Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6db5aa7-d0e2-3482-a3bc-a06235ec6896.roa
File: a6db5aa7-d0e2-3482-a3bc-a06235ec6896.roa (raw, json)
Hash identifier: ehod3OQvDtGl1RXBQ/ayHItrktKofiGOMqjL7K5o9cE=
Subject key identifier: BD:D9:20:BD:29:67:19:50:3F:85:E4:D5:E0:4A:99:64:A8:94:B7:22
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858479013BB451FE4FBE0101F4F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6db5aa7-d0e2-3482-a3bc-a06235ec6896.roa
Signing time: Wed 16 Oct 2024 17:56:07 +0000
ROA not before: Wed 16 Oct 2024 17:56:07 +0000
ROA not after: Tue 14 Jan 2025 18:56:07 +0000
asID: 7029
IP address blocks: 24.110.8.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:90:13:bb:45:1f:e4:fb:e0:10:1f:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 16 17:56:07 2024 GMT
Not After : Jan 14 18:56:07 2025 GMT
Subject: CN=9f122ba8-342d-4c05-8799-c2e1fcc9db4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:6f:98:aa:72:72:cc:28:61:e9:4b:7e:db:
83:09:7d:7c:55:5e:ca:36:86:82:aa:93:75:57:c3:
b7:d4:62:e5:42:fa:65:97:79:25:c3:c2:81:6e:5c:
a6:84:9f:67:a1:46:42:da:b7:17:c3:0d:57:8c:2c:
2b:29:e3:83:2c:ec:2d:2b:16:ea:f0:0f:dd:29:22:
46:1f:e7:f4:fd:6a:68:50:d5:db:dc:91:09:01:ca:
90:db:d2:8a:af:65:84:ac:02:ce:47:7d:7c:2c:90:
c9:d6:59:34:b2:0b:44:12:5d:a0:f2:69:38:e2:a7:
39:79:0f:2a:dd:04:78:f5:7f:f9:bb:af:70:b3:64:
59:46:63:ef:62:da:d8:3b:7f:65:b1:d3:9c:02:c4:
26:3a:3a:a1:86:10:55:96:90:c2:9c:d7:88:2b:5f:
5f:4e:b4:e7:f4:6b:bf:a4:3c:0d:66:76:2c:ec:03:
c0:61:fe:02:fd:47:e3:b2:a0:a8:23:34:74:1a:c2:
38:fc:4a:17:6a:02:ce:b4:4d:00:42:ef:b9:08:73:
4d:f3:1e:06:b6:5d:7c:7c:72:8c:4a:cc:08:bc:ad:
16:02:23:28:87:73:71:7b:e1:c7:5f:e8:70:71:74:
63:44:d1:ef:7a:c8:6d:b1:e8:d0:c8:78:9c:57:e5:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:20:BD:29:67:19:50:3F:85:E4:D5:E0:4A:99:64:A8:94:B7:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6db5aa7-d0e2-3482-a3bc-a06235ec6896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.110.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c4:71:5e:df:cb:70:af:bd:3f:28:92:ef:19:70:c9:4c:79:
1a:d4:e4:dc:7b:35:e7:a1:2b:f6:98:8f:f8:14:c0:40:58:fe:
7e:2e:9e:6a:9a:d0:19:81:88:fa:7d:dd:ac:ec:a0:5b:2c:0b:
22:7b:13:4d:d2:67:1e:5d:03:d4:19:4a:0c:1c:1c:cf:c4:07:
34:d5:72:bf:f9:2b:1b:b6:04:bc:e7:8a:be:0f:f7:c4:9b:6a:
04:89:f1:91:2c:07:0c:44:e9:27:a1:39:22:61:1f:3e:c4:ea:
b7:5e:06:f9:07:23:1c:c7:fb:5d:ee:ce:89:c1:6d:f5:cf:6c:
84:50:fc:96:7d:87:be:6e:fa:49:cf:98:61:4f:fa:d0:23:30:
d5:8b:5a:5e:89:de:c6:4e:24:9e:52:a8:09:db:4f:4f:5e:de:
24:69:8b:1d:fe:5a:ff:0f:bf:c9:83:f1:81:3c:1d:65:b5:40:
a3:91:e3:72:c9:06:fc:89:a4:52:c3:7e:2c:e2:de:68:92:97:
8d:29:5e:63:95:c8:d2:be:c0:68:6f:f1:3b:0b:36:d1:d7:40:
55:fa:5f:21:0b:f7:76:5a:3a:81:1b:0a:93:c5:cb:0b:c5:64:
c2:f3:0b:cc:16:15:df:ef:07:d3:07:bc:3e:4b:13:5e:c2:19:
9d:dc:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:07 2025 by rpki-client