:3a:82:0b:11:2b:99:ec:25:b2:ee:ea:db:13:1d:da:
fc:1a:c9:d8:c0:2a:4e:51:5d:50:14:cd:d5:a5:4b:c3:1e:26:
33:7f:59:23:22:eb:dc:62:50:de:56:a9:f2:58:23:29:70:94:
57:cd:8b:da:f5:29:d1:58:f7:0e:c5:0e:2b:83:1c:e8:e9:32:
eb:5d:30:38:21:bd:9d:55:61:ad:99:9f:26:fb:ed:4d:74:b6:
d9:99:c2:ec:30:29:63:72:5b:2e:1f:5d:ca:45:10:09:f2:d8:
00:4b:ff:35:06:63:8e:c3:4a:28:87:1b:fd:7e:90:12:95:02:
e8:e2:da:2b:08:e6:48:d7:50:99:9f:e0:3b:1b:06:bb:05:01:
b9:79:69:a5:7a:c5:18:70:48:0d:b9:65:51:dc:79:d5:47:01:
62:11:43:3b:5b:2b:6f:51:4b:08:12:e9:03:86:9c:f1:37:e6:
99:db:c9:75:bf:1b:61:96:3b:da:ad:48:77:b5:33:c3:c6:fd:
0c:11:6b:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+tmsBRnv/YuBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJhNTcxNDAtYTM2OS00YTNhLThlZGMtNjk3MzJkMTc5
OTI0MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
YmE4ZWQ0MDctMTExYy00NjQ1LTgyMTktMmY4NjljMDNiMWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2qeNrWV2Ey+PfxeY9VBwobW07Ted5Aw+Pl
y4Y6eRS1zMeIQQe8CaJ4bY4fuxU1pNCNeYsD1LvZGCCSMceooeo8KnYUqqB/zO3h
Oa1SNLRd35HrAhM9tt/BH2iV3znaX+U7djPxI6I7F5CGtCNs++tpk046vcUdYdEQ
IyuxQtppPCAY/mgLTg5LlmsWewj7MvLAQOHNDcQyekTx2nF3P0TE/WOfZcREEmuY
FM+V6kT3xClPvZ/IUf0uFnKljMUnBLESoV/6vXN34hiPfE1AQhcmY8QSrRFjjehS
nSIXeZeXtLJZaIszM0ptk5kbWSIS0pKtjwbpbT1fi6TDsW0PCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOP/WzWjCH4lYsL1sFXv/KcwHPc4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYmE1
NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQxNzk5MjQvMTlkNzMzYTUtMDAyNC0z
MGRlLTg0ZGEtYzA2YTFkNjUzZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmJhNTcxNDAtYTM2OS00YTNhLThl
ZGMtNjk3MzJkMTc5OTI0L2ZiYTU3MTQwLWEzNjktNGEzYS04ZWRjLTY5NzMyZDE3
OTkyNC5jcmwwHwYDVR0jBBgwFoAUDWL403FgbahEpHyrzghxZgeTlQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mYmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTcz
MmQxNzk5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsc8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPwA94Y5cqLHAuLJgTKDMwEX3hAw1wX7oT41VM5s77Qa+P+AOkoU1wz
Mh53vCOPA8yx9M0HYOABXzqCCxErmewlsu7q2xMd2vwaydjAKk5RXVAUzdWlS8Me
JjN/WSMi69xiUN5WqfJYIylwlFfNi9r1KdFY9w7FDiuDHOjpMutdMDghvZ1VYa2Z
nyb77U10ttmZwuwwKWNyWy4fXcpFEAny2ABL/zUGY47DSiiHG/1+kBKVAuji2isI
5kjXUJmf4DsbBrsFAbl5aaV6xRhwSA25ZVHcedVHAWIRQztbK29RSwgS6QOGnPE3
5pnbyXW/G2GWO9qtSHe1M8PG/QwRa88=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:18 2025 by rpki-client