Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4af855e9-148b-31c3-b046-0d869777ec3e.roa
File: 4af855e9-148b-31c3-b046-0d869777ec3e.roa (raw, json)
Hash identifier: PcUEyeA9CHaDs9/gXRHIjCSKIocTq5iT/Yl3yt5gU/Q=
Subject key identifier: 9F:18:2A:19:B8:1D:7B:B4:FD:A8:1F:E2:89:8A:43:1C:83:86:29:73
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FB469B8B9D7027AD7BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4af855e9-148b-31c3-b046-0d869777ec3e.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 70.46.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fb:46:9b:8b:9d:70:27:ad:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=516198a1-3bc8-46a1-8e4b-85930312b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:49:8a:10:24:f5:a3:83:86:bc:da:21:0f:
8a:cd:68:14:21:df:5f:3c:fe:5e:08:5b:50:4b:6c:
fb:7f:e2:98:d4:d7:5c:37:38:32:36:58:f1:ee:85:
8b:bf:83:c0:d2:36:10:68:51:fb:19:e7:e2:b1:4e:
29:43:52:25:36:6c:cc:d5:95:4a:79:1f:20:25:35:
b8:74:51:57:cd:69:81:b5:cb:d4:a8:a2:89:33:30:
8f:79:2c:8e:2a:93:83:d8:5a:92:d8:d3:9b:80:a8:
c5:d7:ae:83:48:89:c9:4b:8c:03:22:33:1d:7f:ac:
4b:df:5a:14:6f:a3:dd:f8:d6:05:5b:20:0f:5e:ec:
af:56:1b:8c:64:e7:2a:50:77:44:60:8d:fc:43:70:
76:fa:de:1f:c0:d7:04:04:c0:b8:a5:71:ce:ea:1f:
79:4b:e0:36:7d:b2:44:e1:96:d8:d0:a3:11:16:8b:
0a:77:b0:71:39:2c:fc:d2:1d:8a:67:1e:3b:a7:2f:
4a:3e:f7:c6:b4:94:18:cf:45:53:7b:af:3e:12:4c:
cd:ce:68:66:f4:7c:0d:6c:ec:6f:54:a6:4a:b6:a6:
62:11:6a:bb:d8:4b:3e:65:8b:ff:ad:a4:de:b2:8a:
5b:0f:ad:7e:f8:e6:64:68:06:a2:d9:fc:82:92:86:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:2A:19:B8:1D:7B:B4:FD:A8:1F:E2:89:8A:43:1C:83:86:29:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4af855e9-148b-31c3-b046-0d869777ec3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
70.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2e:45:be:eb:34:18:f1:86:94:54:17:96:e1:95:1e:ca:96:
df:f8:d3:96:f8:8b:b6:ef:74:71:72:e4:1a:31:94:19:38:52:
d8:5a:4e:c5:60:5b:bc:d2:cf:a6:e3:2d:ea:b1:26:9f:29:47:
a8:d6:f6:73:a6:b7:78:82:c8:2f:e6:95:c8:c3:10:16:2d:2c:
b4:4f:80:6d:0e:97:9c:d6:a1:4a:87:7b:5e:86:5b:2b:52:e5:
27:ae:6e:be:d4:71:74:54:83:15:eb:7e:16:2a:09:72:6f:93:
d5:ec:06:75:50:ad:64:fb:19:5b:26:5c:4c:57:c3:b0:10:57:
a2:6d:4f:11:f2:95:52:2d:39:15:9e:ac:a2:82:93:98:88:95:
24:de:25:51:6e:38:e1:6b:b1:07:13:92:74:19:b6:ca:5c:c6:
bb:18:6a:64:e9:b0:52:48:d5:3f:a7:49:90:cd:b5:96:71:1f:
d6:c9:da:3f:07:67:bc:ce:f5:c9:4f:52:55:77:91:3e:19:9e:
da:a5:a9:8a:06:a2:6b:47:df:18:f0:a5:4a:fc:2e:73:15:69:
41:69:61:a0:9c:28:85:cf:75:57:4d:3e:e6:6d:4d:ce:b4:6a:
73:d4:dc:cd:14:c7:a8:f7:bf:bb:b3:6f:62:1c:ba:58:69:e6:
b7:c5:52:70
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVPtGm4udcCete8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
NTE2MTk4YTEtM2JjOC00NmExLThlNGItODU5MzAzMTJiNDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijBJihAk9aODhrzaIQ+KzWgUId9fPP5eCFtQ
S2z7f+KY1NdcNzgyNljx7oWLv4PA0jYQaFH7GefisU4pQ1IlNmzM1ZVKeR8gJTW4
dFFXzWmBtcvUqKKJMzCPeSyOKpOD2FqS2NObgKjF166DSInJS4wDIjMdf6xL31oU
b6Pd+NYFWyAPXuyvVhuMZOcqUHdEYI38Q3B2+t4fwNcEBMC4pXHO6h95S+A2fbJE
4ZbY0KMRFosKd7BxOSz80h2KZx47py9KPvfGtJQYz0VTe68+EkzNzmhm9HwNbOxv
VKZKtqZiEWq72Es+ZYv/raTesopbD61++OZkaAai2fyCkoZ6JwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ8YKhm4HXu0/agf4omKQxyDhilzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGFmODU1ZTktMTQ4Yi0z
MWMzLWIwNDYtMGQ4Njk3NzdlYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARi4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIy5Fvus0GPGGlFQXluGVHsqW3/jTlviLtu90cXLkGjGUGThS2FpOxWBb
vNLPpuMt6rEmnylHqNb2c6a3eILIL+aVyMMQFi0stE+AbQ6XnNahSod7XoZbK1Ll
J65uvtRxdFSDFet+FioJcm+T1ewGdVCtZPsZWyZcTFfDsBBXom1PEfKVUi05FZ6s
ooKTmIiVJN4lUW444WuxBxOSdBm2ylzGuxhqZOmwUkjVP6dJkM21lnEf1snaPwdn
vM71yU9SVXeRPhme2qWpigaia0ffGPClSvwucxVpQWlhoJwohc91V00+5m1NzrRq
c9TczRTHqPe/u7NvYhy6WGnmt8VScA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:26 2025 by rpki-client