Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92ab4212-d638-39d4-a992-6d28753ae646.roa
File: 92ab4212-d638-39d4-a992-6d28753ae646.roa (raw, json)
Hash identifier: 6umYS7DT2opulMBUgzbWbvwysxXhuy9YUd5nFeHfoYs=
Subject key identifier: 65:7D:78:68:5D:1A:95:1C:F4:E7:5C:D6:C4:BE:3F:05:69:FF:C6:85
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E3A9E296398ADA8AB50280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92ab4212-d638-39d4-a992-6d28753ae646.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.110.64.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e3:a9:e2:96:39:8a:da:8a:b5:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=fbeb9a9e-fbd2-4467-a4e1-74a3bc4b7a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:a4:b1:ba:ff:b0:47:b0:7f:e7:06:c5:2c:
8f:d5:f9:a8:f7:06:e5:f6:63:62:9f:9d:d0:35:46:
49:a3:eb:8a:4d:b4:2a:b7:0f:b1:90:04:0e:98:f8:
36:fb:eb:69:8f:2b:1d:5e:83:32:4c:78:82:c6:fa:
9d:fe:81:63:79:06:db:a2:69:d0:5a:7d:32:28:a8:
23:e5:11:23:c4:9a:fc:d8:d1:70:6e:7c:73:5e:42:
33:be:ce:d5:08:53:0f:42:16:3f:07:6b:64:59:2b:
55:40:5e:8a:c4:96:ba:6e:f0:bd:f0:38:7d:eb:0e:
3d:6a:95:66:a0:7e:50:b8:32:52:83:5e:34:0e:83:
b9:a6:3b:4e:bf:a6:58:1e:2b:f3:be:53:3b:94:78:
db:8e:56:48:92:b8:12:d9:56:70:0a:78:31:70:cf:
1c:fe:46:73:99:c8:da:a6:0e:ee:db:df:f2:11:9e:
09:74:c6:f8:b8:8e:ba:e7:7d:a0:7b:5f:d7:b3:7c:
c9:e3:fa:47:4e:fe:bd:0a:73:80:9e:ea:c2:35:49:
a0:b4:8f:c3:f1:0c:a0:1e:a9:5a:cf:8e:37:4e:24:
12:28:c1:be:99:14:d2:55:55:e3:93:76:f9:20:b8:
a9:37:56:3e:e9:b1:95:89:a5:b9:40:84:e1:4b:f9:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:78:68:5D:1A:95:1C:F4:E7:5C:D6:C4:BE:3F:05:69:FF:C6:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92ab4212-d638-39d4-a992-6d28753ae646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.110.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:72:af:38:13:42:9b:9c:9e:2b:00:e2:b1:9e:1c:00:9d:db:
fe:ad:98:42:3d:9f:2d:ec:39:c1:80:75:82:17:92:04:5d:cc:
45:c0:7c:25:1e:df:c3:ef:4c:37:d9:7e:10:ce:dd:74:8f:ab:
9e:aa:5f:48:60:97:a7:20:c4:74:69:f4:1d:3f:60:c9:8e:77:
04:ea:f3:c8:07:04:4c:3f:6b:23:3a:f8:d5:31:10:08:8e:d1:
e3:a8:f4:5a:bd:2c:58:d2:77:13:7e:db:2b:8e:7e:5d:5c:88:
bd:44:26:49:75:9a:14:10:40:fb:c2:62:8a:70:6a:3a:7b:27:
d4:62:96:23:56:7e:ea:79:82:f7:2a:c6:46:38:62:04:8b:9e:
f4:33:c0:83:c9:7f:3c:15:03:7a:1a:9c:a6:98:0e:b4:9c:46:
bc:28:5d:28:5d:ee:16:67:4f:03:ba:33:b1:a5:a8:b7:ac:da:
6e:fe:b5:4f:79:6b:71:f0:47:03:55:68:9b:56:20:83:5f:50:
cd:cd:0e:90:04:e8:40:49:10:7c:8d:17:7d:d5:1c:4b:19:90:
cb:4c:76:38:46:9c:54:27:63:c5:0f:46:85:63:2a:02:68:a3:
7d:46:f2:54:c8:34:9d:f6:72:17:6b:e5:ac:28:60:32:1f:76:
5b:61:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:27 2025 by rpki-client