Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f2b576d-71c8-3d04-b736-bb4a4be03aea.roa
File: 4f2b576d-71c8-3d04-b736-bb4a4be03aea.roa (raw, json)
Hash identifier: 0MVS6e8HDmAUpAw+LKLFP38PSycd2JzSq5AiLy7iUrI=
Subject key identifier: FA:DC:67:6F:D8:74:38:C8:9F:DA:90:0A:33:3B:A9:36:68:1A:C0:5E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F356DCA2FB909421CD02040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f2b576d-71c8-3d04-b736-bb4a4be03aea.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 66.7.0.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:35:6d:ca:2f:b9:09:42:1c:d0:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=361a1554-95a8-4ff9-849c-bf0af63218e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:36:24:50:99:d2:c0:88:5e:fc:1a:f0:2d:
3b:d2:c4:c5:48:e1:e9:76:29:42:ff:51:1c:fe:b5:
07:7f:a2:03:92:d5:e6:1c:24:92:32:5c:75:39:1a:
9a:5c:de:ba:38:12:04:22:d3:8c:0d:d5:d1:c9:f1:
ba:3f:f4:14:ee:cf:0d:a6:6e:0e:ec:a3:7d:24:2c:
8b:91:8c:32:01:99:f8:34:f2:79:1d:e8:b5:69:34:
8a:cd:a0:c2:ea:5a:32:ea:09:a9:5c:5d:db:f0:c4:
4b:69:0a:87:17:92:61:b2:8e:54:9e:b7:04:5f:a5:
87:4e:6f:25:ee:f8:ca:98:d1:b2:5f:70:cc:5c:9f:
d9:f8:2f:ef:77:89:ca:58:4b:9a:3b:d7:a4:c5:c8:
51:8e:f1:3e:49:cb:02:5f:1c:90:f4:39:cd:03:94:
c8:73:9c:fe:c1:0f:d5:81:5c:0e:50:58:78:01:e6:
c0:69:b2:51:41:a4:a2:7d:5d:fa:a7:af:a0:82:bd:
b6:41:67:4e:50:d5:b5:02:1f:fb:80:c3:23:4d:a8:
4f:db:30:8d:82:69:0d:97:c3:7a:40:7b:b5:28:34:
47:59:14:0b:fe:a3:90:75:13:95:aa:89:5f:c4:20:
12:65:d1:f8:7e:d5:e0:34:87:24:b9:22:52:82:00:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:67:6F:D8:74:38:C8:9F:DA:90:0A:33:3B:A9:36:68:1A:C0:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f2b576d-71c8-3d04-b736-bb4a4be03aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.7.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d8:2f:7d:ba:07:55:5f:60:ce:06:be:62:e1:00:12:6a:bc:
8c:f1:4a:ac:a5:5f:2a:5b:ad:be:32:63:aa:33:18:a3:7f:fa:
37:9b:c6:79:c9:b7:b6:90:a4:3d:97:73:9d:56:07:d8:e6:85:
d3:7d:69:e2:99:7c:ae:59:36:00:af:c6:c4:dd:c0:5f:31:2c:
85:ff:b7:49:86:36:f5:fc:93:83:f4:d6:54:88:90:b7:fc:b9:
e8:6d:f0:43:a2:06:42:a3:f0:41:9f:92:fb:a9:ac:51:0a:1d:
45:f6:7d:e0:f5:a6:5c:73:76:08:92:73:7d:00:a8:ae:13:a2:
d2:a2:08:aa:a7:4f:64:a8:5e:56:f7:d1:9d:cd:cb:7d:30:d7:
45:cd:e0:5c:44:87:3f:ba:b7:cc:50:e2:db:3a:de:2f:5f:ed:
09:a5:68:2b:9d:e5:bf:f0:09:c3:07:1a:7a:f2:4c:38:0c:aa:
6c:dd:aa:b3:ab:60:60:5f:6a:7f:74:66:fd:fb:50:75:ee:24:
55:da:c4:23:3e:66:29:5a:c2:ef:30:57:93:76:a0:a8:28:ed:
b4:49:55:d0:bd:61:3b:90:ff:8f:68:f3:ca:7e:52:fe:69:75:
5b:77:d9:ec:d1:ca:f9:12:e8:cc:d1:56:74:1d:1a:60:b8:87:
ab:a2:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:13:49 2025 by rpki-client