Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26a617d2-ad78-3287-b3dd-ae3693386dec.roa
File: 26a617d2-ad78-3287-b3dd-ae3693386dec.roa (raw, json)
Hash identifier: a2qKecib/XznIpp4RDmUuBZxrdemOFp54JeaAqSOjG8=
Subject key identifier: FE:7B:CE:F3:87:F8:E7:EE:CB:4E:2D:FE:E1:CF:6F:77:F7:05:9F:4D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285845533316A5B651C91BEC39EFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26a617d2-ad78-3287-b3dd-ae3693386dec.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 198.211.224.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:16:a5:b6:51:c9:1b:ec:39:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=05de861e-b6d3-4c3f-815e-45157aa9ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:b9:a8:20:7b:62:1b:8a:07:04:48:87:0d:
3b:a1:60:3a:26:a8:42:fb:cf:a9:7e:d9:a3:60:3a:
bd:49:26:85:2e:fe:52:3b:bf:9a:e1:51:66:f1:17:
a3:f8:20:94:47:af:d7:07:e8:11:84:f7:54:1b:e6:
56:9c:89:b6:a4:2f:aa:3a:ff:13:dc:07:99:9e:bd:
d2:2d:05:06:5b:39:86:45:17:cc:b4:5f:56:7e:6c:
64:86:3b:40:bd:84:08:a4:e5:bd:01:02:06:1d:eb:
f4:b0:e3:3a:89:8d:ed:be:07:2b:5c:95:4c:50:a8:
27:8b:7d:90:d1:ed:ff:01:d9:c4:0b:60:da:75:20:
3d:5c:cf:b5:32:b4:83:4a:90:8d:bc:8a:f2:6c:5c:
9c:24:4e:f1:71:21:55:92:46:4a:ac:38:3e:91:25:
f6:23:b0:ff:72:c0:6f:ea:4a:96:10:74:d2:da:2d:
48:12:2d:38:90:37:6e:d8:75:f2:95:6f:87:7b:b4:
8d:f6:c1:54:9e:9a:4c:ce:75:4f:19:63:48:f1:10:
62:55:85:57:ed:fc:dd:7d:90:8d:64:7e:57:7e:02:
41:ce:b1:92:4e:d7:31:bc:b0:0e:44:d0:70:94:a7:
53:33:c4:46:01:42:ff:e7:75:44:8a:c0:53:a5:85:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:CE:F3:87:F8:E7:EE:CB:4E:2D:FE:E1:CF:6F:77:F7:05:9F:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26a617d2-ad78-3287-b3dd-ae3693386dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.211.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:d2:e6:63:27:4a:ae:23:1b:53:ba:8e:47:e8:9c:3f:98:90:
23:89:58:fc:0f:a3:b4:e8:60:97:93:78:a4:10:78:aa:0d:f7:
c4:39:57:ea:30:20:29:14:0a:24:f4:7c:d4:b7:48:20:6c:71:
df:90:f3:5f:9a:a0:02:68:5a:f3:47:b9:17:a6:c5:53:c0:b8:
4e:74:a7:39:ed:6f:1d:2b:2a:65:fa:41:18:a1:92:c8:9d:8d:
6c:51:a4:20:e1:42:d2:fb:0d:f2:41:3e:a2:0d:db:e8:7b:2e:
d7:1b:57:14:f5:f8:60:e6:29:ed:14:bc:84:83:bb:8d:95:1d:
03:6e:05:3b:44:f8:5a:ab:ca:01:49:04:b0:12:a2:0b:a4:a2:
54:f5:e1:ea:dd:ac:20:d7:57:ee:d5:41:54:e3:c0:9b:a1:2a:
6f:77:a8:8d:8a:2b:1a:f3:7c:81:c7:7a:ab:88:c8:d8:28:08:
e4:ce:fd:e6:c0:d6:d6:fc:3a:fa:94:c4:97:6b:aa:cd:bf:d5:
32:98:60:19:93:34:cf:10:b1:46:aa:40:87:28:bb:72:ab:ca:
a6:da:3e:c6:a6:b2:28:07:86:84:2a:d4:32:e6:57:ba:bd:0b:
41:43:a6:41:e8:9e:b5:aa:3d:1c:43:bb:6c:c4:cb:7f:0b:f9:
58:48:f5:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxaltlHJG+w578AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
MDVkZTg2MWUtYjZkMy00YzNmLTgxNWUtNDUxNTdhYTljZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5a5qCB7YhuKBwRIhw07oWA6JqhC+8+pftmj
YDq9SSaFLv5SO7+a4VFm8Rej+CCUR6/XB+gRhPdUG+ZWnIm2pC+qOv8T3AeZnr3S
LQUGWzmGRRfMtF9WfmxkhjtAvYQIpOW9AQIGHev0sOM6iY3tvgcrXJVMUKgni32Q
0e3/AdnEC2DadSA9XM+1MrSDSpCNvIrybFycJE7xcSFVkkZKrDg+kSX2I7D/csBv
6kqWEHTS2i1IEi04kDdu2HXylW+He7SN9sFUnppMznVPGWNI8RBiVYVX7fzdfZCN
ZH5XfgJBzrGSTtcxvLAORNBwlKdTM8RGAUL/53VEisBTpYWthQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP57zvOH+Ofuy04t/uHPb3f3BZ9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjZhNjE3ZDItYWQ3OC0z
Mjg3LWIzZGQtYWUzNjkzMzg2ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxtPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbS5mMnSq4jG1O6jkfonD+YkCOJWPwPo7ToYJeTeKQQeKoN98Q5V+ow
ICkUCiT0fNS3SCBscd+Q81+aoAJoWvNHuRemxVPAuE50pzntbx0rKmX6QRihksid
jWxRpCDhQtL7DfJBPqIN2+h7LtcbVxT1+GDmKe0UvISDu42VHQNuBTtE+FqrygFJ
BLASogukolT14erdrCDXV+7VQVTjwJuhKm93qI2KKxrzfIHHequIyNgoCOTO/ebA
1tb8OvqUxJdrqs2/1TKYYBmTNM8QsUaqQIcou3KryqbaPsamsigHhoQq1DLmV7q9
C0FDpkHonrWqPRxDu2zEy38L+VhI9U8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:26 2025 by rpki-client