Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87ef2fba-879b-3c3a-9def-7eac010b6fcb.roa
File: 87ef2fba-879b-3c3a-9def-7eac010b6fcb.roa (raw, json)
Hash identifier: pX0+hPFas+v1MBmZzA9J17206OWZszq+9aZ0PDfw3FE=
Subject key identifier: D9:10:8D:AD:4C:40:8E:B9:5B:B6:5C:A4:F9:E3:6C:06:72:51:A3:09
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FAD1D19B151E09F2C9D6180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87ef2fba-879b-3c3a-9def-7eac010b6fcb.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.92.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ad:1d:19:b1:51:e0:9f:2c:9d:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=c05674c4-3eeb-40fc-8c1d-6118f5741c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:4a:81:5c:26:ed:0e:8a:25:ce:2c:94:70:
e3:05:46:bb:57:14:73:c3:43:21:8b:e3:b9:6c:fc:
3d:44:c3:27:5b:cb:05:5a:cc:08:b0:af:93:f5:04:
98:63:8a:d7:66:05:a0:f1:71:c4:6d:14:6c:64:86:
bb:ec:9e:6b:e2:87:37:42:5b:63:c6:04:4b:95:32:
6b:d0:6b:98:63:66:a1:c9:6e:2a:d1:b5:97:97:0d:
87:a2:15:48:19:50:b2:bf:bb:e6:91:4d:6a:07:de:
4a:c4:21:1c:5a:72:71:68:6c:af:3e:ef:f7:70:5f:
a0:e8:23:6d:ff:a2:26:56:88:2c:5e:0f:f1:8a:19:
c7:f4:f8:59:2b:67:9d:01:8e:87:96:0c:f3:32:6d:
ad:67:31:c4:89:07:a9:82:d8:90:44:e9:c1:41:d3:
e8:4a:80:ef:d4:ca:10:9e:59:59:8f:58:5c:29:83:
b0:c8:7a:3d:ea:6b:82:39:51:68:14:f9:56:19:7c:
33:39:18:95:94:ad:ae:14:99:6c:ef:ab:02:11:3d:
e8:df:dc:ca:2d:6d:43:9d:05:46:21:81:8b:82:36:
4c:1d:62:20:23:7a:45:0b:f8:3c:59:75:bf:84:a0:
99:e2:c0:e2:08:3b:6b:a3:7b:09:34:c0:cd:60:2f:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:8D:AD:4C:40:8E:B9:5B:B6:5C:A4:F9:E3:6C:06:72:51:A3:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87ef2fba-879b-3c3a-9def-7eac010b6fcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b6:9d:b8:c6:d3:ac:c6:fc:13:2c:2c:75:e2:71:e7:3b:57:
75:9b:04:fb:8c:97:47:65:9c:9d:d7:d4:13:fb:9b:9d:dc:fb:
c8:b2:d1:9c:8b:a8:ea:ed:86:7f:96:a5:b8:26:57:d4:7a:99:
95:39:a8:42:ad:be:1d:96:8d:e5:b4:98:84:58:60:28:87:33:
6a:e1:f1:e4:39:75:75:9c:59:ed:b1:72:8d:2b:a2:20:9a:36:
fb:45:8f:dd:ef:bd:9b:7a:66:d9:19:ac:7b:70:65:02:41:9a:
e0:b4:ad:17:1e:d8:c2:41:9e:4b:31:da:9e:7b:0f:d7:68:e1:
5f:bc:76:7a:e8:8f:92:1f:4d:6f:91:d0:08:91:fa:c8:01:c7:
28:e3:ce:8a:3b:0f:b8:2d:89:ce:77:cc:1a:a7:d8:66:69:01:
49:3a:ff:fe:aa:05:1f:c4:8e:39:6e:ae:48:89:9a:92:dc:fa:
27:4f:69:e0:b9:ac:d8:5c:77:5c:df:e9:a2:c8:ae:37:50:cf:
eb:81:e3:55:3b:97:18:50:0c:e9:91:ef:93:a1:5b:96:d0:d7:
7d:78:de:e4:53:66:81:73:5c:aa:5c:ea:48:a9:d6:8c:2a:17:
61:5d:f2:b7:ee:32:9d:e4:d6:8f:bf:41:4d:f4:75:9f:57:0b:
76:a2:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:45 2025 by rpki-client