Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98ea709b-6c13-383a-a1e0-123458503673.roa
File: 98ea709b-6c13-383a-a1e0-123458503673.roa (raw, json)
Hash identifier: pn+4zB2bnxMEuX69Mn336Y/Cqp20ycNmwH7sqp7EwHk=
Subject key identifier: 45:10:93:94:FC:D6:94:CA:46:5C:26:1E:E9:BE:86:E8:4E:C9:44:9F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550A1722DC686AF4EC0060
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98ea709b-6c13-383a-a1e0-123458503673.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 209.178.0.0/17 maxlen: 17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:0a:17:22:dc:68:6a:f4:ec:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=7895d1f1-3c14-4941-815e-f72ddfd40a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:59:f0:a2:c6:6f:19:26:35:71:5d:48:49:
57:9d:8d:4d:fb:95:f4:95:2b:bb:b8:1f:62:a3:11:
6f:e5:5b:52:3e:a7:3a:c0:9e:26:2f:e8:4c:3c:64:
c0:30:56:3a:a0:29:2b:aa:6e:77:93:57:7b:d2:9f:
15:ed:26:40:dd:d5:cb:46:d1:3d:52:97:7d:18:3c:
77:9f:60:8a:27:74:b8:e9:cf:8b:51:74:59:b2:f1:
67:a0:61:86:ed:3b:0c:09:6c:29:d9:e2:0c:42:f9:
61:81:87:cf:78:f5:07:ae:15:60:53:97:a3:68:13:
2a:42:3e:dc:2d:74:21:49:76:31:db:d2:65:c7:00:
83:06:ac:e1:98:3b:c7:54:87:3e:b9:1d:66:27:f7:
f5:f3:c8:04:85:98:c7:4b:4f:14:d7:30:cc:b0:56:
9d:af:43:b9:5f:f9:86:02:11:0d:2f:95:92:68:78:
ca:5f:b6:87:3c:91:b6:09:31:4f:9b:15:b2:e7:00:
10:29:11:1a:cc:82:c2:61:e7:8d:3a:3f:e4:5b:af:
5e:69:4e:60:75:55:32:bb:5b:13:23:20:66:2a:8b:
1c:9a:65:1b:3b:b9:9e:40:e9:1a:1d:bc:b7:7c:ca:
59:de:61:39:a9:a1:59:93:d9:45:b4:a1:71:6c:4f:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:93:94:FC:D6:94:CA:46:5C:26:1E:E9:BE:86:E8:4E:C9:44:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98ea709b-6c13-383a-a1e0-123458503673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:da:a5:df:3c:c7:a5:bd:de:ac:c0:f8:37:3c:15:e1:ff:4b:
b1:f9:ac:bd:22:6e:f1:e7:0f:91:85:52:fa:c9:9d:bc:f7:8f:
3c:d1:a5:fd:39:a6:45:c4:7d:e7:c3:8e:d7:e8:2a:5d:5e:14:
2a:a9:aa:b5:7a:f5:5e:fe:46:75:72:69:93:62:d0:70:ea:b3:
a0:6f:d0:12:f2:e5:e5:78:97:15:66:8e:52:37:54:10:a7:e8:
2d:ba:61:19:0b:7a:c4:d9:6d:58:4c:fc:c8:f4:84:62:19:e3:
ac:2d:79:00:69:90:99:dd:a8:a9:2a:25:0a:ba:42:32:37:1e:
3a:88:1b:de:a5:50:0c:d4:73:23:14:e3:e5:3b:38:db:a2:f4:
b5:90:83:3d:72:f2:91:23:46:59:8f:7c:3e:c6:22:de:32:cd:
89:4e:2d:fc:b2:21:5f:bb:b7:b4:b5:cd:95:55:20:ae:6b:03:
74:b3:51:9a:73:e9:ca:57:73:0d:fb:93:75:4d:74:21:6c:6c:
bc:37:9b:f2:8f:53:fc:9c:da:e3:4e:f9:e5:a6:15:32:38:98:
e7:00:2c:7c:3c:b0:1c:7e:f3:f7:3e:c3:a9:ef:f7:35:ad:60:
71:ea:e9:a6:e2:90:c7:52:fe:4f:a8:d7:40:bb:72:56:90:60:
2e:fe:b1:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQoXItxoavTsAGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
Nzg5NWQxZjEtM2MxNC00OTQxLTgxNWUtZjcyZGRmZDQwYTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq5Z8KLGbxkmNXFdSElXnY1N+5X0lSu7uB9i
oxFv5VtSPqc6wJ4mL+hMPGTAMFY6oCkrqm53k1d70p8V7SZA3dXLRtE9Upd9GDx3
n2CKJ3S46c+LUXRZsvFnoGGG7TsMCWwp2eIMQvlhgYfPePUHrhVgU5ejaBMqQj7c
LXQhSXYx29JlxwCDBqzhmDvHVIc+uR1mJ/f188gEhZjHS08U1zDMsFadr0O5X/mG
AhENL5WSaHjKX7aHPJG2CTFPmxWy5wAQKREazILCYeeNOj/kW69eaU5gdVUyu1sT
IyBmKoscmmUbO7meQOkaHby3fMpZ3mE5qaFZk9lFtKFxbE8ZbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUQk5T81pTKRlwmHum+huhOyUSfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOThlYTcwOWItNmMxMy0z
ODNhLWExZTAtMTIzNDU4NTAzNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0bIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHapd88x6W93qzA+Dc8FeH/S7H5rL0ibvHnD5GFUvrJnbz3jzzRpf05
pkXEfefDjtfoKl1eFCqpqrV69V7+RnVyaZNi0HDqs6Bv0BLy5eV4lxVmjlI3VBCn
6C26YRkLesTZbVhM/Mj0hGIZ46wteQBpkJndqKkqJQq6QjI3HjqIG96lUAzUcyMU
4+U7ONui9LWQgz1y8pEjRlmPfD7GIt4yzYlOLfyyIV+7t7S1zZVVIK5rA3SzUZpz
6cpXcw37k3VNdCFsbLw3m/KPU/yc2uNO+eWmFTI4mOcALHw8sBx+8/c+w6nv9zWt
YHHq6abikMdS/k+o10C7claQYC7+sSA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:26 2025 by rpki-client