Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78a65fa3-2671-3687-89ec-546777441e8d.roa
File: 78a65fa3-2671-3687-89ec-546777441e8d.roa (raw, json)
Hash identifier: sKH7CfNadbqtxu2L8Az/V8G6CZ/SjMuQgRkU4hCHneo=
Subject key identifier: 11:A8:C4:CE:03:23:84:20:D4:66:FC:30:35:14:AA:F1:67:BF:3D:1E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0719554D2C1F0F95BA780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78a65fa3-2671-3687-89ec-546777441e8d.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 66.36.32.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:71:95:54:d2:c1:f0:f9:5b:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=c04d72e0-8ad1-46da-9783-bbd441eadb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:d6:e2:af:5d:79:c4:fc:b3:c3:40:68:4a:
25:ae:f1:ef:74:1a:34:93:61:6c:0c:c6:39:1a:82:
85:93:58:c4:9d:bb:7c:c7:a3:e2:94:a6:ee:10:ab:
35:02:b6:71:60:59:11:03:2f:75:56:ea:6d:86:fb:
11:35:d4:0d:92:e0:ad:58:ae:fc:bd:07:e4:b4:b2:
a4:b7:b2:1a:db:04:99:bb:ed:d6:b4:af:9e:a6:48:
39:4a:22:0b:10:85:fb:7b:35:a4:cb:dc:52:e0:99:
4e:f0:7c:e9:fe:79:81:98:78:9c:1c:58:d0:61:77:
0d:ab:e8:4f:5b:07:7f:9c:e2:1d:ee:de:8e:c2:c4:
fd:07:08:a4:7c:7b:f3:cb:60:2d:d8:61:0e:3b:d6:
db:9e:c9:2d:6f:ae:3d:85:b7:8b:84:8b:bd:56:e9:
69:1d:19:3b:c3:a3:9d:b6:bd:ad:7a:68:8c:db:d8:
38:39:88:7a:89:20:36:d0:bf:2f:d9:c8:62:36:aa:
ba:46:05:f7:c0:e1:75:cc:3d:58:3d:b0:36:03:98:
65:0f:fe:8a:d8:d5:8a:4b:c3:78:40:d1:d0:0f:87:
5c:93:a8:d7:14:08:2f:8d:36:20:6d:ba:f4:87:9e:
91:43:a2:83:0c:35:13:83:06:24:dd:a2:26:97:d0:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:C4:CE:03:23:84:20:D4:66:FC:30:35:14:AA:F1:67:BF:3D:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78a65fa3-2671-3687-89ec-546777441e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.36.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b9:d3:f9:f4:c9:65:b5:6e:d8:7c:be:75:28:08:ee:3f:2f:
3b:08:10:03:24:90:f8:24:8d:9b:d0:6e:e6:83:9c:43:06:46:
38:d9:d9:31:6f:54:b7:5d:4b:9e:fb:77:7f:59:5b:8e:86:3f:
db:99:c3:4b:64:d0:8d:d6:a6:32:20:22:94:da:c5:79:1d:55:
34:c4:5c:8f:ad:e4:00:4d:90:2a:04:4b:5e:be:12:a4:fe:43:
9a:75:39:ad:bb:4c:a4:5e:7d:cb:e3:ef:8a:d8:86:03:ac:be:
7f:e7:2b:11:80:e1:3d:94:df:57:a5:f2:08:d4:f6:c5:f9:2c:
34:a0:db:67:c3:e0:3b:c4:2d:bc:44:c7:84:cc:c3:e5:b2:d2:
8e:68:70:2b:21:0a:80:55:eb:36:4f:42:33:3c:a0:1c:d0:39:
fe:3d:c5:36:89:8b:1d:cd:6f:7c:ad:18:db:96:53:25:30:70:
2c:3b:c0:6b:83:2e:48:61:06:61:08:52:01:b0:37:e4:1a:c5:
e6:5f:c9:73:48:5a:ca:fb:df:22:ae:78:ab:2c:29:e3:fc:0d:
fc:d3:9a:8e:e9:da:b7:8b:9d:18:01:e2:e2:b8:c6:92:a7:32:
6c:d8:b7:48:03:80:5b:4b:cf:2a:80:11:1a:f6:89:b7:84:47:
3e:7a:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:42 2025 by rpki-client