Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/99ca9a08-235f-3e74-85a6-060ddaa09c90.roa
File: 99ca9a08-235f-3e74-85a6-060ddaa09c90.roa (raw, json)
Hash identifier: gibf1zcCuml633EFoSD7YCTu9pChJSzi4fCFPnvYQIg=
Subject key identifier: 14:11:F2:76:69:72:E9:8B:DC:AF:61:25:AC:1A:4A:4E:25:AE:10:A1
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F43285847A4712D39E158300940336D80
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/99ca9a08-235f-3e74-85a6-060ddaa09c90.roa
Signing time: Thu 24 Oct 2024 01:00:32 +0000
ROA not before: Thu 24 Oct 2024 01:00:32 +0000
ROA not after: Wed 22 Jan 2025 02:00:32 +0000
asID: 834
IP address blocks: 147.124.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a4:71:2d:39:e1:58:30:09:40:33:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Oct 24 01:00:32 2024 GMT
Not After : Jan 22 02:00:32 2025 GMT
Subject: CN=4d531a0e-be22-4282-92d7-3f203e181463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:e2:eb:fc:1c:d6:f5:04:3e:90:b0:27:11:
21:67:8b:7a:f4:db:42:04:93:6e:64:c5:5a:9d:50:
7b:07:ed:e7:4b:b5:d6:58:67:0e:85:9d:00:68:b9:
5c:3d:2a:09:47:76:60:b8:00:7a:dd:63:a4:3d:5d:
70:f1:63:ca:0a:42:50:28:e3:c4:fa:3b:54:42:aa:
ac:ef:cd:bd:dd:09:af:0b:ff:b9:c9:0a:9a:54:0c:
e8:26:ad:63:c1:32:d9:fb:38:ab:36:de:41:12:c0:
be:9a:41:0e:c2:30:56:8b:96:78:a0:11:ab:82:e5:
19:6e:0a:fb:8b:e5:c3:c4:4b:31:e1:90:01:92:4a:
94:ce:48:b4:c6:94:11:3f:8a:03:99:af:49:78:36:
22:18:07:b4:9d:f4:70:0b:15:5e:2f:ad:ff:7f:f1:
5b:c7:51:82:93:c6:2f:82:66:46:52:49:57:31:00:
a9:0e:42:07:5d:57:f2:98:6b:49:81:1a:fe:a6:3d:
22:90:2d:d4:1d:8f:a9:c0:43:78:d1:6c:b1:01:be:
68:75:d8:7e:f1:f2:bf:64:02:e0:3c:80:da:89:77:
03:1c:da:ea:45:a5:57:1f:dd:09:3c:26:85:c1:bf:
d7:97:cf:e9:72:96:f8:63:1d:0b:b5:4b:79:9f:2d:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:11:F2:76:69:72:E9:8B:DC:AF:61:25:AC:1A:4A:4E:25:AE:10:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/99ca9a08-235f-3e74-85a6-060ddaa09c90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:2c:52:ae:de:88:75:c4:02:a2:83:80:8e:87:0e:a3:56:d2:
e3:1e:95:c9:2c:fc:a4:85:50:05:c7:cc:e5:a8:70:94:f8:ef:
ae:ea:1a:f0:81:ec:19:0c:7d:45:99:87:6a:f2:9e:0b:c9:7e:
f3:53:d5:a9:66:d4:b6:19:7d:e5:fd:68:fd:a9:23:56:c4:62:
2b:89:be:07:e7:59:95:56:af:4d:c7:3d:2b:c8:fa:a0:f7:25:
9e:31:f4:da:49:d3:a2:27:58:16:30:1d:b3:ef:8a:96:b8:be:
4c:a7:50:cf:20:d0:2e:25:99:e0:9a:be:c1:bc:f9:1d:7f:de:
38:a7:9d:42:02:32:3b:27:3b:d2:2a:53:56:1e:9c:33:d8:75:
7f:03:d1:8d:39:94:dd:12:5d:7a:ea:01:63:a7:f1:1d:ae:5c:
d7:7a:cb:5d:e2:12:95:f3:9c:e8:52:07:64:1b:bb:00:51:fc:
58:e4:81:42:d4:70:9d:f6:38:f0:6e:59:b9:34:89:c2:4a:d6:
2e:88:89:d8:a9:96:84:d3:39:1d:cd:60:b3:23:87:2d:ea:95:
a0:a3:c0:b4:35:6a:2f:a2:f4:2d:fc:28:5d:12:4b:5a:c1:4a:
a7:ce:bb:c9:11:04:20:7f:7b:dd:58:75:01:7d:c2:a8:d2:4c:
d4:74:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:43 2025 by rpki-client