Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6248c23e-19f9-3212-830e-7567b78906a1.roa
File: 6248c23e-19f9-3212-830e-7567b78906a1.roa (raw, json)
Hash identifier: 7mhDBOymwJFx3GNGV6a3aDOz7MDkBaWP7s5MJoxWe5w=
Subject key identifier: 79:B7:C1:9F:63:52:DF:2C:89:66:AA:88:A6:D5:25:A2:F6:CF:34:9A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553C1F5CC66CEA7332BFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6248c23e-19f9-3212-830e-7567b78906a1.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 216.73.0.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:3c:1f:5c:c6:6c:ea:73:32:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=e5169196-20e9-4db0-b880-0e8441ac1ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:6d:be:9f:c7:75:4b:41:b5:63:40:88:44:
bd:70:09:07:56:27:91:90:a2:2c:df:11:95:78:ae:
af:90:42:00:3f:6c:df:1e:53:10:f4:d7:af:32:ce:
8e:7b:85:cf:16:c5:e0:b7:5b:da:05:f9:dc:35:17:
d9:ba:f3:9b:0c:5f:5e:b6:5e:28:4c:b9:59:46:79:
24:32:7f:d9:ca:5d:89:6c:95:94:32:18:d8:3c:2b:
3b:0c:a0:39:aa:e9:e6:20:27:53:d6:a4:ea:9d:26:
dc:eb:c2:14:f8:19:cd:01:47:28:c2:66:4f:ed:76:
67:5c:08:92:73:fd:48:c9:76:5e:9e:2c:7e:01:d2:
32:89:49:9f:73:5b:3b:4b:d9:55:59:8b:74:78:7f:
c1:0c:4f:5b:57:36:95:5a:64:7b:d4:f3:e3:5a:4a:
70:6d:87:a2:8e:cd:cc:3f:a3:8a:b7:6b:18:cb:ee:
3a:6c:16:40:7b:e4:47:14:3a:94:91:51:a6:66:6f:
1f:7d:39:04:90:31:2d:87:e7:05:cd:c2:fc:c1:e9:
91:af:bf:00:fd:68:2e:8e:ed:79:3c:d3:8d:97:af:
a6:c3:d0:61:58:68:23:b3:0a:7c:45:d2:02:06:9d:
ad:35:e1:ad:77:46:29:a4:ae:4b:29:bc:09:9b:9f:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:C1:9F:63:52:DF:2C:89:66:AA:88:A6:D5:25:A2:F6:CF:34:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6248c23e-19f9-3212-830e-7567b78906a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.73.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:94:33:23:ff:8c:c8:9e:c2:fc:e1:9c:12:26:b3:96:43:78:
d9:f8:d6:68:40:30:fb:2f:7b:60:5e:56:85:ba:80:ae:c5:7e:
b8:fb:15:7c:77:06:c8:50:06:b9:e6:39:ab:8b:33:b4:2e:14:
ae:06:d4:a1:7f:26:b1:02:8a:8d:2d:fb:8b:2a:59:16:11:b3:
84:91:70:6a:c5:97:e2:ae:ef:7c:70:ae:c0:a2:74:05:4e:05:
b4:bf:26:f8:fe:5d:58:5d:36:8a:b9:12:a3:70:09:96:bf:8f:
4c:f1:fe:66:fa:b0:b7:c7:2d:48:6a:0c:05:d5:20:60:5d:f8:
cc:43:cb:6d:ce:43:ca:92:bb:07:ce:ac:20:3f:07:81:a2:c4:
0c:2c:64:e6:c0:3b:23:ee:61:ed:b6:e9:c2:13:13:31:dc:6b:
44:f8:36:a8:5b:da:7c:e0:02:36:a0:af:b0:ad:5b:46:11:83:
73:f2:06:aa:a9:9f:e4:52:db:e0:35:81:d5:a4:0e:c0:a4:3a:
58:5c:17:86:44:72:81:6f:88:9f:d4:1f:05:0a:fd:94:87:21:
4c:da:e9:b1:f0:dc:8d:f6:81:ac:28:47:08:cf:fe:b2:43:8f:
ea:20:d4:75:45:30:db:4e:ef:d7:70:a5:e9:61:21:36:cd:2a:
aa:af:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:57 2025 by rpki-client