Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2578cc99-8930-3639-9229-ef139f24cd26.roa
File: 2578cc99-8930-3639-9229-ef139f24cd26.roa (raw, json)
Hash identifier: TcZkhQM7BHlzMzqy/v0tvcUvMbEQhx/wgA7eh4jn8bw=
Subject key identifier: 0E:8F:7D:E8:F0:31:6B:33:48:E1:E8:BF:A5:9D:71:D3:36:FA:EA:34
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858479015C8D416B1C069A104E4A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2578cc99-8930-3639-9229-ef139f24cd26.roa
Signing time: Wed 16 Oct 2024 18:00:15 +0000
ROA not before: Wed 16 Oct 2024 18:00:15 +0000
ROA not after: Tue 14 Jan 2025 19:00:15 +0000
asID: 7029
IP address blocks: 24.110.16.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:90:15:c8:d4:16:b1:c0:69:a1:04:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 16 18:00:15 2024 GMT
Not After : Jan 14 19:00:15 2025 GMT
Subject: CN=d4e5a868-dd33-48bc-85bf-3066812ada2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:e4:0d:82:79:a8:9e:a0:13:50:5e:75:42:
db:31:01:fa:10:16:3a:a7:02:ce:ae:b1:9a:e2:00:
32:1a:48:1f:b6:fd:66:6b:39:8c:fe:b5:d1:57:d4:
6c:31:fb:97:f4:22:1d:c3:46:b5:a1:ef:51:ba:9b:
d7:fe:8c:e8:1f:73:76:b0:12:94:64:8c:73:3a:85:
31:16:c4:48:cc:b5:05:a2:93:ec:57:56:6c:fc:08:
39:9b:b1:ec:4d:9c:37:04:9c:c8:1f:93:20:9e:18:
26:72:73:e7:0b:c1:cc:2f:7d:97:31:61:a5:3c:38:
8d:26:f9:d2:12:32:94:d4:1c:98:01:f4:a0:ce:03:
83:50:1b:3b:0f:f3:da:ff:28:1f:62:c0:ca:f8:ad:
ee:dd:5f:e7:92:d5:91:56:8b:e2:10:89:15:d5:2b:
c8:a7:1a:b8:ef:28:43:a3:5e:7d:22:c2:cc:d4:fa:
2e:8f:21:0b:24:ea:92:dc:d5:71:c2:06:e8:17:6a:
a2:a5:ba:15:c0:9d:2b:2f:58:c4:c1:f6:44:b4:11:
ff:d4:0f:43:41:2a:60:56:1a:a9:ed:c2:78:77:4f:
47:98:ae:cd:dd:27:89:4e:70:ce:5d:db:6a:a1:9f:
a1:7c:fd:45:62:58:58:ef:37:eb:84:09:02:bc:cb:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:7D:E8:F0:31:6B:33:48:E1:E8:BF:A5:9D:71:D3:36:FA:EA:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2578cc99-8930-3639-9229-ef139f24cd26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.110.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:cb:cc:4d:02:55:63:46:bf:30:93:26:98:e7:9d:b5:0c:45:
b8:f8:37:09:0e:9e:93:a9:92:45:4f:57:3f:be:7d:52:04:1c:
aa:b7:61:15:58:d0:cc:ad:81:d3:8b:12:f4:b9:de:b6:81:45:
d0:d8:96:04:ad:de:4b:b6:21:e3:3e:05:1d:10:15:82:cd:83:
77:76:dd:ac:e1:92:ee:bb:38:ae:f4:f6:e3:0d:55:cf:f4:bb:
1c:73:f0:a1:0e:e5:33:c1:22:7a:e0:c3:2e:35:84:53:4d:c2:
92:dd:dc:1b:1d:18:5d:77:f1:4e:a7:c2:cb:6e:96:f1:c6:cc:
5b:68:14:48:79:21:8c:c0:13:f6:d0:9c:89:0e:0c:20:5c:31:
dd:eb:09:5e:66:d4:f9:50:d1:2a:73:97:8d:d7:5e:ad:be:e6:
1e:8c:47:70:ba:77:54:a5:4b:02:a8:7c:ff:b5:62:9a:f0:2a:
1b:2b:e0:c6:b4:cf:66:86:a5:9e:bd:52:a2:26:cb:e3:2a:b8:
7b:8c:68:bd:f2:50:5f:31:dc:c1:7d:38:d6:80:76:71:f1:f7:
00:a2:60:5f:a9:c9:27:78:ba:09:bd:09:d2:f0:a9:be:49:5e:
ba:d5:b4:04:0e:a7:ad:72:60:05:c2:6a:cc:ed:a9:e6:59:54:
0c:0e:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:48 2025 by rpki-client