Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28d925bf-bd9b-3064-bcec-a15a9a203374.roa
File: 28d925bf-bd9b-3064-bcec-a15a9a203374.roa (raw, json)
Hash identifier: Q89+TJvBRqmD8PMRt5ItAvZc/6BDSft8vL77edLs/60=
Subject key identifier: B0:0F:C0:42:BD:39:D2:EE:67:65:B8:75:C2:ED:58:13:92:FD:BD:53
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F3B67C7FD64570EFD112D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28d925bf-bd9b-3064-bcec-a15a9a203374.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 66.152.0.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:3b:67:c7:fd:64:57:0e:fd:11:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=d6261964-0f31-49ce-9e08-e2cd12cf41ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:3e:86:7f:8e:07:3f:db:43:15:7a:e9:4d:
b6:09:98:e6:87:33:7d:ea:ac:99:fc:6e:ab:b0:b8:
ff:5b:86:09:03:3a:d8:8b:4a:88:8c:e5:77:78:e1:
a8:a2:43:37:d6:b7:e7:30:8f:6d:ef:a0:6d:ec:2f:
ad:0d:02:18:c0:1f:c6:b5:12:2d:01:fa:db:ce:d6:
ea:1e:a1:bb:87:e6:3b:23:00:41:ee:df:f6:d5:e5:
f6:20:35:97:a8:ec:d3:67:3a:42:74:86:b3:65:3a:
0b:89:da:6f:33:52:31:5a:8d:78:c8:4c:c9:59:f1:
f9:22:dc:2e:ac:5a:eb:85:72:85:26:d4:f4:34:a7:
61:50:d0:81:5c:e5:06:bf:71:17:95:47:60:ce:62:
c4:a4:49:24:bf:95:0e:f7:8b:80:5a:cd:54:33:a6:
11:bf:0b:6f:68:ec:68:ee:19:7e:0d:d5:c5:36:74:
22:83:70:50:84:e7:ec:12:a0:02:7f:f9:eb:e5:91:
c3:ef:c0:08:2b:ab:6b:5b:1d:cf:d8:4c:b8:4f:2f:
90:c9:2a:81:32:7a:00:a6:d3:be:96:2f:56:d7:e9:
84:a2:a2:5e:33:9c:90:5c:bb:84:c4:ab:20:28:50:
7f:64:74:16:3c:8e:05:d1:dd:c0:5a:23:0a:0b:cf:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:C0:42:BD:39:D2:EE:67:65:B8:75:C2:ED:58:13:92:FD:BD:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28d925bf-bd9b-3064-bcec-a15a9a203374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.152.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a6:3d:1a:77:e9:92:3a:02:63:a1:3f:02:41:25:7b:f7:19:
53:3d:d3:a4:4d:9b:53:31:36:ed:e5:0d:5b:6f:7f:c5:9c:f7:
b3:a7:5d:02:45:22:7c:a6:a5:3d:4d:81:cb:dc:bb:65:94:e4:
ac:b0:a3:fc:c7:66:d1:d8:e0:05:2b:6e:0e:33:78:eb:eb:c4:
07:96:8f:ba:2f:bf:63:bb:7a:46:c9:9c:1b:73:9a:6a:14:17:
f0:74:cb:7a:6e:45:6c:4c:b5:94:52:ea:85:32:2f:d6:27:15:
b9:03:81:8c:d8:0d:42:35:1f:50:78:cd:d0:d8:74:b2:15:76:
46:06:46:a6:21:9f:7e:b3:78:7e:21:3e:b3:38:55:02:6e:ac:
94:10:ad:19:af:92:04:f9:01:6a:d4:ba:b7:62:d6:17:a8:03:
4d:44:51:57:5c:25:3e:9f:c7:da:06:31:7c:c7:2e:d5:c3:51:
d8:f1:83:bb:0c:fa:4e:99:c5:c7:4f:f0:67:3f:76:2b:67:48:
7e:cd:1e:b4:5b:2a:54:bb:c4:25:ad:9e:90:c8:25:90:2b:11:
22:9e:cb:57:43:7f:fe:20:de:45:cb:af:a5:ad:6c:86:04:4e:
79:c9:27:f8:2e:40:e2:3f:d5:2e:05:61:c9:f7:51:ea:e4:6c:
79:ce:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:52 2025 by rpki-client