Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa
File: 5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa (raw, json)
Hash identifier: 26JAxpOCN797kzTaXw5cT2bzuGw419Qj/bFwTJmiaKw=
Subject key identifier: 95:1B:42:6C:E2:FA:DC:99:08:75:17:CA:C2:1B:83:B9:5E:5C:13:57
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F5822FD55ADBFD91A0FC6B8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 198.211.224.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:58:22:fd:55:ad:bf:d9:1a:0f:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=bd6da80c-00de-41e2-b901-67dcbcdb3835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:9e:11:3d:da:07:9e:6e:bb:08:a1:b6:87:
1f:87:df:c0:1f:99:42:38:27:ff:cb:a5:9b:bb:d6:
83:c6:5f:ff:1c:8a:c4:55:c6:e2:c9:69:7e:68:ae:
66:c7:f0:2c:6e:e9:b0:d3:32:5c:69:50:bd:34:37:
85:7e:84:26:bb:2d:a3:26:e3:ea:b4:0c:f7:9e:26:
c8:d6:3e:49:6d:3c:54:d3:30:55:5b:74:d5:a4:1b:
21:df:cf:14:64:d8:02:85:4f:06:df:d2:c8:57:25:
41:36:1f:ea:0d:7b:30:b4:43:ee:9b:13:32:97:7f:
c9:16:76:33:d8:d0:b0:27:ab:1e:40:e9:7e:76:d9:
df:ff:61:43:23:4a:0a:00:c1:3c:ea:83:75:83:03:
bc:d4:49:6a:d0:14:0c:2f:16:7a:a6:6b:e0:c8:7a:
5d:1a:01:ed:e8:7a:e9:e1:59:5d:16:85:06:45:f0:
31:ff:dd:98:3d:b7:11:5b:4a:cd:2e:af:c0:ae:01:
19:c8:d5:92:79:24:32:2e:23:2e:ef:5d:e9:32:3c:
27:aa:1d:c6:8c:69:a9:5f:6d:56:01:55:88:23:84:
a7:0c:86:6d:59:50:77:01:88:ca:51:7e:fd:10:e3:
b6:0a:a0:6d:9c:12:98:df:c6:de:6e:41:38:7e:46:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:42:6C:E2:FA:DC:99:08:75:17:CA:C2:1B:83:B9:5E:5C:13:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.211.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:55:48:7d:4c:76:24:3a:36:5b:e6:31:8e:60:7c:7e:53:56:
42:64:e9:f4:7d:4e:6c:02:2c:e4:fc:38:d0:28:64:fe:42:5c:
9c:1a:1b:a1:6f:e6:ea:45:cf:cc:08:ad:a3:57:6a:a9:64:2e:
db:c1:34:08:39:7b:f1:95:f0:77:de:be:68:b7:6b:b1:2e:50:
9a:92:36:4d:5b:bc:4f:af:ef:91:f7:a9:8c:d8:54:c4:a0:68:
4f:8d:36:f2:1d:e0:cd:cf:1e:3b:89:8b:92:da:f1:70:ba:c6:
0b:68:cf:f9:60:3e:32:65:9c:cb:60:21:cf:98:f0:03:0a:46:
18:1f:3f:1a:0d:25:cc:bd:33:aa:2a:a2:b0:06:c4:7d:44:4f:
16:89:1a:c0:1d:4a:32:b7:cb:9b:ea:d7:0e:49:cc:e3:a7:3b:
a6:12:b7:37:03:ea:1d:b9:bb:d4:b6:22:5f:6f:e9:71:47:28:
82:fc:4e:ff:83:ec:09:fc:09:8e:ed:52:ff:75:ff:a9:92:10:
9b:7d:fa:47:29:d2:b5:05:69:44:4f:17:43:07:f8:bd:ae:5e:
57:36:22:b9:8f:2a:05:e9:46:81:ed:ba:7b:9a:4e:d2:4f:58:
bc:18:c9:05:0e:a9:5b:99:49:10:50:ae:09:30:13:1d:f7:3c:
17:97:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:44 2025 by rpki-client