Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d62f106-e677-3d54-81d0-02b7c757c71f.roa
File: 5d62f106-e677-3d54-81d0-02b7c757c71f.roa (raw, json)
Hash identifier: WA2nfeL1pinnvLfO7zF0VcCQJ61WFvjkZYSphjuHL2U=
Subject key identifier: 4E:5E:F3:71:70:E9:F1:B6:11:E4:E6:62:63:A0:D5:2F:37:3A:4C:4F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155088EA73214FF08378840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d62f106-e677-3d54-81d0-02b7c757c71f.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 207.217.128.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:08:8e:a7:32:14:ff:08:37:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=c1add66d-d5a4-48c8-99d5-51da31ec8278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:7d:87:bc:0a:f1:e1:f5:b2:7a:02:3d:57:
c0:4a:65:56:52:b7:d3:33:29:d5:2e:e1:04:ff:6f:
9f:11:bc:76:9d:dc:4f:1d:66:f7:0b:fb:13:21:b7:
87:b0:71:a5:64:69:5f:82:b0:b5:40:4e:94:01:77:
17:18:e3:be:73:ed:e7:49:d6:64:2e:45:e9:ca:0c:
e7:67:de:88:8d:c0:5e:91:00:a3:f5:48:a6:bc:06:
41:37:d2:c5:fb:d1:3b:5c:64:c7:ae:b5:20:e1:a4:
0d:8c:1c:a9:73:14:77:e0:2e:0f:f1:ec:32:d3:a8:
7f:7e:78:19:ce:7e:3d:3f:eb:38:91:96:54:ff:1a:
b6:c5:c8:88:aa:50:8e:21:86:83:02:b5:05:31:98:
b4:95:32:b8:68:f4:94:cb:79:41:25:59:8d:9c:f1:
70:06:80:b3:ac:b9:6d:2b:ca:e5:46:26:7c:9c:4c:
de:b3:eb:61:fd:da:c6:c4:81:c2:69:5e:8b:52:c2:
5a:2e:e4:30:78:24:f7:82:03:c3:3c:15:bb:c2:36:
fb:63:cf:76:18:ab:9a:af:d6:32:c2:e3:07:21:8b:
a8:84:91:c5:42:4a:0c:ea:14:91:11:31:7b:00:f7:
d4:2c:93:27:8f:ba:c4:89:42:cb:1b:c5:72:f8:f5:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:F3:71:70:E9:F1:B6:11:E4:E6:62:63:A0:D5:2F:37:3A:4C:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d62f106-e677-3d54-81d0-02b7c757c71f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.217.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:23:b6:bd:d5:3f:9e:9e:bb:07:e2:0d:c5:9f:9c:ab:45:f2:
8e:c1:8d:06:ec:31:de:8e:6a:8e:3a:90:4d:51:7d:7b:1d:0e:
1c:ab:6f:97:a5:3b:3b:78:10:d3:5d:85:4b:0e:4f:38:25:ee:
3c:c4:fc:12:99:fd:be:ab:24:92:6a:be:c7:8f:05:97:19:e5:
a6:38:b4:d4:b8:b0:ae:de:cc:80:b3:4c:ef:59:e3:69:80:b4:
fc:3f:5d:98:c9:3a:7b:7f:70:13:5f:2f:53:fb:00:d3:ee:6e:
7b:3f:6a:0d:c4:86:c2:80:bb:bf:0e:5a:80:2c:c3:30:10:27:
ad:91:d4:2f:48:f2:ac:64:62:9a:91:30:7e:9d:dc:38:fa:76:
83:d1:56:31:15:f4:30:5e:c8:30:a3:df:a9:40:ce:35:d4:15:
3a:51:58:f3:e9:19:2c:54:0f:50:d5:96:2a:22:55:e8:90:6f:
e8:3e:a9:97:63:0f:ba:eb:87:e4:3d:36:b4:a0:f4:65:33:55:
c5:f1:12:06:9e:43:ba:14:b1:20:0d:c1:03:36:70:70:fd:68:
d6:12:0e:c9:31:9b:5c:2c:a5:39:88:11:61:ca:b3:57:0a:49:
e5:ac:a5:0a:56:cd:df:bb:89:a9:05:34:d2:6e:d3:fb:7f:e9:
6f:dd:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:55 2025 by rpki-client