Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7cde06b0-c72d-3b2d-b09e-f43913f9f4ad.roa
File: 7cde06b0-c72d-3b2d-b09e-f43913f9f4ad.roa (raw, json)
Hash identifier: x3gDqylAhwF4oc+geKjxzQYgbR/wFywO6afRBrLGr6Q=
Subject key identifier: 15:42:1A:B7:9B:BA:64:AB:4A:E5:29:57:A4:84:47:B2:AA:CF:15:CF
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328583C3E9D9AE70BBB75DFDB73FD40
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7cde06b0-c72d-3b2d-b09e-f43913f9f4ad.roa
Signing time: Mon 13 Dec 2021 05:00:00 +0000
ROA not before: Mon 13 Dec 2021 05:00:00 +0000
ROA not after: Fri 17 Mar 2023 04:00:00 +0000
asID: 2914
IP address blocks: 69.7.68.0/22 maxlen: 24
69.7.72.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:3e:9d:9a:e7:0b:bb:75:df:db:73:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Dec 13 05:00:00 2021 GMT
Not After : Mar 17 04:00:00 2023 GMT
Subject: CN=29cd84f2-0e64-4648-b60e-88aa4de83448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:91:51:63:7a:73:10:6f:cc:5b:6e:c1:23:
83:8c:b3:74:48:e4:75:10:01:ac:be:88:70:22:42:
3a:a4:a9:06:67:7f:58:47:ae:aa:54:0d:e9:bb:1e:
ff:cd:0d:2a:b0:6b:0d:6b:7e:71:e9:40:0b:fe:74:
82:a4:aa:bf:86:b8:5b:06:5e:b0:fd:3b:c4:b1:87:
4c:f5:bf:30:c3:87:e3:0b:f9:7c:07:f5:82:63:68:
8b:40:38:06:05:a1:67:7e:01:3a:f0:ba:93:09:c5:
1e:07:cd:5b:4e:50:27:86:ef:80:49:07:8e:ed:6e:
da:0a:47:56:df:a0:10:a6:c2:4c:6a:f8:ec:06:43:
ec:c7:de:54:08:16:78:08:64:7a:ef:8e:fa:30:e1:
e5:38:71:3e:97:92:85:6a:07:04:c2:5a:35:97:d6:
e9:76:6e:dc:ed:8d:3e:18:be:c7:ae:c0:9d:ae:81:
36:16:24:06:a0:d8:0d:ad:42:1b:95:ce:ce:17:b8:
e4:4e:65:bf:d8:eb:6c:73:ef:eb:94:7c:32:77:3a:
04:ed:a2:d2:c0:b7:c1:b5:99:4a:31:92:4e:9f:17:
b9:f2:e9:88:15:4d:ef:c1:99:84:7c:2a:b0:ca:f0:
35:5b:46:db:ac:3e:81:96:55:b1:9c:02:b5:4b:cd:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:1A:B7:9B:BA:64:AB:4A:E5:29:57:A4:84:47:B2:AA:CF:15:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7cde06b0-c72d-3b2d-b09e-f43913f9f4ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
69.7.68.0-69.7.75.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:60:0f:18:4d:46:51:47:28:d2:0b:5d:f1:de:37:96:e2:a8:
89:8d:10:a8:7b:6f:ad:53:33:6b:8c:68:7a:71:26:c7:8e:fc:
1b:6c:44:db:3b:59:8d:7d:9b:63:52:44:17:6c:4c:c7:17:0f:
40:ee:4c:d4:97:d7:da:fa:ba:96:0b:f5:3a:a5:a9:08:8e:16:
7d:ad:84:f5:2b:5b:92:e4:d1:99:ff:b7:b4:a1:86:a2:ef:89:
25:00:e0:a2:56:5e:46:04:18:f9:77:9e:65:82:b3:d2:97:46:
60:47:11:73:8f:0c:76:42:79:f8:aa:95:fc:b2:65:52:94:93:
b3:f0:57:08:3f:f1:30:7c:e4:87:8f:83:1c:57:02:6c:7c:44:
5a:42:b7:88:ff:e5:b5:f3:8a:d3:78:eb:6a:3c:23:a8:7a:bf:
cf:85:d6:c1:c9:73:9f:20:ea:01:c4:79:12:b0:b8:42:49:a2:
9d:fb:2e:39:5b:64:fc:24:40:6d:b1:78:db:be:04:d9:cd:e9:
e3:0a:06:69:88:bd:20:5e:1a:1d:80:06:8a:4a:e8:24:06:a6:
26:f2:4b:52:9e:6c:b9:c3:55:44:32:16:fa:f2:df:0b:31:d9:
d7:12:34:2a:a9:13:21:f2:c1:39:4f:61:45:99:bd:bf:7b:53:
45:d2:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org