Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5302b8d1-a6e2-31bf-a10a-2dd217cc7a16.roa
File: 5302b8d1-a6e2-31bf-a10a-2dd217cc7a16.roa (raw, json)
Hash identifier: 1vdcNKooS1wU78NbGIia785n8pnxtgEunK2hkKDukis=
Subject key identifier: 2B:28:D3:DB:12:82:E0:E0:C3:23:A3:DD:D8:75:D7:9E:70:32:F1:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1554351F2F3CAA3C3635D6C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5302b8d1-a6e2-31bf-a10a-2dd217cc7a16.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 27338
IP address blocks: 72.243.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:43:51:f2:f3:ca:a3:c3:63:5d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=82278ff1-a6d6-4dd7-9f06-81c0c24b5326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:2f:ca:66:2c:02:da:c8:7a:e5:8a:5d:ca:
4d:ae:a4:95:ec:4d:4e:52:04:9a:22:9c:0a:9e:9c:
8f:40:23:9f:04:18:f0:83:45:85:61:52:34:6f:80:
60:e7:0b:03:b3:43:01:82:aa:5c:07:96:f2:a7:e7:
ef:e3:70:c9:95:e8:bd:73:35:b0:0b:b6:5c:e0:a3:
62:24:9a:d4:f3:1b:54:cb:ad:f9:87:ce:f9:2d:de:
25:7d:97:12:4f:1b:ff:c5:f6:d3:94:69:85:76:7c:
26:bc:23:8d:5d:8d:5d:14:53:6d:96:b2:65:67:fe:
2a:9a:dd:34:13:4c:4c:b0:aa:a6:a2:97:a6:55:6d:
b8:e6:47:48:14:19:dd:ca:38:a7:ed:b5:5e:b0:52:
e1:c1:15:07:06:64:b7:05:58:fa:f7:c9:83:af:a3:
eb:f9:ff:ed:d1:f8:78:f3:92:5b:f5:cb:de:47:18:
3e:03:31:9e:9e:bb:cb:36:13:6a:4e:6f:69:da:43:
ca:37:22:25:6f:4b:11:27:0f:03:ab:47:82:89:e8:
98:9a:3f:61:cb:af:e1:23:86:05:6b:1d:83:2d:54:
d2:7c:ff:df:79:1e:dd:fb:88:b5:db:e1:84:45:e1:
b5:f2:86:a2:a5:f8:ce:f2:7d:fd:f2:cf:26:db:82:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:D3:DB:12:82:E0:E0:C3:23:A3:DD:D8:75:D7:9E:70:32:F1:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5302b8d1-a6e2-31bf-a10a-2dd217cc7a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.243.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b3:23:07:8f:bb:70:52:ce:83:4b:8f:e1:8a:ca:24:9f:49:
de:a7:60:43:03:bd:d7:86:72:f3:24:5d:38:71:2c:5b:5f:ca:
80:28:ff:b4:24:58:e5:cf:04:40:12:12:55:e7:b8:50:4d:81:
5c:60:c7:88:6e:23:3d:67:db:7b:6e:02:79:e2:b9:76:5f:99:
20:01:bb:db:e0:fd:69:67:bf:a7:6a:f2:d6:db:0e:5a:d6:bf:
00:c5:3b:31:01:7c:6b:25:44:31:4c:f8:c3:62:ea:ff:d0:bf:
cb:31:15:d8:36:d1:41:87:43:ef:11:13:4c:19:28:a5:2c:ec:
18:f8:cf:81:1e:93:13:9d:f8:c9:1d:d5:56:47:ca:b7:72:56:
76:0c:a6:fb:88:50:35:8b:16:96:90:40:b0:45:10:f6:a8:71:
34:82:36:45:8e:f3:19:fe:2f:01:88:d0:b7:e4:e1:d8:12:ce:
58:ae:20:70:31:08:7c:3a:97:d7:e5:b0:86:39:ab:e7:fa:73:
26:09:c9:05:1d:74:01:5c:06:74:a3:c2:2a:87:e7:0b:8f:b4:
0a:6d:dc:5b:d5:1d:4e:d1:0d:75:c9:0e:a1:a8:4e:30:60:00:
8b:dd:f4:99:5b:1c:ab:dc:b4:87:ce:4a:6e:0d:31:e5:d0:19:
56:c1:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:49 2025 by rpki-client