Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/876dce04-fd43-325a-a3c4-c26e7488ab75.roa
File: 876dce04-fd43-325a-a3c4-c26e7488ab75.roa (raw, json)
Hash identifier: WNTxcSwLWE0Zl7mnNASrtIARfahyRLVReoCZUvTZzxM=
Subject key identifier: 21:87:87:CE:2E:88:7D:E4:83:D3:A3:10:E3:CD:95:01:18:08:5C:3E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551A3F75A38D01C3BDCBCC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/876dce04-fd43-325a-a3c4-c26e7488ab75.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 27338
IP address blocks: 72.242.35.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1a:3f:75:a3:8d:01:c3:bd:cb:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=e7336097-cf89-4ce8-8e07-43563390eecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:7d:df:4c:cd:dc:e6:e1:84:10:5a:1d:b9:
79:4d:bf:04:53:1c:fb:6c:7f:39:83:3a:40:5c:b3:
da:83:05:08:d3:a2:43:93:e8:8e:78:f5:b0:0c:67:
d3:11:23:b5:d2:98:c4:9f:7d:39:2a:e5:a3:3b:5a:
d3:12:4e:a4:d7:ee:03:3e:0d:5d:76:ec:96:07:48:
86:d9:00:78:09:68:f3:e9:dc:9d:7c:6d:25:e0:5f:
dd:0b:1c:5b:d4:30:3e:96:dc:7c:d8:4d:c2:a9:85:
a5:f4:35:c2:5d:5e:61:25:38:24:92:9f:3f:08:3b:
61:65:1b:4f:4f:34:0b:16:12:43:19:14:d8:42:4b:
99:4b:bc:5a:87:66:03:3c:09:a6:74:55:29:f8:18:
b1:cf:fa:a8:0d:4d:7c:a9:4a:ac:e8:fa:6d:18:25:
0d:39:65:22:33:0f:db:2b:e1:4c:47:47:4e:f6:f3:
2b:31:a6:5a:ad:45:7d:98:ae:8d:89:5c:88:e4:33:
11:50:b0:a2:2a:10:80:81:7c:7b:07:e5:30:0c:15:
62:10:e1:08:c7:3f:d5:ff:ae:62:28:af:3c:54:1d:
47:6d:44:fe:f0:e0:4f:f3:ae:3e:66:9f:c2:bd:92:
2f:82:23:e6:59:69:f5:cc:3d:d4:c7:9e:ea:2a:56:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:87:CE:2E:88:7D:E4:83:D3:A3:10:E3:CD:95:01:18:08:5C:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/876dce04-fd43-325a-a3c4-c26e7488ab75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.242.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:57:5e:9a:a7:57:c1:31:6f:c8:d0:fa:7b:b5:c6:4f:36:3e:
34:1f:eb:0b:6b:87:bd:84:b4:99:76:37:d0:8f:41:5c:86:9b:
2f:a3:22:35:b0:f4:01:c9:8e:53:28:6a:c0:60:11:fa:2f:35:
c0:18:62:62:ea:a6:a4:c1:73:9d:a0:89:aa:9d:ac:8e:5f:7e:
87:5d:7a:a6:25:aa:6e:e9:05:35:a5:8f:c4:93:2b:5c:4c:b6:
56:69:35:d9:e2:42:17:96:10:6e:d6:13:0e:bc:c7:95:85:de:
28:32:e7:14:b9:e5:d2:bf:ba:89:2f:35:ce:e8:7b:b7:c5:96:
f5:df:ab:1d:d9:79:c6:9d:01:28:0e:fc:ab:be:3e:af:96:42:
30:db:d1:cb:88:25:03:ad:85:b3:8d:48:4c:47:0c:e3:b2:e2:
98:62:08:a6:01:5c:1c:94:26:f5:31:e2:f8:b5:8a:6d:c6:9d:
26:f5:04:51:c3:8e:24:6a:82:62:22:5e:9c:6c:c2:60:68:03:
49:bd:c9:ec:b0:af:27:b4:a5:ad:71:f1:e9:45:b3:94:97:d7:
37:1b:47:8c:2e:e7:df:66:5f:09:5c:e7:63:ea:7a:d5:00:e6:
7d:e7:b9:e8:1e:c2:fe:9e:bb:e1:73:76:86:3d:d7:f2:fd:c7:
ac:50:5e:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1VGj91o40Bw73LzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMzA0MDAwMFoXDTI4MDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTczMzYwOTctY2Y4OS00Y2U4LThlMDctNDM1NjMzOTBlZWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNx930zN3ObhhBBaHbl5Tb8EUxz7bH85gzpA
XLPagwUI06JDk+iOePWwDGfTESO10pjEn305KuWjO1rTEk6k1+4DPg1dduyWB0iG
2QB4CWjz6dydfG0l4F/dCxxb1DA+ltx82E3CqYWl9DXCXV5hJTgkkp8/CDthZRtP
TzQLFhJDGRTYQkuZS7xah2YDPAmmdFUp+Bixz/qoDU18qUqs6PptGCUNOWUiMw/b
K+FMR0dO9vMrMaZarUV9mK6NiVyI5DMRULCiKhCAgXx7B+UwDBViEOEIxz/V/65i
KK88VB1HbUT+8OBP864+Zp/CvZIvgiPmWWn1zD3Ux57qKlZmAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGHh84uiH3kg9OjEOPNlQEYCFw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc2ZGNlMDQtZmQ0My0z
MjVhLWEzYzQtYzI2ZTc0ODhhYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPIjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtXXpqnV8Exb8jQ+nu1xk82PjQf6wtrh72EtJl2N9CPQVyGmy+jIjWw
9AHJjlMoasBgEfovNcAYYmLqpqTBc52giaqdrI5ffoddeqYlqm7pBTWlj8STK1xM
tlZpNdniQheWEG7WEw68x5WF3igy5xS55dK/uokvNc7oe7fFlvXfqx3ZecadASgO
/Ku+Pq+WQjDb0cuIJQOthbONSExHDOOy4phiCKYBXByUJvUx4vi1im3GnSb1BFHD
jiRqgmIiXpxswmBoA0m9yeywrye0pa1x8elFs5SX1zcbR4wu599mXwlc52PqetUA
5n3nuegewv6eu+FzdoY91/L9x6xQXhA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:03 2025 by rpki-client