Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/394443d0-03c6-3c6c-a739-ef0a66a2065b.roa
File: 394443d0-03c6-3c6c-a739-ef0a66a2065b.roa (raw, json)
Hash identifier: P9f79F7Dvw9fUTMumv7NsizQLsUpe1XK4lmh0wmolEk=
Subject key identifier: FE:A8:8E:83:DA:E3:8C:CE:6B:B1:E2:85:F2:9E:71:43:CE:40:6C:C1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332E27D3EAE49461373B800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/394443d0-03c6-3c6c-a739-ef0a66a2065b.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 66.47.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:e2:7d:3e:ae:49:46:13:73:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=477fbd30-0e34-43f9-ae8b-2656d873bac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:83:9e:53:c1:fd:f0:a4:89:e9:e6:ed:fb:
17:f4:43:71:b5:6e:b0:19:fb:c3:35:de:72:55:3a:
4a:2d:2f:a4:31:a3:10:4a:d2:6a:b1:fd:cf:5c:86:
24:48:b5:26:e9:cf:d8:6f:ea:3e:01:70:74:89:18:
a0:8d:6d:a6:8b:38:57:f0:01:0d:ab:4e:c7:fa:ff:
40:40:9f:50:4d:c8:6d:0e:93:95:53:f9:f1:aa:3e:
46:da:c6:68:e2:53:5f:3f:13:94:15:78:e0:da:de:
b9:db:10:73:f2:71:f1:54:7a:c9:cb:4a:2f:01:2b:
f2:fe:d3:19:eb:84:1d:fd:e5:be:9c:97:ef:e5:b9:
1a:e2:81:9a:16:bc:e8:2b:12:b1:50:da:ae:10:ef:
be:9e:e6:61:c0:85:f7:e8:6e:4a:40:ef:fe:c4:1d:
f9:ad:e5:cb:e9:55:94:4a:7f:6d:99:15:52:fd:32:
3a:73:2e:e6:91:3d:c4:a1:4e:45:34:f5:36:d7:46:
50:19:99:51:0e:75:4d:32:83:e8:f3:e6:35:44:dd:
59:6a:1a:62:28:23:65:1e:70:b1:73:a2:75:f3:e7:
70:95:59:54:71:9e:ef:8b:2b:49:64:d9:cd:08:af:
ab:6c:20:9b:dc:8c:22:bd:01:4f:6c:63:23:d4:25:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:8E:83:DA:E3:8C:CE:6B:B1:E2:85:F2:9E:71:43:CE:40:6C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/394443d0-03c6-3c6c-a739-ef0a66a2065b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:e0:e9:76:c5:c2:52:09:42:44:d6:ab:9b:e3:e6:7b:93:ca:
ac:d0:2a:4c:bc:c5:89:1f:de:af:87:30:48:01:c0:49:65:60:
7d:54:e0:e7:89:08:18:89:d1:2a:d3:6d:70:14:24:3c:68:fb:
79:de:ae:a1:c8:81:24:70:06:3f:db:58:df:5a:31:53:20:d1:
f5:8c:d4:df:83:de:ac:49:be:13:c9:f4:53:4f:f9:d4:21:ba:
e2:04:51:7e:29:b0:f9:3d:af:cf:ee:01:82:6a:26:cb:4c:88:
5d:fc:50:a3:7f:f3:df:ea:68:2c:7b:b2:99:ae:fb:4d:88:cf:
e1:6e:b6:ec:bc:01:ad:a1:b2:4f:41:10:5b:dc:e2:20:95:81:
06:0a:1e:20:b3:cb:d7:00:59:f5:3e:6b:be:dc:c5:fc:e4:3f:
da:90:d3:40:b7:4f:98:91:bc:31:f4:bb:b3:11:03:73:79:04:
71:c9:ab:3b:a6:73:c8:18:5d:86:53:03:e8:b9:c7:11:d5:31:
ff:83:8d:2e:07:fd:2a:d0:1d:4f:8f:e4:de:bc:f9:5d:c9:1d:
eb:5f:c9:dd:73:be:22:01:cb:5b:38:ea:74:4f:cb:e3:0d:8a:
c5:17:d2:22:23:f1:c9:a5:7f:d5:af:b6:48:6e:19:fb:cc:3a:
55:a1:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:04 2025 by rpki-client