Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e9c64b6-2515-3d3d-8332-789d2d6cfcbc.roa
File: 3e9c64b6-2515-3d3d-8332-789d2d6cfcbc.roa (raw, json)
Hash identifier: 8OsPbSQVy4mwTNFxnX/W1U6aJrClqQPPty9vSp6rqHM=
Subject key identifier: B4:75:8A:A0:BB:92:E7:8C:32:13:60:F8:92:90:F4:4A:61:41:9E:79
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15537FECE1D19F4CEDFAB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e9c64b6-2515-3d3d-8332-789d2d6cfcbc.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 174.141.0.0/17 maxlen: 17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:37:fe:ce:1d:19:f4:ce:df:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=616d81f1-9c61-4416-96d3-442f2f4548e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6a:87:8a:c7:eb:32:bd:1c:8c:5f:e7:fe:54:
cc:91:43:4a:63:d9:bc:b4:ff:ba:7f:07:1b:0d:02:
a4:3b:00:86:2b:6b:24:c3:5b:35:c6:99:31:db:32:
e1:a2:89:07:2a:b3:8e:42:fb:4c:06:a2:0d:f3:9f:
f6:99:7f:3b:de:f2:ba:7b:91:87:9e:81:89:0c:04:
fa:4f:a5:84:0e:15:90:3b:6f:aa:d8:34:bf:99:b3:
63:7d:b2:5f:91:c4:19:d5:6f:cd:39:2c:81:6e:ec:
d8:2d:6d:9e:a0:e7:b9:de:1a:1d:8b:b0:88:e6:09:
78:2f:01:04:54:8b:bb:55:f1:db:24:c8:4c:e4:09:
ae:45:3f:b0:6a:46:6d:60:ed:c1:b2:c6:97:c4:af:
56:6f:c2:41:f9:4c:b3:d4:87:63:7a:d6:7b:0f:37:
63:e8:24:48:72:02:af:55:eb:14:05:a7:42:80:dd:
85:4e:69:44:c6:1a:27:d9:28:e3:05:f3:93:a8:4f:
1e:3e:53:88:27:a3:fc:6a:49:e8:29:0f:89:5e:c6:
e2:ca:5f:2b:31:d9:16:f4:b2:dc:07:04:4c:88:aa:
72:f8:b1:3f:1f:63:b3:9a:51:af:49:11:98:d2:27:
06:9e:89:f2:d6:1b:47:2c:c3:60:2d:00:56:5b:d6:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:8A:A0:BB:92:E7:8C:32:13:60:F8:92:90:F4:4A:61:41:9E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e9c64b6-2515-3d3d-8332-789d2d6cfcbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.141.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:15:cc:c7:c9:17:5c:c2:00:53:75:c4:32:02:a5:92:09:17:
07:cc:f2:0b:2f:f9:69:1f:3b:2a:d7:b5:79:e5:d8:55:9a:f5:
13:0a:ad:f8:5e:6c:11:d3:4a:d0:03:8f:88:d9:e8:17:59:6f:
77:9f:20:6e:0f:e9:58:41:38:0b:a5:4a:9c:7b:53:63:a1:1e:
3f:c0:f6:8c:7b:d9:26:fd:1d:34:02:5c:6c:bf:4d:23:e8:b7:
c4:df:e1:7b:c2:43:cc:2a:98:5d:63:33:46:e6:20:9a:45:a8:
ca:41:45:c9:be:cb:b4:50:f8:2b:4e:7f:6a:66:26:c9:28:8d:
d1:64:95:0e:1c:77:dc:87:f6:c4:42:63:a8:ae:1d:03:fc:7e:
a4:4c:ca:f0:3b:82:1e:b2:18:1b:1b:a1:6c:8a:11:70:10:0c:
2d:48:10:e1:42:6b:1d:49:84:c6:ae:3b:1e:63:87:29:ac:73:
08:78:72:38:1b:95:50:d8:f3:e3:e9:f3:48:e1:40:1e:89:6c:
95:cf:c4:35:86:f7:87:5b:bb:91:97:95:f1:60:c1:14:83:57:
e5:0c:0a:cc:eb:69:ce:46:3d:f9:3d:0a:6a:15:31:47:3d:33:
c2:a9:52:bd:83:57:cf:e3:6c:c9:4b:28:dd:66:7d:0a:a6:55:
f2:20:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:39 2025 by rpki-client