Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/129eccc9-c561-379e-a759-df8d3ee4d864.roa
File: 129eccc9-c561-379e-a759-df8d3ee4d864.roa (raw, json)
Hash identifier: C7JfGLWWXXqjP/QD/UmEN8BpyuZUTjHawnEvfDOvZP4=
Subject key identifier: F4:30:15:00:A5:17:86:FD:7C:38:58:CC:D9:FA:42:4A:BF:AC:48:8D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F33A3C83C8AF8365397AF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/129eccc9-c561-379e-a759-df8d3ee4d864.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 64.232.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:33:a3:c8:3c:8a:f8:36:53:97:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=310791f0-bf0d-404f-966a-86e126ac8d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:6d:54:40:99:3d:84:44:d3:04:c1:88:54:
76:8c:e5:f1:5f:f5:26:97:04:d2:ed:a8:7c:09:ce:
f9:62:b1:06:17:6b:11:e5:81:16:fe:c6:4d:2a:ed:
57:5f:49:3b:e1:bb:1f:40:be:64:c6:2d:8e:bb:86:
77:c1:0f:bf:d3:65:5c:20:6b:60:4d:71:e1:49:f4:
5c:c4:fb:a5:0d:39:1d:93:f2:c5:ec:c2:eb:37:01:
0f:b9:71:f6:44:cf:0f:d5:8f:b5:54:ae:ec:4f:3c:
24:98:35:ef:ab:a8:61:9d:84:88:4a:74:30:d1:21:
2b:57:1c:ee:c4:bc:ef:88:80:08:59:69:43:13:84:
a7:31:b4:7f:16:ea:e8:51:7b:b6:94:e0:03:db:d3:
96:dc:2f:21:53:f1:bb:7b:18:0a:c0:84:40:87:13:
cf:d0:94:37:89:07:51:62:8f:c4:79:67:81:ee:f2:
6b:45:e2:1b:d8:fc:95:99:fe:c8:57:15:fc:9e:64:
55:d8:d1:5d:1a:77:be:a7:00:4f:d4:66:5d:49:86:
3e:96:c9:00:91:f1:9a:1a:a3:5b:d9:97:ad:69:40:
9c:70:62:76:7f:b3:de:89:c8:06:d8:48:e3:e5:5f:
5b:1e:8f:ce:b5:14:9b:b4:ae:8c:f8:b0:72:ad:ce:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:15:00:A5:17:86:FD:7C:38:58:CC:D9:FA:42:4A:BF:AC:48:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/129eccc9-c561-379e-a759-df8d3ee4d864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.232.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:e1:2e:33:8c:ad:f8:f8:09:56:79:19:61:a1:ba:a5:7c:e0:
ab:31:79:18:29:e3:7a:31:d0:ce:09:b6:b5:23:94:c1:92:96:
c5:23:89:eb:1e:67:83:6a:2e:95:39:4c:42:84:aa:50:c2:71:
11:72:c6:50:7b:5b:bd:7d:3c:50:f5:a6:c5:85:99:8e:88:80:
64:a1:bf:a7:9e:16:1a:e8:3a:f0:9a:78:95:86:d7:0e:60:b4:
e9:d0:c9:59:1d:d8:50:b8:ac:68:dd:22:3c:59:a9:b5:fe:50:
5c:1a:ff:e7:5a:e5:67:31:53:fa:b1:dc:6d:89:9a:32:62:6a:
8b:44:c2:a5:a8:81:08:fb:e1:71:54:7d:c9:aa:18:10:c2:f0:
e7:c1:39:df:ca:c4:bf:82:71:f1:74:d9:3a:35:2d:b0:33:18:
3f:33:06:8b:6a:1e:2a:95:83:bb:b1:bb:c0:02:01:60:fd:78:
56:89:0b:ce:36:09:6e:87:9a:81:46:cc:a9:f2:ec:b4:3d:ca:
45:2f:99:ad:df:cd:18:98:22:7c:00:17:43:f8:15:0f:e0:b0:
db:98:7d:c2:4b:b5:94:0f:3c:d2:a4:a7:a4:03:7d:53:2f:d1:
9f:3e:e6:2d:44:39:2c:bf:0d:1e:6f:72:73:2b:34:20:b0:1d:
f8:8d:77:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0/M6PIPIr4NlOXr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMxNTA0MDAwMFoXDTI4MDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MzEwNzkxZjAtYmYwZC00MDRmLTk2NmEtODZlMTI2YWM4ZDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEhtVECZPYRE0wTBiFR2jOXxX/UmlwTS7ah8
Cc75YrEGF2sR5YEW/sZNKu1XX0k74bsfQL5kxi2Ou4Z3wQ+/02VcIGtgTXHhSfRc
xPulDTkdk/LF7MLrNwEPuXH2RM8P1Y+1VK7sTzwkmDXvq6hhnYSISnQw0SErVxzu
xLzviIAIWWlDE4SnMbR/FuroUXu2lOAD29OW3C8hU/G7exgKwIRAhxPP0JQ3iQdR
Yo/EeWeB7vJrReIb2PyVmf7IVxX8nmRV2NFdGne+pwBP1GZdSYY+lskAkfGaGqNb
2ZetaUCccGJ2f7PeicgG2Ejj5V9bHo/OtRSbtK6M+LByrc7YswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPQwFQClF4b9fDhYzNn6Qkq/rEiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI5ZWNjYzktYzU2MS0z
NzllLWE3NTktZGY4ZDNlZTRkODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQOgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUuEuM4yt+PgJVnkZYaG6pXzgqzF5GCnjejHQzgm2tSOUwZKWxSOJ6x5n
g2oulTlMQoSqUMJxEXLGUHtbvX08UPWmxYWZjoiAZKG/p54WGug68Jp4lYbXDmC0
6dDJWR3YULisaN0iPFmptf5QXBr/51rlZzFT+rHcbYmaMmJqi0TCpaiBCPvhcVR9
yaoYEMLw58E538rEv4Jx8XTZOjUtsDMYPzMGi2oeKpWDu7G7wAIBYP14VokLzjYJ
boeagUbMqfLstD3KRS+Zrd/NGJgifAAXQ/gVD+Cw25h9wku1lA880qSnpAN9Uy/R
nz7mLUQ5LL8NHm9ycys0ILAd+I13eg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:54 2025 by rpki-client