Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6bfeefcc-13ef-33d4-afb5-b3118cd52416.roa
File: 6bfeefcc-13ef-33d4-afb5-b3118cd52416.roa (raw, json)
Hash identifier: QJcgS3dvkcC6rXy5GKVyZmeKa/ZK1KR3M9hH/I5TdAw=
Subject key identifier: 29:AE:0E:50:F3:75:10:9A:1F:AB:AC:F2:54:15:4B:0F:1B:5E:A3:87
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E09A4397F4BD1C418C06E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6bfeefcc-13ef-33d4-afb5-b3118cd52416.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 68.67.224.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:9a:43:97:f4:bd:1c:41:8c:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=d28bb3ac-8a87-4162-9150-da226d83558b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:d6:b8:cc:c2:b1:e5:9a:88:44:b4:dc:40:
50:9c:10:a0:18:cc:ae:6f:c0:53:9d:fb:aa:a7:07:
4c:f1:18:f1:15:e3:20:74:f6:4d:14:60:eb:d6:ca:
b7:1b:cb:c6:78:c8:7c:73:68:56:fa:3a:c9:7a:a8:
8a:08:95:6e:c7:b3:87:73:87:cb:db:58:c1:66:1f:
be:c4:dc:20:25:86:0f:26:e0:4a:a5:75:02:06:6b:
46:da:a6:5d:20:59:dd:85:69:47:34:1d:87:5c:8c:
9c:c1:89:d1:42:2f:5b:c6:68:a8:7d:34:7d:0a:de:
65:b4:b9:f4:33:7f:2f:24:87:41:a2:5d:46:6d:a4:
35:e2:e1:9c:52:1e:3d:5c:66:66:f6:d8:f1:21:4a:
5a:b6:6c:60:0f:7a:9d:6f:e2:c0:05:62:bb:a4:b0:
03:46:ec:61:d4:f9:5e:6f:5b:a6:15:60:8f:92:71:
d6:8a:78:93:9b:fc:16:ff:f9:80:fc:76:5d:a3:09:
7a:92:a9:bb:ba:45:f8:c6:11:fa:5c:80:45:eb:fd:
df:c1:d9:04:d3:7c:1a:87:6e:55:a6:f4:6c:43:65:
5d:d2:bd:57:f3:a2:f2:b6:5c:b2:01:a1:b9:64:6a:
0a:78:cc:d0:ea:a4:33:ee:88:f2:14:42:54:0c:46:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:0E:50:F3:75:10:9A:1F:AB:AC:F2:54:15:4B:0F:1B:5E:A3:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6bfeefcc-13ef-33d4-afb5-b3118cd52416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:e1:ed:61:d4:f4:48:50:cc:87:f3:dd:cd:f6:75:83:43:16:
bd:55:b9:d0:35:63:c0:63:b3:41:78:29:43:06:cd:4e:01:4f:
92:c6:0f:be:d9:29:38:d5:ca:e8:a0:c2:ba:c6:78:d3:cf:9d:
8a:22:de:1a:62:42:93:5c:a0:f7:d8:be:c8:80:14:58:1f:cc:
6e:7f:53:36:9f:71:1a:7f:b4:e8:9d:d7:b9:d0:d7:6c:c0:fd:
c2:11:b2:af:83:71:ec:ed:bc:a3:3f:80:00:7b:6a:c3:5b:e9:
16:25:1a:59:5c:9c:07:13:5b:72:bc:0d:15:52:b8:56:cc:73:
c7:34:c1:9b:60:01:ad:c2:ab:f3:82:70:e2:ca:af:39:ca:7b:
15:5a:5a:40:70:ec:83:d5:d7:ae:6e:16:5e:be:93:1d:a8:0f:
28:f6:7e:a5:59:ec:c7:c1:98:71:1b:a8:08:d1:b7:86:eb:53:
be:62:df:05:77:d5:91:0a:0f:67:ab:a5:87:bb:11:da:ec:ae:
c3:d0:9c:b0:39:75:5b:88:59:33:d9:7c:bb:c0:f4:f1:18:8c:
a0:0e:75:6a:18:b8:35:0d:a3:8b:03:11:94:95:d7:42:d1:5c:
62:22:85:d8:28:24:14:b5:5c:e2:c4:a2:78:4e:ff:46:a2:53:
91:7f:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:36 2025 by rpki-client