Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34d192c2-37d5-32d6-bca8-fc0f9d454d5a.roa
File: 34d192c2-37d5-32d6-bca8-fc0f9d454d5a.roa (raw, json)
Hash identifier: JpsA22q4sgxh+MnlzFs0gd3aXwHcD0enBzbBoPZN2oo=
Subject key identifier: C0:94:27:D6:7D:82:3D:31:65:2E:8A:51:BB:C2:7A:5A:92:80:BD:9E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551B3BB5459456F88210D980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34d192c2-37d5-32d6-bca8-fc0f9d454d5a.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 74.221.240.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1b:3b:b5:45:94:56:f8:82:10:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=c7ee86c7-5bd1-49af-9baf-d3198eef5b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:fb:ab:8d:ab:5d:0e:ca:6f:a3:c4:b1:0e:
c8:46:75:33:2e:54:59:52:41:28:5a:17:e3:c7:4a:
4d:61:a4:63:d2:9b:b7:ad:46:8d:38:03:95:73:77:
09:7e:6e:93:5f:db:24:bd:bd:24:6b:bf:8a:a5:e8:
9c:a0:9c:1f:d8:3b:4f:b4:69:97:62:31:61:dd:c4:
34:e8:f2:79:76:14:83:e3:4c:53:68:77:b5:aa:ad:
a7:de:a9:2c:56:19:84:30:34:9d:e4:15:90:2c:87:
95:89:7d:e9:a6:2a:ef:3b:72:e3:56:ab:db:5b:8f:
e8:93:22:df:b1:51:67:8d:c4:83:2e:eb:b0:69:6b:
91:c3:78:bc:45:47:7f:36:94:06:ea:06:86:dd:6b:
16:92:1c:e1:91:68:0b:9e:df:58:d2:ce:dc:6c:cf:
79:e9:f7:98:eb:54:b9:a6:5c:3b:0e:97:fb:dc:e0:
74:45:cf:3c:62:ba:52:7b:ee:c6:be:84:62:b3:22:
65:13:45:23:aa:14:1e:0b:39:31:15:87:3a:39:53:
45:42:31:9a:f9:66:af:e0:b9:0e:19:17:fd:0b:7e:
1e:50:c7:c5:20:36:92:6b:8e:8b:1c:66:7c:a4:e0:
8c:9c:ee:28:79:58:0c:9e:0a:a9:87:0e:fd:27:68:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:27:D6:7D:82:3D:31:65:2E:8A:51:BB:C2:7A:5A:92:80:BD:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34d192c2-37d5-32d6-bca8-fc0f9d454d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:20:fe:4a:20:97:94:82:a5:8f:44:30:1b:f6:1d:bc:4c:7e:
65:06:c8:64:43:dc:12:e8:9e:64:7d:01:c2:2f:a7:11:b4:f2:
b2:62:09:53:9d:9a:97:63:48:a0:23:0c:bf:07:a6:af:a1:73:
77:76:e0:d7:29:e1:3f:d3:03:fa:29:ff:7d:ed:33:cd:c6:0e:
86:89:ad:f4:73:24:2b:86:52:38:9a:ee:9f:4e:7a:38:44:3e:
e1:a9:de:17:7f:28:66:bd:2b:e7:f2:cc:05:1c:bd:2d:87:d5:
bf:27:90:32:91:6f:67:3a:08:9e:33:eb:b8:74:29:e4:8e:1f:
7d:fd:28:27:ef:ef:f0:9e:95:cc:e6:ef:a7:ad:1f:c2:3f:08:
9d:88:63:a9:69:fb:97:a2:b7:07:41:1d:c4:88:86:97:fb:b1:
c8:be:9d:dd:31:57:48:81:4d:9e:7b:39:34:83:39:57:ee:fd:
58:65:5f:fc:36:b2:71:f2:83:58:0d:8c:1b:00:52:b9:4a:32:
39:87:d8:f7:0b:2a:c9:9f:88:39:1b:d5:34:5f:4b:16:62:46:
ec:5e:0e:81:80:e6:c2:3c:73:10:84:6e:14:d1:7e:ad:cb:a3:
f8:10:ad:40:58:51:a7:f1:9f:6c:5c:76:38:8a:9c:ab:66:7f:
9e:e7:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:37 2025 by rpki-client