Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76d8d0ce-85dc-3c74-83fa-6337106295af.roa
File: 76d8d0ce-85dc-3c74-83fa-6337106295af.roa (raw, json)
Hash identifier: az6UHAgB+eFH61A06Iyw96Sh69gC6iq+sgumt0JBNs8=
Subject key identifier: FE:A2:80:EC:BC:2E:87:F3:EF:97:A1:E9:80:9D:E1:80:2C:9F:3C:A5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FACD5C3F01B60626B9C9800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76d8d0ce-85dc-3c74-83fa-6337106295af.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.48.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:d5:c3:f0:1b:60:62:6b:9c:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=18351ef3-148b-43e0-959f-77b773f72fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:e9:36:38:d1:32:54:1d:84:41:5e:90:65:
e7:40:1e:68:42:63:0d:9b:9a:25:42:57:be:43:8c:
a7:9d:39:ff:77:86:ed:c6:ee:55:ee:5d:6d:2c:62:
f5:af:fd:71:59:02:1a:c4:9f:72:64:91:6f:d1:e0:
98:8f:10:b9:b5:80:f9:2b:b8:eb:bd:3e:62:ce:0d:
37:3b:7b:d2:05:b6:05:0d:de:62:6e:e6:dc:cd:0c:
94:d9:b8:4d:90:bd:d8:c3:14:26:d9:b5:1d:57:50:
15:42:07:27:6d:8f:3c:ae:fd:ed:a0:40:59:64:7f:
9f:98:ec:d0:20:fb:bf:8c:46:3d:92:ae:48:23:90:
79:fc:41:a8:02:e1:c5:e4:c5:e6:e6:0f:69:1f:5a:
11:84:32:d0:97:8b:12:8e:98:df:47:a9:ce:f2:73:
86:30:8f:84:c4:79:63:11:9d:fc:f4:c9:6c:14:86:
4a:41:4a:bd:9e:1c:db:e8:c4:99:f6:e3:1d:53:5d:
0a:1d:de:3f:f4:c6:4d:d1:b7:57:66:0b:12:17:94:
90:b4:68:65:f2:5d:96:0b:b2:b5:61:0f:c1:5e:a8:
6c:e9:df:cf:d0:7f:d7:d1:d9:49:3c:53:1e:e2:cc:
4f:3c:0f:a1:df:d5:98:32:ea:85:29:3d:bc:7d:03:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:80:EC:BC:2E:87:F3:EF:97:A1:E9:80:9D:E1:80:2C:9F:3C:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76d8d0ce-85dc-3c74-83fa-6337106295af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:dc:fc:9f:ed:d8:a2:5f:ff:ab:d8:ac:ca:50:f9:69:64:31:
38:49:72:af:f1:ac:c3:5f:ad:33:53:5d:8d:9e:67:e5:b7:eb:
43:22:57:d0:6e:23:50:7d:06:08:84:8e:cb:f0:96:dc:00:d7:
61:8e:21:1d:fc:ef:91:70:20:28:e7:09:36:6d:26:48:d5:8a:
09:cd:64:e1:fd:aa:69:af:ef:7c:34:38:a1:83:f5:35:52:9d:
48:0d:92:72:92:f8:07:2d:4f:e0:1d:13:07:03:87:a4:8b:76:
9a:52:01:ea:0b:c6:07:63:22:73:6a:1c:2b:5e:7d:05:cc:04:
fd:d9:a1:2b:d1:29:cd:ce:e3:c9:df:80:5f:d0:d2:1b:e1:92:
3b:17:78:f3:86:77:8b:a7:f7:b7:2f:eb:c7:00:3a:92:44:82:
ee:37:35:39:dd:12:09:02:83:99:6a:03:49:40:ca:5b:fd:99:
20:93:ba:78:7f:fd:e8:3f:18:78:1d:65:0e:27:34:21:73:f7:
62:f0:c3:a8:d8:cd:7a:b0:e1:a4:36:f0:c8:52:5c:6a:5a:86:
7c:d5:b5:5e:d2:fd:c6:d4:19:1e:63:b5:b0:fe:8d:02:5a:ab:
68:a9:30:11:c4:ae:41:f5:aa:de:0e:8e:41:2c:0a:f1:d6:88:
62:ef:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:54 2025 by rpki-client