Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79923047-5a4c-3482-ae12-9f04c2e6dd29.roa
File: 79923047-5a4c-3482-ae12-9f04c2e6dd29.roa (raw, json)
Hash identifier: PwFxzAwzg2KBZXZZUXY0RoQwO66JHZ0S7oXM79qQDdw=
Subject key identifier: 42:78:5C:33:AF:5C:1A:1F:49:BB:A1:F8:8A:F1:E4:40:B3:46:10:86
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289D1B17AE778B25281AF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79923047-5a4c-3482-ae12-9f04c2e6dd29.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 68.232.112.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:d1:b1:7a:e7:78:b2:52:81:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=f006a433-46ec-4c43-aacc-a5c80e1e87b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:bb:97:f5:39:59:1f:bd:f5:13:b5:de:5a:
f6:c8:27:93:f1:bb:60:80:ca:f6:cb:ad:2b:a6:94:
62:f6:59:3c:f4:ec:50:83:3c:a1:c5:05:0e:c8:50:
46:27:d5:b3:1d:cc:d3:95:27:c7:7b:5a:26:3b:17:
2e:0e:18:e4:1e:51:d5:e4:74:f9:25:08:a0:9d:6d:
0d:9f:93:65:40:89:db:b1:94:f8:93:69:e6:97:74:
76:49:b0:8e:b4:65:88:b1:cb:09:e0:c0:77:4c:c1:
05:85:dd:21:d0:0d:48:94:69:20:a3:51:c3:c3:a3:
e9:11:7b:56:eb:5a:db:47:10:a3:6a:c3:29:5d:9f:
18:84:46:4e:85:2f:01:9b:64:98:cf:24:04:95:75:
b2:5f:6f:fc:cc:4b:e2:f8:0e:f6:0f:ed:4f:cb:c4:
84:0b:22:22:68:7c:3e:38:aa:f5:7a:bb:ac:f9:88:
c2:8e:21:e5:06:22:58:56:7f:7a:fe:e3:7c:2b:c6:
1b:9c:a6:ff:5e:00:d5:ea:ca:90:04:a6:42:99:36:
98:5e:d8:6a:fa:9b:8f:a2:e5:ad:54:8c:fa:94:4b:
c7:e1:33:16:b4:e5:84:b4:fe:65:a9:8e:43:36:62:
bf:85:fb:96:3e:89:cc:4b:3c:11:c6:36:94:85:ef:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:5C:33:AF:5C:1A:1F:49:BB:A1:F8:8A:F1:E4:40:B3:46:10:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79923047-5a4c-3482-ae12-9f04c2e6dd29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e3:c9:8c:93:a6:7b:37:e5:61:1c:fb:c2:5b:c4:df:ad:c9:
35:00:fd:4c:5d:5d:57:0b:97:44:1d:ae:15:03:2b:d7:c8:5c:
fe:14:57:af:75:be:d4:9f:a7:0a:84:87:5c:06:4b:a5:4e:43:
f6:6d:03:3f:a1:4c:a6:1d:c7:2f:68:d5:d0:b3:83:ec:28:be:
ea:1e:79:dc:d8:a7:0f:80:05:81:df:31:6c:18:c6:42:a6:46:
69:4b:41:2b:07:49:a1:59:0f:25:b0:35:62:31:5d:4c:67:3a:
72:6d:d9:19:16:75:8a:0d:83:c4:91:1f:fb:19:1b:a3:25:9e:
d5:1c:28:83:f4:48:87:3d:ab:5f:d7:00:83:60:41:99:d2:25:
e9:21:dd:d7:1d:3f:7c:5f:85:8d:51:fe:c3:f1:83:5c:f1:ea:
23:d4:50:c4:ca:dd:08:7c:9d:80:94:96:55:47:ac:0c:0b:5f:
03:d2:0b:66:2e:66:2e:49:2b:6b:a8:4e:ec:a9:fb:b1:55:97:
f1:ec:33:dc:57:25:42:cc:55:13:71:d9:e5:71:ee:94:fb:62:
6d:2d:14:28:8e:fe:56:e7:2c:4b:f1:c6:81:9d:f8:37:5f:10:
80:e7:46:1d:55:d1:71:74:eb:87:1b:bd:48:4e:f7:9d:fa:cf:
05:fc:60:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyidGxeud4slKBr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
ZjAwNmE0MzMtNDZlYy00YzQzLWFhY2MtYTVjODBlMWU4N2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo27l/U5WR+99RO13lr2yCeT8btggMr2y60r
ppRi9lk89OxQgzyhxQUOyFBGJ9WzHczTlSfHe1omOxcuDhjkHlHV5HT5JQignW0N
n5NlQInbsZT4k2nml3R2SbCOtGWIscsJ4MB3TMEFhd0h0A1IlGkgo1HDw6PpEXtW
61rbRxCjasMpXZ8YhEZOhS8Bm2SYzyQElXWyX2/8zEvi+A72D+1Py8SECyIiaHw+
OKr1erus+YjCjiHlBiJYVn96/uN8K8YbnKb/XgDV6sqQBKZCmTaYXthq+puPouWt
VIz6lEvH4TMWtOWEtP5lqY5DNmK/hfuWPonMSzwRxjaUhe8iiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJ4XDOvXBofSbuh+Irx5ECzRhCGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzk5MjMwNDctNWE0Yy0z
NDgyLWFlMTItOWYwNGMyZTZkZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROhwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXjyYyTpns35WEc+8JbxN+tyTUA/UxdXVcLl0QdrhUDK9fIXP4UV691
vtSfpwqEh1wGS6VOQ/ZtAz+hTKYdxy9o1dCzg+wovuoeedzYpw+ABYHfMWwYxkKm
RmlLQSsHSaFZDyWwNWIxXUxnOnJt2RkWdYoNg8SRH/sZG6MlntUcKIP0SIc9q1/X
AINgQZnSJekh3dcdP3xfhY1R/sPxg1zx6iPUUMTK3Qh8nYCUllVHrAwLXwPSC2Yu
Zi5JK2uoTuyp+7FVl/HsM9xXJULMVRNx2eVx7pT7Ym0tFCiO/lbnLEvxxoGd+Ddf
EIDnRh1V0XF064cbvUhO9536zwX8YFg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:37 2025 by rpki-client