Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3293aa71-121a-3dcf-bd5e-c9f5acf4c520.roa
File: 3293aa71-121a-3dcf-bd5e-c9f5acf4c520.roa (raw, json)
Hash identifier: DD0Pxpya+0XGPofG3T3rveqBYBMKqWg/+t/RnvArBn4=
Subject key identifier: 40:3E:4A:78:2A:B4:D3:C3:69:FF:0F:08:7D:47:86:ED:55:F3:55:C8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FAD21FC47662E0AF474DB2C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3293aa71-121a-3dcf-bd5e-c9f5acf4c520.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.128.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ad:21:fc:47:66:2e:0a:f4:74:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=dd01ceaf-a791-404d-84d3-0e93ff714ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:ce:b0:3d:10:f0:2d:8f:a4:d9:2e:07:b5:
56:94:7a:a4:5b:da:81:67:96:ef:73:5a:16:37:41:
09:da:c8:75:8c:5f:96:92:80:92:70:67:2d:12:fd:
94:fd:4c:ba:ba:56:1b:fb:75:97:e8:85:89:3c:ee:
99:ae:dc:1e:41:05:e8:39:af:00:5f:87:fd:26:3a:
4d:39:ec:0f:14:12:8c:09:b0:1d:97:84:b2:95:17:
2d:c4:99:56:5f:e0:b8:ee:58:fa:e1:a0:18:13:3e:
3e:7e:31:4f:cf:d4:66:fe:43:d6:2e:ed:d5:fc:6e:
89:d4:93:e9:be:bd:15:11:45:d2:8e:18:16:cd:4f:
0e:1c:69:c7:e9:14:d1:a0:da:ea:dd:83:9e:1a:4d:
2c:47:ca:f3:76:e6:a7:0d:13:01:b9:b0:62:48:cc:
78:5f:65:aa:98:a6:35:85:0d:d5:93:16:d0:c3:84:
f4:f5:59:2a:eb:9a:c6:b6:18:dc:3e:47:a1:f7:02:
60:56:a6:7e:e6:31:95:50:e0:08:de:5a:f8:54:24:
54:20:e3:1c:4f:51:a4:45:e1:0d:4d:32:76:fb:f8:
73:f0:cc:db:a9:93:bf:26:3a:70:fc:e6:01:d4:ef:
9e:b8:ef:59:b2:5a:d3:96:90:00:28:37:7d:28:d4:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:4A:78:2A:B4:D3:C3:69:FF:0F:08:7D:47:86:ED:55:F3:55:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3293aa71-121a-3dcf-bd5e-c9f5acf4c520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c8:12:9c:08:b0:c0:c9:3f:f5:cd:42:bf:28:a6:49:dd:45:
d9:9b:2f:5d:75:6b:0b:2b:b9:75:fc:92:7c:0d:d3:90:41:07:
83:56:c7:4b:17:52:0b:2f:d1:fd:82:b2:8b:0d:33:e2:99:d4:
fc:51:38:e0:11:c9:d3:54:59:40:8d:d8:ac:82:24:c2:f6:f1:
72:ea:76:b0:35:a9:f9:6b:64:30:66:e8:e6:6d:b2:b5:d6:b4:
7d:f6:90:02:de:cf:a1:25:73:31:59:f9:b2:69:dc:c6:ef:d0:
ed:04:e5:a2:aa:00:a5:17:0e:ab:a7:c7:a4:3e:67:88:8e:c1:
10:24:f2:99:2c:c7:e2:ca:e8:cf:a9:4a:30:1a:63:86:f2:ea:
37:1a:76:0e:41:04:b6:5e:d3:17:90:86:75:e6:0f:70:07:72:
c1:a2:d7:77:e6:5b:32:08:0b:57:1c:31:fc:ed:2c:5e:2a:0b:
e4:2e:d6:76:47:12:83:4e:b1:bd:5d:ac:92:83:63:c3:91:56:
e9:56:9e:67:16:71:c0:b4:4a:64:dc:24:4c:45:f8:fe:05:3f:
89:6f:e3:26:dc:8f:9d:e8:3a:64:bf:7b:39:16:70:a1:f0:5c:
20:28:8c:26:c6:f0:b4:57:72:b9:38:8a:89:95:5b:81:06:0f:
26:07:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:14 2025 by rpki-client