Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/051f7110-9dbc-3fcc-a8ab-20df94039411.roa
File: 051f7110-9dbc-3fcc-a8ab-20df94039411.roa (raw, json)
Hash identifier: g1Awzh4dwRmDrFlXh1nPO4MyedJlxP29WfScWQw8ZuY=
Subject key identifier: A5:96:7D:5B:A6:19:80:E1:3F:6D:9A:0C:B5:59:51:24:7F:E6:AE:FD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FA97476C1FB0A31A51212B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/051f7110-9dbc-3fcc-a8ab-20df94039411.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 207.94.128.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:a9:74:76:c1:fb:0a:31:a5:12:12:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=64b2fda2-f5d4-4fad-a7fe-fda85ed641cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:70:78:7b:ab:da:ab:72:15:ad:c3:fa:e3:
b7:23:d1:da:d0:c9:44:8d:be:55:ad:d6:b5:91:31:
89:af:07:2c:78:e6:15:ef:ca:08:dc:22:5d:ce:92:
d2:2a:a0:01:3e:9c:09:87:8e:d0:77:87:d7:46:10:
d1:22:79:3f:b1:4a:af:ac:29:ea:8e:89:5a:d9:01:
17:98:c0:d0:71:6e:5f:e9:fa:0c:d9:44:37:b9:31:
8a:ed:95:63:63:c0:1c:e0:1d:77:a4:99:23:05:b8:
fb:30:68:16:5f:76:a4:bf:28:58:5a:81:3e:31:bd:
b2:4c:92:09:fc:53:54:69:25:4a:f6:ec:2c:a8:0f:
b3:2f:eb:e3:a0:f4:72:95:f0:14:be:2c:d5:c6:3d:
76:77:ef:bf:79:95:c5:5a:42:06:99:31:ff:bb:ee:
01:e7:c5:fe:4e:06:0b:ab:e3:18:d7:fd:d3:1b:86:
97:49:37:82:2b:ef:99:00:9e:97:aa:dc:4a:0f:98:
eb:88:bd:65:5f:9a:69:be:7c:4e:33:1a:29:b1:21:
7b:ca:a0:c7:5b:30:9f:1c:2a:7e:de:f0:cd:71:01:
88:b6:e1:ac:9d:b3:cb:c9:c3:c2:65:60:73:5d:1d:
e8:61:34:0a:0c:c7:88:07:bd:b4:f1:9f:ba:e6:48:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:7D:5B:A6:19:80:E1:3F:6D:9A:0C:B5:59:51:24:7F:E6:AE:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/051f7110-9dbc-3fcc-a8ab-20df94039411.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.94.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c8:82:51:cd:1c:12:08:50:f3:75:3b:cd:35:8c:40:10:67:
6b:d2:4e:a0:4f:47:79:05:3b:0c:a9:33:ec:68:31:48:f9:1e:
0c:90:98:c6:a2:87:4f:b4:37:28:54:e3:1a:0e:2c:1c:43:e0:
ec:e2:26:cb:56:bd:7b:d9:bf:a0:4a:03:6c:1a:83:32:fc:fb:
69:91:66:a3:4a:38:92:25:8a:8e:ef:ef:e6:12:37:08:96:08:
6d:da:e0:02:2f:1e:70:98:13:25:e9:f6:b6:f7:3a:6e:7f:01:
76:d2:b2:b5:d8:b6:b9:6b:55:d9:ca:43:1c:01:3b:34:ac:0b:
e2:8b:4d:96:64:88:8a:08:b8:c5:c4:d2:69:e8:42:0c:93:f6:
3c:9f:67:9a:93:77:ea:4b:4a:19:da:94:94:4f:c5:83:26:7f:
bb:86:f6:9a:19:67:08:90:8d:c8:3d:1a:67:77:5c:34:53:f2:
21:90:ed:e6:37:6d:26:b3:af:c7:69:8b:4b:93:01:1a:65:d9:
4f:0f:da:97:a9:3e:75:bd:ba:b1:90:f3:00:e2:fc:17:59:b3:
26:f3:86:c5:ed:c4:64:e0:88:30:cf:5c:0c:a8:35:02:3f:eb:
27:01:cf:25:ec:ec:72:1f:ca:e0:8c:db:b4:ad:bf:a4:cb:0d:
a4:a7:44:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:37:28 2025 by rpki-client