Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9831ee5e-e76e-3ba8-a68d-81b830ebc602.roa
File: 9831ee5e-e76e-3ba8-a68d-81b830ebc602.roa (raw, json)
Hash identifier: 6Cgzm3CO67gAVBbY5/dXbdjWibAjiyUo8TKAOWMOI+A=
Subject key identifier: 80:01:F8:30:58:46:F5:16:48:CB:9D:DE:BD:AF:C0:C4:78:E6:D2:0C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551D5ED2CEF7D8B5D75063E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9831ee5e-e76e-3ba8-a68d-81b830ebc602.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 32806
IP address blocks: 198.211.94.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1d:5e:d2:ce:f7:d8:b5:d7:50:63:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=998678f6-6d40-4cfd-aa8e-0bc92b22dc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:ea:b1:58:86:20:c4:e8:9a:ef:b5:6c:87:
c6:12:91:90:3f:cb:e9:0b:28:e9:c7:0b:d1:8a:22:
95:a1:99:b9:0b:9e:c8:91:93:e8:f3:42:9e:8a:99:
af:ea:f2:4a:96:06:cc:3d:ab:61:96:12:a0:e7:0d:
e9:df:2a:89:13:68:ae:92:b7:17:50:6b:a6:0d:57:
49:e2:f9:9a:56:0c:ac:c2:ec:73:33:25:94:53:8a:
30:82:af:38:d3:9b:2c:dd:4e:22:19:b9:81:a1:db:
5e:f7:cc:32:a6:42:5b:02:74:c7:6d:6d:ea:10:90:
fb:b5:12:38:05:fa:2e:53:a7:d8:63:a9:ca:06:c7:
a7:12:fc:c0:4d:2c:ad:68:97:24:14:99:27:2e:ee:
7a:19:0a:71:84:05:10:dc:40:6b:3d:05:1d:0c:37:
ee:c2:ce:6b:32:b5:c2:a6:3c:bf:c7:a6:ce:d3:28:
76:ba:eb:35:f8:78:55:bb:38:ae:47:b9:d4:f3:e8:
0f:cb:96:a7:77:b7:02:25:81:7b:ef:bf:2e:ee:f1:
56:a8:44:32:be:a1:29:7b:54:22:99:8f:57:f7:4c:
53:37:64:52:a7:18:bd:67:6d:a3:35:55:1c:e0:4c:
43:b5:de:81:f4:8a:f5:1f:ed:31:e7:88:e9:5c:7e:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:01:F8:30:58:46:F5:16:48:CB:9D:DE:BD:AF:C0:C4:78:E6:D2:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9831ee5e-e76e-3ba8-a68d-81b830ebc602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.211.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:9e:d9:e3:39:50:73:35:fc:65:13:6d:7d:a2:9d:22:25:ee:
20:f3:80:bb:e6:ed:d1:c3:2f:6d:32:c2:37:9e:b6:46:fa:36:
73:c3:db:a8:25:c0:1b:e3:6d:ea:e0:80:e9:c1:cd:a4:fb:a6:
24:cb:16:ae:00:17:d0:c7:e0:8a:4a:bd:fd:f1:c2:69:77:fe:
7e:04:0b:31:84:35:42:23:19:bc:fd:8d:10:ed:55:b4:3b:cf:
fd:e3:95:2b:bf:22:92:06:ef:0c:e9:80:51:ce:2a:00:29:f5:
0c:c7:8b:03:d8:f8:64:37:80:f8:20:07:6b:fa:31:e9:f2:5a:
ba:65:2c:9e:6e:29:a9:8a:4c:53:ef:b0:c5:dd:73:38:ef:8f:
b1:ba:fa:96:be:df:79:5c:bf:7e:6e:6b:cc:e4:b7:f7:c6:79:
21:0a:84:bf:be:e8:63:cf:37:54:bb:d5:6b:61:a9:51:2c:20:
96:ef:e5:51:0d:d5:5e:98:54:6f:8a:ac:90:6b:ad:35:ae:dc:
bc:67:7e:d7:a1:d5:62:88:70:b2:1f:21:06:25:55:b3:90:6e:
f1:f0:31:b2:3b:9e:76:16:8a:85:fc:36:06:84:fd:ba:95:b9:
74:3a:93:ee:54:39:75:af:a6:9a:9f:00:3e:1c:57:1c:5b:16:
d9:c2:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:24 2025 by rpki-client