Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/451ee378-a7d5-3849-8bd8-79cabf06dbe5.roa
File: 451ee378-a7d5-3849-8bd8-79cabf06dbe5.roa (raw, json)
Hash identifier: DfvF0o9I9XNAnkIORTV518hkjXnWp/y2d5gn2T85oGI=
Subject key identifier: F9:2D:2C:87:37:3C:87:AB:41:6C:8B:33:54:D3:08:C5:3D:1B:D3:64
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849393E756EE8D3FDA4CC944810
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/451ee378-a7d5-3849-8bd8-79cabf06dbe5.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 18659
IP address blocks: 64.57.153.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:75:6e:e8:d3:fd:a4:cc:94:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=a6e653d2-21a7-43d9-a57b-c34cb7c71e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:7d:a2:90:21:90:9f:81:eb:90:ab:fc:23:
bb:3e:37:d1:ee:d3:9b:2c:77:df:62:7d:b0:a6:69:
44:06:5f:b0:c0:12:10:59:c6:81:bf:99:0c:4b:87:
0c:0d:a6:3f:06:e2:0f:65:5f:d5:f6:7c:96:90:8a:
94:84:c2:ae:9a:77:71:35:0b:52:02:c2:44:1e:8e:
ba:09:34:24:31:fa:8c:06:45:70:56:44:29:08:7c:
95:31:7c:f3:9a:f5:0f:71:20:4b:b6:53:11:67:a8:
75:7a:4b:3a:a8:69:b0:62:57:1d:5d:4b:f1:eb:c7:
f6:79:ee:bc:0a:c2:a2:ed:2d:3d:e1:47:f7:fd:fe:
de:8d:39:90:00:fb:1d:e3:3f:3b:70:c0:b0:ef:a0:
7c:a3:1e:f7:db:2f:46:d9:e8:7d:5c:01:05:68:07:
ea:f3:2a:e8:5c:d9:06:b8:97:29:cd:13:4c:73:d4:
99:39:f3:2b:ab:60:fa:75:79:c8:12:8f:e0:20:91:
41:79:3a:e8:53:e9:d3:9b:84:4e:13:fc:48:2b:4b:
6f:3d:0b:5e:29:bb:72:9a:4f:21:8a:39:8c:e8:e2:
f0:ad:8e:0f:b5:76:b3:2f:4f:fc:98:4a:40:c4:6c:
e8:23:6b:08:db:c7:77:76:5f:85:82:12:6e:ab:0e:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:2C:87:37:3C:87:AB:41:6C:8B:33:54:D3:08:C5:3D:1B:D3:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/451ee378-a7d5-3849-8bd8-79cabf06dbe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c4:e1:5c:b2:fc:f4:a8:b3:b0:61:24:72:47:31:0c:e1:e4:
ba:c7:a1:b1:7d:a4:1b:d0:22:09:93:10:1d:ec:2f:03:ff:11:
7e:8f:9f:3e:ae:67:0f:9c:e5:0c:0b:be:a7:a8:8b:52:48:41:
29:21:4e:6d:00:b9:21:4b:b5:30:9d:1f:8f:75:06:34:f2:39:
44:1d:21:c1:f4:26:1f:f8:46:15:07:dd:83:5b:23:a2:c7:82:
45:8f:31:8e:bb:67:e5:c4:44:d8:3a:a0:31:12:d3:b4:74:01:
23:31:10:ee:cd:fa:d0:bd:dd:67:0a:24:4a:ac:13:0a:4a:e0:
c4:61:75:10:91:79:96:36:31:b7:8d:eb:a4:fd:76:9c:39:46:
22:be:38:5e:d4:54:48:eb:dd:da:5e:7f:82:9b:fb:df:a9:02:
f9:19:ac:14:f4:26:77:3a:60:e0:3f:b2:74:c7:13:52:bc:03:
a0:9b:6d:e3:92:79:80:93:b1:d2:27:a7:9d:25:8d:f6:97:07:
90:a5:00:98:7f:c5:85:42:16:45:7f:c3:dc:e1:8e:c2:94:bc:
92:a1:95:f9:52:8b:31:26:25:90:d3:b4:ec:47:2f:a1:8a:94:
43:37:ad:db:44:87:a7:b6:fa:7d:85:5c:b1:b6:e9:17:cc:a7:
08:5f:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:35 2025 by rpki-client