Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fdba80c-130c-337b-adc3-6431dc172ca1.roa
File: 3fdba80c-130c-337b-adc3-6431dc172ca1.roa (raw, json)
Hash identifier: MPCQi+V5Az3ccchLwwQYeGuW3AcLDQHOvpH+UDdZ2zU=
Subject key identifier: 20:92:62:32:D1:0F:A8:38:F1:D4:9F:77:01:FC:47:D1:1B:4E:CF:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F5A39EC3EFC29FFAF069400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fdba80c-130c-337b-adc3-6431dc172ca1.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 204.30.32.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:5a:39:ec:3e:fc:29:ff:af:06:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=f8b31b15-395e-40c0-b6f0-6c808819fec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:9e:a3:eb:ec:11:07:d1:14:b0:5c:80:57:
98:ee:b7:7a:e3:a4:ca:65:8e:df:73:07:85:b1:4e:
93:8d:3e:4e:60:e2:81:e6:95:83:f4:18:39:a6:e4:
50:f5:63:dd:98:16:f1:af:fa:a5:69:f3:dd:55:c0:
ce:fc:a7:c0:d1:cf:38:4b:28:2d:6d:3b:59:80:63:
9c:a6:b3:0b:c8:2d:bc:2e:60:96:05:66:4a:da:f2:
1e:14:44:65:d5:ff:63:dd:2d:c7:ca:30:6b:d1:c9:
78:06:04:b6:46:6e:84:94:e6:3d:10:9e:54:af:c0:
1b:65:ef:99:d8:82:34:b0:29:54:49:35:22:c7:ed:
55:dd:59:84:17:d4:e1:22:51:ea:63:b7:e2:6f:c0:
17:9c:7d:37:73:42:84:78:0e:7d:95:b9:3a:1d:77:
7e:dd:02:2f:10:ce:bf:ed:68:c6:80:bf:96:a6:c4:
ce:93:c7:6c:44:d2:39:77:a3:65:d9:fd:6b:08:03:
d9:d7:59:b8:f9:6d:c3:96:43:b8:0a:69:16:eb:2f:
bf:fb:e1:57:dc:82:24:18:91:76:52:c5:f2:d1:1c:
e2:f1:0a:d4:1a:9d:09:f9:ba:52:6b:01:8d:53:e7:
1e:95:c8:d3:f1:a6:0a:a9:01:c7:40:66:26:06:32:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:62:32:D1:0F:A8:38:F1:D4:9F:77:01:FC:47:D1:1B:4E:CF:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fdba80c-130c-337b-adc3-6431dc172ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.30.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:de:7c:eb:3d:0b:55:82:74:7e:e1:f0:ef:31:69:56:6d:13:
fc:83:92:73:7c:2b:6c:ef:96:fb:6a:fb:02:85:66:2e:e1:ff:
ab:31:2b:42:71:2d:0f:2a:00:dc:52:0f:66:af:69:62:15:54:
ab:c0:20:45:ea:0c:39:a3:40:ca:4a:aa:fd:ef:67:c4:fe:9f:
f2:92:c1:ce:70:71:a7:34:6e:c4:43:2c:45:19:fc:d4:2a:93:
6d:8c:5a:a5:d3:a6:cf:a5:5f:a3:01:81:07:44:4e:fd:8b:51:
c8:8a:ab:06:19:22:de:e8:b7:b7:af:c2:bf:33:df:76:d8:14:
ec:99:ec:e2:70:e1:26:2e:4e:bd:9c:79:b3:53:9b:48:24:bf:
6a:94:2b:7b:ca:ba:26:1b:ab:cd:61:e6:da:cc:62:90:22:a6:
33:00:75:7c:a5:ed:76:68:8a:eb:69:b8:2a:ff:68:66:64:02:
b2:6a:8a:e5:ec:cb:3f:00:a9:c9:47:46:85:d9:c5:9e:a1:25:
49:cd:f4:2d:86:3e:bf:f1:eb:8c:99:cb:0b:28:71:17:0b:a5:
22:e6:d1:75:76:d4:a8:4f:9d:67:3e:98:7f:f6:70:fa:e8:c9:
c4:64:d9:8e:80:ca:e5:be:9f:e5:5e:de:b3:c3:93:82:ab:f5:
c5:1c:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:37 2025 by rpki-client