Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22197960-bdb4-3f19-852c-66b25f64f648.roa
File: 22197960-bdb4-3f19-852c-66b25f64f648.roa (raw, json)
Hash identifier: nY5o/S96wG6Jh1YWB0TrJ1CJt8FD9k2U2nX5lpsSBlQ=
Subject key identifier: 06:CD:10:2B:F2:FD:14:9E:D2:A8:3E:A6:A7:84:8B:A2:D4:6B:92:03
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FA9CD8D7E121BDD6340D3B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22197960-bdb4-3f19-852c-66b25f64f648.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 207.220.112.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:a9:cd:8d:7e:12:1b:dd:63:40:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=28e45f74-3893-43a4-8ff5-ff2b12520796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:c0:f3:b0:fa:e8:96:3d:7e:3d:3b:bc:6e:
f6:b3:96:11:8a:3b:43:18:1c:7b:f2:6c:7c:69:62:
19:d0:e1:d8:3c:2c:4f:e5:5b:8b:02:ca:b8:74:28:
f9:fb:ba:d6:36:ff:6c:ac:f7:8e:df:a6:10:aa:3f:
51:8b:06:f4:86:62:29:6c:d0:7f:ef:a0:62:01:c8:
7d:65:e2:ea:ee:6c:9b:14:2a:f3:39:4a:d2:1e:c4:
68:5f:98:09:c0:e8:d9:bd:b1:8d:07:05:f8:a9:6e:
de:0e:9b:0a:38:54:3d:94:f9:f5:66:e4:2b:1b:8d:
e1:eb:7e:3e:2b:e9:5e:2b:37:d9:20:5b:c5:82:ff:
e3:dc:aa:d1:3d:1b:4d:7b:85:3a:3b:53:35:07:55:
f1:31:27:a1:c9:48:a0:de:a8:55:3d:52:36:25:2a:
83:89:66:c8:df:a7:8b:97:5e:f9:83:ab:c3:d6:7a:
07:50:50:e6:19:c4:4f:99:96:40:4b:ac:b7:80:39:
c0:05:fa:22:79:50:61:f8:b7:48:0d:71:bc:3c:4d:
44:2d:91:bc:8c:20:91:c3:01:d3:d9:18:f1:c0:63:
f7:fb:ff:e8:17:81:0f:40:d0:8a:c9:52:38:c3:e0:
8f:bf:48:52:cb:65:66:df:e6:d3:b4:cb:2b:1f:5f:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:10:2B:F2:FD:14:9E:D2:A8:3E:A6:A7:84:8B:A2:D4:6B:92:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22197960-bdb4-3f19-852c-66b25f64f648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.220.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:de:5b:03:fe:65:c5:43:46:ee:7b:78:77:08:4e:1a:7d:26:
bf:5f:97:f2:02:b2:fc:1a:7d:6d:8e:be:9d:5f:dc:57:65:83:
e2:c2:9c:97:d2:06:5f:0b:ee:59:d7:45:c7:38:0d:70:d4:5a:
4f:4c:ff:71:04:61:39:95:2b:4e:dd:6e:7d:1e:76:d9:1d:60:
cd:10:85:23:ed:fd:15:d3:bc:4d:ee:a6:6e:d8:22:77:d1:c9:
6a:88:f5:0b:36:d0:57:3d:1d:1f:f7:76:a8:7d:01:a8:b5:61:
09:ee:b8:ea:c3:f5:fa:8f:42:d4:ee:74:34:01:cb:68:55:82:
72:9a:a9:96:28:2a:1b:26:12:26:de:46:60:61:b7:8a:80:6a:
0c:78:da:3a:fd:78:9c:f9:7c:7e:57:dd:34:5f:18:14:02:8e:
92:0b:fc:bc:fa:dd:e4:da:86:6e:d8:68:3b:55:d3:5a:4d:e3:
35:15:b2:5b:e1:e1:96:2a:99:37:19:9d:5e:e0:8c:7f:81:44:
28:6c:3b:ea:60:41:e0:28:35:c1:49:48:2c:fe:da:48:42:64:
1f:56:2a:5a:d4:a0:28:af:5c:e3:0f:83:ca:1f:2d:04:a1:0d:
85:6e:b8:cd:94:fa:57:f0:5f:cd:6e:8f:be:2b:59:81:5a:8d:
ca:32:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:31 2025 by rpki-client