Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa
File: fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa (raw, json)
Hash identifier: VAxAzde1KMU+t9hmPrAUv/U3B6Ho+uPJ3BNqrkmTjfo=
Subject key identifier: 14:E8:89:8D:3A:4E:B0:DA:A8:DA:E5:95:EF:86:5D:8C:EC:66:86:0E
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F43285848A830A9C39F4253FB5CCD1BA0
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397423
IP address blocks: 147.124.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a9:c3:9f:42:53:fb:5c:cd:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=260ad7b4-4c4f-48a5-b990-817d3bf6b427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:f1:0c:c9:0b:c2:9d:3f:f8:55:19:53:37:
e8:ed:d5:bd:be:78:b0:b9:cd:5d:67:5a:a9:6b:a7:
55:4f:cf:2f:16:fa:55:23:77:4e:f8:28:bb:79:e7:
fe:4e:d8:dc:f5:8a:cb:0d:38:6d:3e:34:ca:57:f8:
a4:9e:7d:0f:9a:e3:3c:54:98:6d:8f:cb:2f:85:1a:
0b:e1:be:d4:03:98:4e:db:02:83:2f:ee:b3:f4:f4:
48:08:54:75:26:35:22:6a:43:06:d8:4a:6b:a7:f9:
d5:af:74:2f:17:62:cf:44:f0:18:fa:62:8a:6e:a1:
98:80:03:f1:e9:8b:59:12:95:52:14:8f:00:d4:b6:
e9:49:ca:26:b1:ee:2e:78:19:65:b6:b5:03:8f:02:
58:72:d2:ab:cf:b0:a5:6f:c1:a4:5d:11:c9:af:2b:
27:d5:49:97:eb:49:ff:62:5e:1e:e1:e9:49:a0:91:
ee:2b:36:7c:d9:67:72:1d:71:15:4e:0b:18:bc:ea:
0a:08:10:16:69:f3:f2:17:7a:de:ef:96:1f:b8:d6:
15:23:5f:41:08:c9:d0:9a:30:56:19:58:2e:b2:c8:
6f:c8:76:85:fd:6e:d1:c3:f2:85:22:e7:3b:40:df:
d0:19:25:59:25:11:30:20:3e:8f:d5:8e:ba:aa:93:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:89:8D:3A:4E:B0:DA:A8:DA:E5:95:EF:86:5D:8C:EC:66:86:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:68:f1:11:91:7e:71:6d:88:67:ce:0a:ae:7b:4c:8b:7d:22:
c7:88:3b:c6:34:e6:f6:42:90:e0:00:f7:ee:eb:47:67:a3:2f:
04:59:23:cb:07:a9:18:d8:63:4b:6c:4c:3b:8e:b2:e2:76:9a:
a9:45:6a:c7:59:dd:89:93:e5:37:63:46:c2:08:5f:a9:a6:c3:
fa:8b:f0:c4:8f:da:39:7f:ee:74:2e:31:d1:72:32:b5:ce:07:
a0:6d:03:87:35:74:e9:7d:9d:10:85:a9:91:e1:3a:7c:33:df:
6e:d6:20:96:7a:f3:1b:5c:4b:49:dd:b2:28:98:97:f0:0e:8e:
ae:dd:ca:ce:ca:3f:d2:3d:52:d5:50:29:e2:e3:61:35:5f:10:
55:b9:0b:f3:8b:d4:2f:9e:2e:84:5b:78:f7:36:c2:12:37:4d:
7d:9c:0a:72:05:eb:3d:93:ee:e9:28:5a:ec:6e:e3:22:98:cf:
d6:0f:1e:13:47:58:48:3b:c2:e7:b3:87:d0:25:db:e4:0f:81:
37:cb:b5:81:38:57:29:6d:c8:58:99:ff:02:ee:93:13:08:88:
2f:07:24:72:71:f4:21:33:5f:83:c7:23:03:df:5b:b0:23:70:
f4:e5:4b:48:dc:89:c2:98:6d:65:2c:dc:9c:ef:9b:a4:f3:3f:
23:18:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:02 2025 by rpki-client