Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17ac3716-0171-3895-8481-b5fdce3fdb4b.roa
File: 17ac3716-0171-3895-8481-b5fdce3fdb4b.roa (raw, json)
Hash identifier: Yt5TWKyG2WugSVGd+s/VCKAkUYRoSL3J5cWRo1KIet8=
Subject key identifier: FB:B7:8D:FB:AE:4E:54:38:0D:12:33:8D:CE:70:FA:15:A2:52:4E:0D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155137B634B9EEF9409A480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17ac3716-0171-3895-8481-b5fdce3fdb4b.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 26407
IP address blocks: 216.248.178.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:13:7b:63:4b:9e:ef:94:09:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=f3c76a03-4028-49ae-abda-b1fba930c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:e6:85:aa:5d:ea:06:f0:43:65:ae:00:06:
06:a8:01:42:84:83:0b:38:97:a2:60:38:41:e7:44:
e2:e6:2e:ce:c5:29:b0:6e:0e:2c:3a:50:0b:8e:dd:
6b:6f:58:6a:f9:f6:d4:80:03:0c:b9:00:f4:6e:de:
4e:08:9e:21:5f:a0:73:84:72:79:fa:57:3a:5d:53:
38:2e:52:82:da:63:e2:b8:51:36:33:9d:7a:35:78:
39:db:20:dc:4a:44:bc:90:fd:d8:49:0f:98:ce:fb:
71:e9:8c:4a:ee:ef:48:43:26:e2:ee:6c:43:33:67:
14:8d:a1:56:78:5f:cb:47:d8:b8:29:1a:0e:3f:68:
e9:d8:ff:2f:33:d8:e0:92:ec:b5:cb:0c:6e:60:51:
56:3c:75:c2:5d:42:8c:ec:ae:20:30:0e:12:ad:aa:
82:f1:5f:1c:73:ac:37:0c:41:9c:df:e4:a2:98:90:
be:9c:ba:c0:50:30:c6:8b:71:32:fa:ce:9f:c5:40:
e0:c4:1a:61:29:04:40:49:ad:63:60:e0:26:00:e4:
72:92:25:43:d3:76:de:aa:2f:fc:67:13:64:10:ad:
7b:7b:d5:f8:71:0c:6c:47:11:f9:57:83:6e:fa:c9:
46:b2:b1:54:50:fe:5b:dd:ee:af:91:52:d2:2b:f2:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B7:8D:FB:AE:4E:54:38:0D:12:33:8D:CE:70:FA:15:A2:52:4E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17ac3716-0171-3895-8481-b5fdce3fdb4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.248.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f7:c7:e1:0e:f8:e7:17:3d:45:72:a8:b0:99:03:11:fa:b7:
45:d5:91:80:06:df:5a:08:62:41:b5:d6:ef:bf:b1:4c:08:9e:
90:65:c1:19:86:56:65:61:f2:ad:b1:5a:29:5a:9f:7b:e1:10:
6d:51:49:11:db:8c:49:10:3b:72:f6:fe:ec:d5:bb:9b:7a:77:
d2:b9:33:ba:9e:ab:56:c2:b5:ec:6f:be:9c:72:96:64:c9:7d:
b2:96:95:e1:8f:e6:05:ea:b2:d4:7f:45:eb:65:9e:41:fc:e6:
0f:87:dc:35:fb:16:c3:22:a4:ea:35:a3:56:1d:c3:b1:57:71:
3e:90:52:8b:02:cb:88:b2:70:eb:00:d7:8e:57:dd:69:ae:3a:
7e:d2:c9:a9:9a:43:23:59:eb:2c:97:5e:2b:dc:44:e9:be:81:
28:fc:55:f3:49:6b:bb:7e:af:74:cf:15:57:75:4f:9c:6e:e5:
c9:5a:cb:1e:95:f7:e2:a4:f2:7b:5a:a4:5b:15:a4:09:14:1d:
2b:66:a5:72:67:46:d9:b7:cc:2b:f1:62:d4:90:ca:3c:48:08:
4b:43:c5:02:c6:e8:7f:e4:ba:12:1c:cc:ef:c5:69:92:99:e4:
f4:bc:1d:ce:4f:c4:0b:0d:3a:fe:a4:fd:40:63:f9:e1:9c:9b:
52:b6:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:28 2025 by rpki-client