Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5492fcc-8549-30e8-8c2c-05251c833153.roa
File: a5492fcc-8549-30e8-8c2c-05251c833153.roa (raw, json)
Hash identifier: GD8JWYTaEbmMSpOnTuU1fyWKgR3WcWcK+l7KSQ2e3w4=
Subject key identifier: FA:E2:5D:B4:6D:AC:9F:97:18:57:B2:C2:81:CB:37:E3:1D:95:DA:EF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F30A1FFA866ABE7BD148C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5492fcc-8549-30e8-8c2c-05251c833153.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 64.146.0.0/17 maxlen: 17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:30:a1:ff:a8:66:ab:e7:bd:14:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=39f086a0-f934-460d-a110-4eedbdb6e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:61:df:6f:df:46:46:a6:8f:55:56:ab:d3:15:
8d:99:cf:06:53:06:a6:8a:0a:e2:bd:c3:dd:3f:19:
45:a4:f6:df:13:e1:a3:42:a9:f0:6c:bb:4a:20:e1:
9e:f4:b5:d3:33:2b:dc:c3:ed:39:84:84:7d:fb:47:
70:5c:71:8d:55:cf:a7:06:ba:5e:4a:19:61:34:89:
b4:85:00:cb:e4:78:1f:12:f4:0a:73:e0:a8:d8:ea:
32:54:1a:b9:ff:bc:6a:7a:12:9d:0f:30:a9:4f:ef:
f0:4f:d0:19:7a:54:dc:69:39:59:46:ba:50:e1:ec:
6c:74:94:bf:ba:bc:73:3b:70:39:dd:5f:37:a2:0f:
b7:3a:88:92:39:f5:c8:ad:ea:88:29:5e:b4:53:ff:
17:45:13:19:4f:13:c8:ad:46:43:fa:de:a1:2b:6f:
bb:68:5e:48:7b:18:58:1a:16:cf:ba:91:d4:d5:52:
2b:58:c5:2c:20:06:e9:a4:d8:93:aa:8c:b7:1c:6d:
93:26:e2:88:3b:64:29:28:61:ab:97:63:52:e0:39:
a6:78:38:bd:61:bc:87:91:d3:9d:ac:2d:27:de:62:
38:c5:bb:e8:31:a7:00:27:af:bc:7d:79:96:82:43:
fc:5b:36:11:a3:7d:6a:80:02:d4:a7:07:cc:17:36:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:5D:B4:6D:AC:9F:97:18:57:B2:C2:81:CB:37:E3:1D:95:DA:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5492fcc-8549-30e8-8c2c-05251c833153.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.146.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:cc:5c:fd:9e:1b:cc:b3:80:77:36:6b:46:90:17:72:11:59:
52:e4:f1:04:d8:17:0d:7e:5e:14:43:46:dc:84:f0:3d:b5:ad:
a2:23:04:25:7c:0b:1c:f5:6e:08:68:2f:8a:2e:7c:a8:7c:9f:
60:c2:a7:da:31:e1:27:ef:a7:ac:fa:ce:9d:e0:87:85:1c:27:
77:27:da:f9:b3:1a:a7:cc:79:94:a7:3c:65:15:6c:69:45:1d:
79:3d:93:15:4f:09:7d:d1:d0:ea:07:c8:ec:f4:59:dd:f7:3d:
17:db:b0:62:91:3f:48:90:08:16:1a:0d:31:78:a5:16:55:1a:
96:8f:1f:f4:98:7d:a4:db:b2:80:a2:f5:90:33:5a:f2:1f:ba:
a0:e1:7f:17:03:de:17:e7:42:91:2f:cc:88:44:57:a3:04:4a:
0a:06:77:7a:51:77:e2:c3:4e:69:40:65:66:9e:fa:34:e8:dc:
73:eb:8d:4d:7e:06:1c:03:f4:69:93:fb:b4:18:bc:cd:77:e1:
b0:bb:ee:8f:dc:a0:4e:24:66:ac:45:cd:3f:ca:3e:20:e4:0c:
d9:7c:3f:04:05:66:a4:4f:93:ca:e5:5d:bc:10:61:a8:a0:bc:
23:d4:54:0e:ad:31:8d:f1:90:d3:3d:a2:fb:06:4e:47:b4:93:
3f:75:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:49 2025 by rpki-client