Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa
File: 7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa (raw, json)
Hash identifier: CbEdcXa4JzvNTw+PQaRL9EtyOcg8+sbv4wAB/6UARrw=
Subject key identifier: E8:E4:95:AE:66:0D:D4:0A:5E:B9:14:96:3F:1B:07:0D:14:A9:7D:65
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F43285848AF2B7A18F8D5AF50E49DBA80
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 397423
IP address blocks: 147.124.199.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7a:18:f8:d5:af:50:e4:9d:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=de74ed76-b88b-40d9-86eb-8b8747000a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:74:fd:50:36:be:98:2c:cc:fc:b2:cd:ae:
48:c8:cc:22:cf:23:9f:9d:7b:f5:4b:13:67:7c:03:
ca:6a:9c:b1:ef:30:4b:6d:f8:b1:e7:6f:c1:90:f7:
c5:0f:02:57:67:96:fc:61:bb:37:78:8a:e7:cf:cf:
83:0c:64:e5:58:a3:c3:bc:f9:59:56:f8:46:a0:dd:
d4:96:c8:1b:e9:d6:6c:12:cd:ed:ac:51:bd:1b:28:
6c:df:95:49:d5:82:bc:b4:d8:75:5a:be:87:53:9c:
d4:ad:7a:c2:aa:0d:37:36:ac:0a:6b:3b:0e:4a:67:
db:53:27:16:52:44:89:4f:e9:ff:31:66:88:98:ae:
8c:d2:c4:05:1e:ce:d5:8b:0f:8c:2e:7c:cb:6c:b7:
7f:20:03:c0:3c:5d:45:b6:51:ba:2c:a3:25:57:30:
6e:07:60:ee:24:c7:ba:2f:05:97:5c:fd:d4:87:6a:
18:e2:29:96:58:b0:a0:55:d9:ac:39:86:f1:55:21:
b1:64:07:21:70:8e:63:08:52:f7:75:09:44:0b:97:
43:15:cd:46:8e:ef:f1:b2:b8:6e:29:5b:23:72:ff:
e3:59:7b:d3:66:8a:d0:15:aa:57:df:6a:ca:15:d7:
9d:2c:07:a0:ed:d1:0f:f1:95:97:bc:e3:da:2e:ad:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:95:AE:66:0D:D4:0A:5E:B9:14:96:3F:1B:07:0D:14:A9:7D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:8c:3e:64:69:25:d8:bd:7c:44:38:05:86:9b:9d:d9:32:6b:
08:ad:07:1e:7f:d1:9c:b7:30:47:11:17:f8:ac:93:ea:bb:b3:
e6:73:c3:27:ab:e7:11:54:5f:3e:02:a0:7c:ac:99:74:ec:c2:
e2:bb:7e:a3:4e:6f:1a:71:45:3a:af:09:b1:ed:ce:80:6e:a0:
76:47:79:b9:50:54:58:90:9c:46:f9:c8:92:0f:23:21:c5:23:
02:2b:92:e6:38:30:3b:df:3d:37:03:84:89:07:25:b0:cd:2c:
fd:42:f5:8f:86:41:93:fa:6d:7d:9e:7f:96:b4:b0:e7:8e:7f:
5a:8a:f7:1e:4d:2f:da:6a:91:39:64:76:ea:b3:b7:ca:ef:61:
b4:1b:dd:1d:ab:1f:66:0d:97:62:b1:57:a6:4d:dc:68:0e:89:
a5:45:01:14:36:19:90:55:4e:e9:1e:86:bf:e3:9c:bf:94:bb:
d4:da:7b:5b:ee:8d:5c:e5:23:97:02:aa:58:8a:f0:87:e9:3f:
7b:1b:1d:a6:e3:b1:94:67:ca:82:be:ff:ba:e8:66:78:88:a2:
6d:94:38:6a:f8:85:7a:d8:85:54:80:70:bc:33:79:6e:ac:6b:
29:02:fe:ab:d3:d1:f6:62:c3:9d:bf:60:32:52:cf:8a:1b:a4:
84:53:73:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3oY+NWvUOSduoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2
MzhiMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGU3NGVkNzYtYjg4Yi00MGQ5LTg2ZWItOGI4NzQ3MDAwYTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglJ0/VA2vpgszPyyza5IyMwizyOfnXv1SxNn
fAPKapyx7zBLbfix52/BkPfFDwJXZ5b8Ybs3eIrnz8+DDGTlWKPDvPlZVvhGoN3U
lsgb6dZsEs3trFG9Gyhs35VJ1YK8tNh1Wr6HU5zUrXrCqg03NqwKazsOSmfbUycW
UkSJT+n/MWaImK6M0sQFHs7Viw+MLnzLbLd/IAPAPF1FtlG6LKMlVzBuB2DuJMe6
LwWXXP3Uh2oY4imWWLCgVdmsOYbxVSGxZAchcI5jCFL3dQlEC5dDFc1Gju/xsrhu
KVsjcv/jWXvTZorQFapX32rKFdedLAeg7dEP8ZWXvOPaLq1vxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjkla5mDdQKXrkUlj8bBw0UqX1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj
MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvNzg0M2Y4YzYtNTk0OC0z
NmU5LThlOWYtY2EzN2IwNmZkN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx
NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1
NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk
NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCMPmRpJdi9fEQ4BYabndkyawitBx5/0Zy3MEcRF/isk+q7s+Zzwyer
5xFUXz4CoHysmXTswuK7fqNObxpxRTqvCbHtzoBuoHZHeblQVFiQnEb5yJIPIyHF
IwIrkuY4MDvfPTcDhIkHJbDNLP1C9Y+GQZP6bX2ef5a0sOeOf1qK9x5NL9pqkTlk
duqzt8rvYbQb3R2rH2YNl2KxV6ZN3GgOiaVFARQ2GZBVTukehr/jnL+Uu9Tae1vu
jVzlI5cCqliK8IfpP3sbHabjsZRnyoK+/7roZniIom2UOGr4hXrYhVSAcLwzeW6s
aykC/qvT0fZiw52/YDJSz4obpIRTc4E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:27 2025 by rpki-client