Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39bad6f2-f8fd-36b7-a7a5-463b5a12f2c6.roa
File: 39bad6f2-f8fd-36b7-a7a5-463b5a12f2c6.roa (raw, json)
Hash identifier: 6jO3OfQkgZHzzKlvQQnsHZ75jC80ZJzE9rpk2ZD3RD4=
Subject key identifier: CE:84:F5:D1:B0:98:4D:E3:5F:BD:3A:E2:DD:69:A6:71:4A:44:0F:C3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F273D7A42AFBE25FC38B600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39bad6f2-f8fd-36b7-a7a5-463b5a12f2c6.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 63.254.144.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:27:3d:7a:42:af:be:25:fc:38:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=72f09bb2-81f3-417b-972b-df99c3c6cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:cc:c6:73:16:68:e3:37:45:c7:f2:da:84:
67:24:b1:c8:3e:28:a8:cc:40:77:95:c7:ff:80:69:
25:57:87:82:2d:a8:d9:4a:49:3e:58:e8:90:cd:0c:
6b:52:e7:b7:2f:49:af:23:b2:e2:d4:b2:de:63:4a:
a0:0d:bd:27:b5:a4:a8:9f:c0:7a:d1:cd:28:d9:37:
7f:f6:11:42:b6:6e:e3:c1:2a:ca:42:9f:90:6e:3f:
7f:5c:b6:41:f2:b1:08:34:fd:f7:66:87:d2:ba:55:
40:f8:18:1d:a2:36:b1:8c:29:29:44:0b:2e:44:f1:
be:1b:a0:31:1a:b7:dd:33:4c:24:90:d1:a5:12:2e:
c1:87:ba:1e:a9:17:d3:76:fd:07:0d:29:aa:f3:1b:
a9:c4:9e:77:c1:4f:3a:5e:1e:1c:e5:64:4e:a1:29:
f9:6a:b3:b4:a2:55:17:1e:b8:09:21:68:d9:c7:3e:
47:bd:49:b6:47:99:06:68:27:d1:ee:e0:f2:57:c7:
93:88:07:75:ed:06:3d:07:a2:a5:58:5c:64:5b:d9:
63:bb:53:cf:e7:db:bc:40:fa:d3:6b:75:fa:c3:a6:
9f:89:41:4b:2b:2a:f2:3d:85:a6:d6:f4:53:17:fb:
08:32:93:ad:16:a6:61:e1:88:b4:65:10:62:95:7a:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:F5:D1:B0:98:4D:E3:5F:BD:3A:E2:DD:69:A6:71:4A:44:0F:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39bad6f2-f8fd-36b7-a7a5-463b5a12f2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.254.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:14:56:10:84:0c:ba:a0:3e:07:f7:13:a7:dc:e8:fd:b1:26:
4b:2c:37:90:52:1a:de:8a:e0:f2:e9:47:67:23:d7:60:e9:3c:
ec:bc:da:00:2b:9e:87:65:d1:5f:d8:cc:e2:12:20:ae:c3:1d:
33:06:e9:4c:e5:47:8e:02:48:45:19:10:3e:08:d1:9a:78:a0:
33:ac:65:27:af:22:27:3c:a4:fe:ca:a9:b7:dd:f5:d1:51:11:
3d:22:81:00:ac:a7:26:bb:bc:94:44:33:56:db:c5:c3:69:3b:
a8:dc:88:d2:29:ed:39:78:b7:92:4a:8c:30:3c:f5:fe:89:de:
66:2c:74:6c:a0:9b:bc:8e:bb:98:b1:ea:1d:5b:17:d8:49:c3:
11:40:65:cd:7e:d0:29:ce:f3:55:08:36:78:40:78:e6:2b:47:
db:34:4e:d7:20:4a:ef:6d:23:a6:33:db:92:3f:a7:0e:3f:d8:
c4:19:06:9d:e9:32:f6:11:6c:c3:62:f8:10:dd:34:ac:3d:ea:
d4:91:9a:46:d5:dc:2f:1c:b8:06:60:78:aa:84:19:a6:86:e7:
cd:2b:5e:ae:1c:83:85:c8:04:ef:f1:d6:dc:d5:5c:fc:58:53:
6a:7e:33:1b:b5:bf:f3:13:fe:0c:81:14:f5:ee:9d:7b:d5:6e:
8d:fa:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:48 2025 by rpki-client