Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8605f50e-04f1-3c0b-923f-e20ff18180e5.roa
File: 8605f50e-04f1-3c0b-923f-e20ff18180e5.roa (raw, json)
Hash identifier: tOkILf89wBsT0SQQmkGy6Ts9ORpGrnpPRYqdt5djXA4=
Subject key identifier: 3A:45:53:C3:5A:AA:23:5C:99:58:C6:2B:62:28:34:AC:EE:77:D6:AF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FACFBC47B256A032ED95F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8605f50e-04f1-3c0b-923f-e20ff18180e5.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:fb:c4:7b:25:6a:03:2e:d9:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=feb71045-f698-4560-b964-92735c43cc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:e3:d9:e2:72:14:0e:9d:ea:49:88:92:36:
16:db:1c:ae:67:3e:d3:8c:e8:c7:59:bd:87:b2:b2:
06:df:31:91:00:f5:65:04:65:ae:76:93:2c:72:34:
00:27:f0:29:10:24:26:48:1b:94:cc:ee:4d:ce:91:
e5:43:f4:51:76:df:21:85:2e:db:3e:42:63:b1:54:
32:7c:7c:41:89:06:22:e4:5e:dc:a1:26:c7:44:a0:
4a:46:ee:68:8b:9f:ef:76:47:ee:7a:ff:00:cb:cc:
c8:e6:f7:c1:61:9a:31:ff:c9:08:b5:a2:ac:49:71:
e9:98:03:63:b9:61:a0:04:54:0f:11:ce:dd:a7:4b:
68:6e:fa:fe:ec:27:fb:d1:b1:92:b7:ed:c7:d7:8b:
72:dd:e6:36:ef:f7:d9:69:19:17:b2:ed:47:07:e0:
9d:0d:b9:5b:19:f6:37:7e:35:31:8d:a0:f0:15:c0:
95:36:ce:4c:36:ec:55:86:e6:13:73:9f:33:e4:c5:
68:84:e2:11:5b:18:f6:5c:85:fe:f2:9c:4f:f7:1b:
5a:4f:1a:49:f5:f5:91:ea:75:34:ef:76:16:f6:35:
b4:3c:de:07:27:d6:69:38:33:f4:29:d6:ec:ec:e4:
aa:d7:80:de:f3:29:30:aa:88:1c:a5:c1:3a:7e:4c:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:53:C3:5A:AA:23:5C:99:58:C6:2B:62:28:34:AC:EE:77:D6:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8605f50e-04f1-3c0b-923f-e20ff18180e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8e:13:c6:ef:98:9f:44:ee:c1:a9:f5:96:a4:c1:e7:6f:ca:
d1:47:e8:bb:e9:8b:b1:c5:a0:91:7f:67:4e:ae:86:ba:1b:4c:
56:48:25:e6:5c:78:29:fa:69:c4:05:c5:7b:24:14:2c:4f:76:
4c:bd:d9:17:c7:22:4e:f5:8b:9c:2b:8f:58:44:46:e0:3b:d1:
bb:47:7a:14:8c:6c:a2:29:f6:89:84:2d:4c:ad:d7:5d:6a:6b:
ce:07:3c:47:b7:73:0f:a2:fa:b2:f9:30:76:98:7c:87:83:6a:
bb:1d:49:db:ba:4a:db:55:39:55:bf:a2:a2:d5:2a:c3:4e:64:
ec:37:6b:f1:8c:5c:1f:47:46:b4:46:a5:8f:fc:90:99:31:2a:
df:c2:fa:fa:4a:3e:89:bd:5d:33:b8:e5:12:02:99:a5:5a:9a:
f0:67:f3:b6:1e:12:e1:33:36:84:e0:65:73:09:69:b2:e4:80:
94:fd:2b:91:dd:a5:b2:7a:1e:9e:2c:5d:ff:3b:95:e0:65:50:
fc:ce:cd:b2:63:51:7e:05:cf:ef:bb:e0:5a:0e:38:93:ec:8e:
c0:42:f3:1b:c6:5d:4a:3c:56:3c:4f:f8:fd:f4:0a:1b:93:0c:
47:18:6c:10:99:94:33:a0:1f:ae:63:76:f3:43:89:fa:91:5a:
23:13:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:15:32 2025 by rpki-client