Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/59c8ecc5-3951-3074-8a06-9689951a690b.roa
File: 59c8ecc5-3951-3074-8a06-9689951a690b.roa (raw, json)
Hash identifier: 8EkDCUattfqWpq8QsLyUWVYeQgstbFigG/ATNeGF07Q=
Subject key identifier: 47:10:94:40:4E:D1:F9:32:F9:F4:3C:00:98:58:AE:F0:71:15:33:22
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849393E70C30CF5746158E20C00
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/59c8ecc5-3951-3074-8a06-9689951a690b.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 18594
IP address blocks: 74.120.156.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:70:c3:0c:f5:74:61:58:e2:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=4bee3ab2-090a-4dfc-be8a-ce5f5fd3ca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e9:f2:f4:ca:da:5a:42:03:fd:af:ec:ae:3d:
6c:a2:40:37:11:13:12:00:31:68:68:5b:ed:65:15:
83:cf:01:5d:c6:73:9a:a1:7b:0b:01:94:87:a2:03:
b1:08:ea:17:92:f5:2d:59:32:13:46:a6:9e:3e:f3:
b8:09:9e:f3:9d:ef:61:b9:34:83:45:53:73:f8:c3:
b6:e2:5c:68:9d:3f:af:da:b2:b9:f3:4b:e2:77:eb:
46:76:aa:af:c3:0d:2a:07:98:34:07:f8:4b:62:6f:
ec:8e:8a:c5:97:8b:d9:d6:f1:79:36:03:87:57:a0:
00:a6:41:b6:d8:ca:54:fc:b9:f9:7c:74:29:4e:7d:
78:43:e0:a4:e7:9c:d7:02:17:9c:c2:69:77:f1:e1:
96:b5:e7:75:f1:8e:70:72:5a:7c:79:cd:41:68:02:
51:87:7c:7c:55:23:fe:30:4c:fb:d5:0f:9c:65:cc:
c9:72:02:15:ee:47:b7:f6:24:ad:f0:41:28:ca:bb:
b8:85:15:62:ef:34:c0:90:68:f2:8a:82:d4:9c:a2:
f1:0a:b4:eb:6a:14:59:3d:91:4c:91:71:5b:35:51:
f0:0e:0d:12:a1:19:13:bb:1b:18:52:2f:1b:b6:85:
90:48:7c:6d:3f:e3:39:f3:57:d4:b1:20:29:a1:b7:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:94:40:4E:D1:F9:32:F9:F4:3C:00:98:58:AE:F0:71:15:33:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/59c8ecc5-3951-3074-8a06-9689951a690b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
74.120.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:fa:0a:e5:cd:33:77:e9:88:1f:27:13:2c:24:d5:ab:d5:9e:
10:34:04:18:77:f3:5f:b8:b3:aa:05:bc:de:6b:1f:73:e2:b0:
f7:2c:a2:61:bb:8c:1d:24:b8:c4:61:89:bc:df:00:eb:5d:5d:
14:d4:51:81:b9:2d:9a:5c:2a:5b:3a:cf:3d:e1:ae:76:8c:88:
f4:56:bd:75:ed:51:13:66:60:f0:c0:40:35:07:05:89:01:f3:
45:e2:c1:b3:e3:df:bc:7b:c1:ff:cc:2d:e0:59:03:f1:46:88:
3c:0a:44:8f:3f:54:85:d1:3d:86:5c:c8:78:5e:38:5d:96:2c:
05:81:40:01:2e:32:9a:6d:31:6a:b7:7c:07:6a:13:ba:3f:a7:
44:6c:33:27:1f:5e:11:92:ab:08:08:21:39:fa:37:b9:a1:a9:
b0:6d:be:91:10:70:15:2e:f5:59:2a:3a:c0:24:6c:18:7c:66:
fe:f6:e8:f1:83:94:79:4a:38:e7:42:31:f5:74:76:a0:5f:c0:
2e:f1:10:89:92:f7:d5:0a:b9:ae:25:c8:68:d4:f4:81:d5:bd:
70:de:15:87:99:91:b8:b6:ec:ec:d5:c3:1f:dd:ec:b1:70:98:
9c:dc:d1:37:26:00:f0:08:a2:b9:a1:e7:f2:bc:ad:ef:96:57:
5d:36:5d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:55 2025 by rpki-client