Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e81e19f-3625-368e-a1aa-c883be04ca50.roa
File: 2e81e19f-3625-368e-a1aa-c883be04ca50.roa (raw, json)
Hash identifier: AUqz6EMi/KGAqBBONwgZvUKyQJOd1o6vxsnEYDCZLc4=
Subject key identifier: 1E:94:DB:C3:4B:C6:6A:5D:4A:DF:A5:A6:28:07:24:D8:C4:CE:8D:C1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E08410C3535FCAFC83FE40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e81e19f-3625-368e-a1aa-c883be04ca50.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 209.92.4.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:84:10:c3:53:5f:ca:fc:83:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=ebed6165-0f64-4d4f-8d03-d9a04c8b8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:56:8c:26:65:e6:39:c0:78:f5:3b:0d:79:
84:c9:1e:7b:60:2d:cb:22:78:09:61:a6:ad:b0:c0:
bc:7f:79:b8:d4:89:b3:71:4b:63:b4:59:1a:4f:44:
9c:78:f8:0d:69:03:26:c6:ea:b4:a5:f6:cf:e4:a1:
30:15:68:97:bb:02:d3:fe:70:54:27:29:8a:c2:d8:
7b:93:a7:14:7e:e4:8f:3b:3e:2a:dc:d8:8f:16:68:
11:fd:b3:fb:47:c3:27:51:ea:e9:e0:0f:c4:d5:01:
af:c9:4d:c3:a8:50:f5:fc:a9:3e:d1:d1:38:40:2b:
29:e2:63:13:cb:58:15:46:9b:2b:25:39:95:80:d8:
08:69:5d:00:f6:fa:19:3a:e5:51:91:bf:15:46:61:
7a:5c:0c:a6:5f:76:22:6f:b5:33:54:b3:99:1c:1e:
93:64:62:99:9e:9a:6d:5e:66:9e:1d:47:50:15:67:
c6:24:89:71:88:d3:ff:54:02:ee:d4:fb:97:ba:e3:
ae:dc:ab:e1:26:00:a1:a5:50:c2:f6:ab:d6:59:ff:
76:ef:02:14:90:6e:4b:29:46:0b:78:f3:92:9b:4d:
ae:1c:8d:09:57:e2:9b:d8:6c:0c:1d:27:d9:16:3a:
86:45:5a:c0:51:10:c7:bf:4b:81:6d:60:cf:4e:f7:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:DB:C3:4B:C6:6A:5D:4A:DF:A5:A6:28:07:24:D8:C4:CE:8D:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e81e19f-3625-368e-a1aa-c883be04ca50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:cf:52:d0:f5:a2:ed:8a:7a:a2:e1:a1:dc:72:0e:6a:68:37:
47:06:dc:b7:5a:eb:5b:56:28:99:bf:f6:a0:12:02:9f:3d:fc:
dc:28:6b:7f:9d:12:6c:76:81:2f:73:7c:ce:e6:c3:86:bc:4d:
b5:e3:12:b6:21:6d:e2:11:71:c3:63:a7:5c:3f:bb:d4:34:99:
08:4e:ee:56:e7:58:56:d0:0e:1c:ad:89:68:19:49:4e:2c:d2:
fc:2e:41:20:a1:ca:f6:24:d1:4c:ad:4e:d2:db:2b:b3:84:43:
05:c1:65:c0:98:c2:15:aa:73:c3:74:c8:3f:17:f1:4d:e5:29:
99:26:4b:a7:a8:38:26:21:2b:7b:c0:e4:76:19:c7:b8:eb:8c:
50:d8:e2:49:5b:72:38:c1:e2:44:f2:0c:ac:d9:cd:61:54:45:
02:26:82:45:3f:27:b2:b6:eb:66:8f:9e:79:fa:f1:ef:d5:e6:
85:4a:84:2d:c2:86:56:fa:98:e7:e4:53:cb:91:27:17:69:d8:
99:0c:4b:e8:4e:56:ca:b0:66:2d:10:be:03:25:4a:4f:3f:53:
12:8b:1a:36:bd:ea:74:d7:49:f1:82:ee:cb:df:1f:13:f3:83:
d7:96:19:fe:23:17:c5:0c:dc:91:9c:dc:fb:0b:a2:c6:96:8e:
3c:e5:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:01:01 2025 by rpki-client