Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7f96168c-4ffb-3f18-9e4a-1518ced8983f.roa
File: 7f96168c-4ffb-3f18-9e4a-1518ced8983f.roa (raw, json)
Hash identifier: H2ixVwIW+ohjs8z1ulkgyX3X9zJyBpZ42h6WovtNTek=
Subject key identifier: 4A:42:3A:A5:33:5A:1C:67:38:35:5E:65:34:CA:AD:98:E4:92:F6:65
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328584839EAC7FB4DDBFB1894B5E500
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7f96168c-4ffb-3f18-9e4a-1518ced8983f.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 211373
IP address blocks: 147.124.203.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c7:fb:4d:db:fb:18:94:b5:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=5b8a2008-81f9-4017-9d84-b5b05d0c05c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:b3:27:f5:ea:a2:3b:8a:1a:f9:a1:1e:0a:
f7:2a:8d:5d:93:30:05:5f:a3:1b:6b:bf:71:80:1b:
26:9b:8e:2e:0c:f0:aa:8f:ac:d3:97:32:75:b7:11:
61:5d:b5:5e:f8:f0:2f:2a:06:1f:fa:29:19:9c:7b:
f0:8d:99:1b:52:75:2f:23:31:b1:e7:6f:a2:4a:40:
fa:5d:52:5e:0b:09:95:a0:4b:00:67:7f:c0:eb:10:
16:a8:39:b8:30:83:71:c7:6b:fa:f8:8b:0f:b5:a2:
83:cd:b9:6f:7d:7a:fd:d5:ca:e0:cd:6c:8b:94:05:
49:a4:18:d7:29:30:ca:b8:39:7c:14:71:a6:05:3c:
50:44:79:b4:62:4d:e2:ac:18:12:1e:fb:5b:37:bf:
28:25:be:d1:18:df:a0:8b:0e:f8:5d:2c:8b:cd:80:
e2:80:28:14:de:6d:de:a3:fd:c0:f9:14:fd:2e:d3:
64:d5:7b:67:1a:57:7b:3b:57:6b:98:88:db:3e:ba:
10:8d:b7:e2:1f:6f:04:86:fd:cb:fb:c9:7c:5f:f9:
3a:b8:68:a2:33:b8:e8:62:7e:57:bc:62:6d:76:fa:
6b:6d:92:7e:0b:94:73:7d:29:92:bb:db:63:4d:51:
e5:1d:d6:0c:8f:8a:7c:34:db:3e:99:10:7c:8e:01:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:3A:A5:33:5A:1C:67:38:35:5E:65:34:CA:AD:98:E4:92:F6:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7f96168c-4ffb-3f18-9e4a-1518ced8983f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:f4:e0:52:79:79:d1:d7:e6:2c:53:54:ec:8b:3e:1f:32:bc:
75:9e:05:27:9c:27:b3:7c:15:8b:19:08:ea:7d:2c:2e:ce:6b:
c6:26:d3:42:d5:dc:8e:04:24:7a:fd:4e:b7:a2:e3:a5:60:0e:
c8:31:97:ab:20:38:04:64:4e:a3:b0:4d:d4:3e:d2:06:ed:1f:
01:71:29:0a:f3:96:22:7b:42:00:8d:02:14:c3:ff:00:24:dc:
71:36:ca:7c:ab:c2:38:c7:f3:6f:5c:52:dc:6b:88:49:ea:36:
c5:f5:a8:43:53:74:c0:65:ab:c1:9c:4d:20:12:b0:76:26:08:
9f:6c:5c:b2:7c:ba:2d:b2:f8:67:bb:b8:b6:03:7a:56:cc:5f:
a3:55:a2:d1:59:5b:7d:81:fc:04:0e:66:33:aa:be:fc:47:f2:
b9:62:de:83:c5:6d:a0:a1:b0:00:57:b8:5c:78:a8:e1:3d:86:
a6:ef:1f:94:36:0c:70:90:15:53:be:ad:55:7a:0c:37:7d:3f:
7e:9b:f8:b7:b7:f8:17:16:99:6c:2d:c9:3e:ff:61:19:d1:f9:
e4:9d:71:8c:ad:90:37:61:58:2d:3e:fc:a9:4c:c2:10:0c:7c:
8b:5f:c7:3b:94:98:7a:fd:5f:48:f4:0a:02:91:65:54:c7:1b:
2c:7c:a6:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56sf7Tdv7GJS15QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2
MzhiMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
NWI4YTIwMDgtODFmOS00MDE3LTlkODQtYjViMDVkMGMwNWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk+zJ/XqojuKGvmhHgr3Ko1dkzAFX6Mba79x
gBsmm44uDPCqj6zTlzJ1txFhXbVe+PAvKgYf+ikZnHvwjZkbUnUvIzGx52+iSkD6
XVJeCwmVoEsAZ3/A6xAWqDm4MINxx2v6+IsPtaKDzblvfXr91crgzWyLlAVJpBjX
KTDKuDl8FHGmBTxQRHm0Yk3irBgSHvtbN78oJb7RGN+giw74XSyLzYDigCgU3m3e
o/3A+RT9LtNk1XtnGld7O1drmIjbProQjbfiH28Ehv3L+8l8X/k6uGiiM7joYn5X
vGJtdvprbZJ+C5RzfSmSu9tjTVHlHdYMj4p8NNs+mRB8jgFk5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpCOqUzWhxnODVeZTTKrZjkkvZlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj
MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvN2Y5NjE2OGMtNGZmYi0z
ZjE4LTllNGEtMTUxOGNlZDg5ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx
NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1
NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk
NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMz04FJ5edHX5ixTVOyLPh8yvHWeBSecJ7N8FYsZCOp9LC7Oa8Ym00LV
3I4EJHr9Trei46VgDsgxl6sgOARkTqOwTdQ+0gbtHwFxKQrzliJ7QgCNAhTD/wAk
3HE2ynyrwjjH829cUtxriEnqNsX1qENTdMBlq8GcTSASsHYmCJ9sXLJ8ui2y+Ge7
uLYDelbMX6NVotFZW32B/AQOZjOqvvxH8rli3oPFbaChsABXuFx4qOE9hqbvH5Q2
DHCQFVO+rVV6DDd9P36b+Le3+BcWmWwtyT7/YRnR+eSdcYytkDdhWC0+/KlMwhAM
fItfxzuUmHr9X0j0CgKRZVTHGyx8piw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:21 2025 by rpki-client