Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2254cacb-d4e7-35c6-9182-d61914fecc5f.roa
File: 2254cacb-d4e7-35c6-9182-d61914fecc5f.roa (raw, json)
Hash identifier: jsYQM7ARKLz7VTX1NLxyig7lEzoT1fn0hk3dFydUwHY=
Subject key identifier: C9:09:CB:1D:FE:44:B5:13:BD:3C:E2:DD:63:F3:02:57:C4:87:62:7A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FACCF3C10702AD3F43880E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2254cacb-d4e7-35c6-9182-d61914fecc5f.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.36.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:cf:3c:10:70:2a:d3:f4:38:80:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=b2e92bfc-13fd-4585-9b64-d19b78435da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:b2:e5:e2:6e:a5:75:af:63:8b:67:6f:d0:
28:78:93:6b:cd:3d:1e:c6:5d:ed:55:ee:6f:c8:cf:
0d:12:d2:f9:57:a2:6b:01:6f:7f:a2:e5:76:ad:7d:
9e:53:c5:05:2f:97:2e:90:8f:b6:db:40:d4:22:37:
2b:24:66:3f:4b:c1:f4:95:62:d7:ce:55:2d:78:dd:
f7:bc:44:64:d3:a3:5b:86:81:9d:bd:c5:a8:88:b3:
9d:17:de:e7:95:8c:56:27:d7:9f:85:76:49:98:c3:
e7:55:7b:f8:86:53:ad:1d:c3:3b:76:df:7d:a6:be:
e3:ea:76:a9:13:e5:43:4a:5b:1c:5b:e6:4d:c0:68:
30:a1:71:cc:05:c8:0a:d5:c5:2b:9c:7c:d2:40:2c:
5a:98:9a:62:d9:9c:4f:f0:55:55:15:c5:33:06:68:
0f:7d:bf:59:c4:ba:28:b4:4a:58:2a:b5:37:1b:13:
0d:3a:1d:ee:62:76:73:69:a0:76:d8:06:65:e2:77:
81:0d:3a:62:6b:bc:08:af:fe:7d:b5:20:c1:71:48:
91:ac:25:90:f9:fa:f2:fd:15:0b:ce:b3:9f:b9:8f:
80:35:b3:ea:4d:c0:7a:21:8a:3f:56:ec:d0:73:21:
fd:3b:1c:48:55:fd:a3:9f:f3:12:5c:41:4f:cf:58:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:CB:1D:FE:44:B5:13:BD:3C:E2:DD:63:F3:02:57:C4:87:62:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2254cacb-d4e7-35c6-9182-d61914fecc5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:1a:d4:7b:b3:d5:ad:e6:9d:fa:63:5a:d7:5d:9b:f5:11:e3:
47:19:02:98:27:b8:b8:7e:d5:6c:b3:49:cd:62:3f:91:e9:46:
25:c0:00:60:08:d0:dd:b8:8f:d7:2d:58:2a:e8:f0:92:30:7f:
7a:7b:fe:8f:b0:c2:30:9b:b8:d7:c9:2e:ea:77:28:8c:21:2e:
c8:ce:d5:25:2b:5a:ec:fe:28:00:d5:9a:a6:20:b5:10:89:57:
8c:cd:f2:93:a7:57:2b:eb:c9:8a:ae:ec:61:47:5d:60:c6:72:
4e:80:72:39:ac:26:18:8d:d1:cc:fe:0f:50:9a:62:b2:de:dd:
77:1c:bb:f7:2b:fa:db:ed:98:66:d2:53:76:b8:ea:ea:5a:4e:
59:dd:32:34:78:5f:5a:68:d8:4a:c8:81:7f:b0:e3:53:93:46:
58:97:fb:64:69:82:ae:e3:7c:5b:5e:eb:8b:a5:e0:7c:23:61:
23:0f:93:7a:e9:47:74:c7:36:81:fc:d4:8d:14:42:12:a1:61:
ed:88:fc:44:b2:99:ac:3f:fa:e4:a1:2d:56:e4:39:81:a2:7a:
df:3e:a2:59:97:d2:18:4b:4e:10:b4:bb:0f:9f:63:f7:2f:43:
78:59:70:d1:ec:ae:cb:1b:e6:ba:02:3b:4e:ec:5a:6a:28:fe:
1b:9d:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:26 2025 by rpki-client