Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e1c9285-bd76-38eb-a302-d118ac46bde7.roa
File: 3e1c9285-bd76-38eb-a302-d118ac46bde7.roa (raw, json)
Hash identifier: G9G7SYIO7NlOFY8yM9nj2J8GdzU30FuY+vcfGFgRanI=
Subject key identifier: 19:42:B1:0F:63:86:88:25:49:E0:78:19:EF:F5:FE:FC:40:AF:79:AD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551D5EC4BE4AA6E233827A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e1c9285-bd76-38eb-a302-d118ac46bde7.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 198.211.64.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1d:5e:c4:be:4a:a6:e2:33:82:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=ae195e1d-b31e-4ba2-9261-04f12a1adeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:eb:1a:a8:4d:95:e9:f8:cf:da:a6:45:74:
e9:d0:be:5a:f0:2c:55:ef:b2:ea:04:5c:e7:7c:fe:
7c:ad:3d:96:2f:f3:b4:16:2c:3d:de:29:e8:e5:b8:
f5:0f:94:2f:db:58:17:55:c8:a1:ed:b0:f6:8d:8d:
a4:60:91:91:dd:f9:5e:a0:48:6d:a3:ac:12:17:5d:
2c:28:01:1a:c6:48:28:0b:e6:68:de:fb:e5:0a:d2:
3a:1b:39:74:c0:49:02:19:76:af:10:e6:57:59:1c:
ad:c8:a9:d1:bb:09:af:41:1a:10:02:6f:76:6c:55:
a9:19:68:82:3f:cb:35:c7:d0:65:01:6d:d5:da:c4:
6a:b2:90:4b:14:89:43:13:96:fc:f2:8c:dd:b1:49:
a1:b9:a8:e6:f1:fe:4d:45:b4:77:05:2f:c2:3d:c9:
03:10:c5:c6:e0:11:73:ff:42:b3:6b:9c:ae:ec:d8:
80:87:7a:ce:6e:3d:ff:2b:f0:1d:c4:4b:50:8b:d6:
50:52:37:27:09:df:b5:f3:84:f2:45:7e:aa:16:c2:
5b:9c:f9:f4:51:b9:db:05:9e:7a:48:7d:6d:da:9b:
96:76:43:78:cd:63:3f:4d:da:b3:3e:3f:bc:82:be:
6d:bb:4d:78:f6:4a:f5:86:ba:65:c7:63:21:37:04:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:B1:0F:63:86:88:25:49:E0:78:19:EF:F5:FE:FC:40:AF:79:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e1c9285-bd76-38eb-a302-d118ac46bde7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.211.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:bb:7b:1d:31:49:3f:e9:68:41:57:03:23:f8:7c:8b:b4:09:
76:4a:3c:48:92:21:59:72:31:77:c7:3e:9d:c0:23:42:ed:bf:
bf:67:a1:09:23:33:a5:a4:b7:3f:75:34:4b:57:12:55:fc:9b:
68:52:45:1e:f5:94:01:59:c8:f0:0f:8e:6d:f8:59:be:c4:c9:
93:ed:70:38:9d:4d:b3:b8:3c:2f:96:1e:db:f4:5f:04:d1:8f:
58:0b:23:ec:8d:b2:7b:18:d7:14:2f:63:bb:ae:8d:37:03:37:
82:fb:47:1c:ac:ed:be:68:a1:2e:b0:48:54:20:03:e8:ed:9b:
74:b4:77:ce:fa:9f:91:68:56:16:c9:a0:fe:8c:a7:06:3f:2c:
ee:69:be:26:95:3c:52:53:00:76:94:19:78:0b:0f:2d:55:8d:
e9:0a:81:69:4a:e4:0b:35:53:06:64:43:56:fb:0f:d1:06:74:
b5:7c:30:35:a9:22:88:12:46:43:54:d0:2d:20:86:1e:65:49:
76:71:b3:23:16:68:32:8c:5e:95:59:16:2e:f8:20:2f:37:c1:
0f:89:a2:c7:db:23:55:d9:12:9a:cd:03:f5:87:79:7a:d1:7f:
3e:27:08:9b:91:0e:99:f0:1e:3f:5b:a7:c3:13:b5:c7:16:ef:
0e:4a:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:00 2025 by rpki-client