Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af1d9b4a-eae1-3623-a74d-af16231aeff5.roa
File: af1d9b4a-eae1-3623-a74d-af16231aeff5.roa (raw, json)
Hash identifier: QYjOL7oQChEikR2B4IyMlXCGiPzViDXW04LiWCscDrA=
Subject key identifier: 52:D7:0C:03:C2:17:63:61:9B:74:19:C8:10:1A:22:8A:16:C8:EF:56
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB200A839D21A5ED0DE5D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af1d9b4a-eae1-3623-a74d-af16231aeff5.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 216.80.128.0/17 maxlen: 17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b2:00:a8:39:d2:1a:5e:d0:de:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=9dd59f78-7afa-4d67-a411-c73260001bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:f6:6a:36:15:b2:f8:78:c9:00:7a:2b:e3:
ef:a5:e9:e1:d1:31:8d:b7:65:97:0b:c0:e6:13:1e:
c7:45:7e:0e:a6:dc:a1:d5:ab:e5:d6:0d:d4:92:4e:
9a:1e:64:4d:85:f2:12:48:5d:4e:11:32:59:e7:dc:
af:c8:77:ea:3c:49:e7:96:77:7d:1f:43:20:3d:09:
52:a1:d8:52:b9:39:a7:0c:dc:bc:d5:65:24:dd:d4:
d0:2c:7b:31:d0:ea:c6:cc:bc:4d:08:4c:8e:97:84:
c6:38:a2:91:cb:50:e4:9b:b7:3f:1a:26:69:74:41:
62:e5:e8:e9:62:a1:c2:e0:a4:c5:99:00:23:10:1e:
29:16:db:c4:e1:eb:32:e1:97:fe:98:a5:69:41:a0:
bd:97:60:73:bd:98:61:b5:c9:e3:27:2d:09:ef:3e:
52:31:9b:d4:8b:84:49:e2:42:19:0a:87:55:86:b8:
8a:02:c0:fa:b6:6c:0c:20:9e:e0:c9:da:db:a9:28:
34:46:12:0e:c7:62:2f:81:95:18:dc:fe:84:13:44:
71:f8:eb:9e:e7:74:08:67:40:d0:a6:76:c5:cb:71:
c9:29:d1:90:61:35:e8:65:42:76:31:f6:e7:97:3a:
ee:2d:a8:23:b7:76:2e:29:58:6c:d7:15:40:06:82:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:0C:03:C2:17:63:61:9B:74:19:C8:10:1A:22:8A:16:C8:EF:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af1d9b4a-eae1-3623-a74d-af16231aeff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.80.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:58:a3:25:ba:b7:20:1b:77:1e:48:66:cf:6f:72:d8:d6:ed:
ca:26:ab:97:8d:1b:95:bf:ea:6c:d5:ea:9f:10:61:cc:18:db:
0b:af:50:e7:7b:a1:ca:00:c7:e0:5f:80:ca:b6:fe:fc:2c:27:
bb:ba:cf:d3:1f:71:68:13:3a:79:c0:7f:b8:ba:2f:f6:63:6e:
c1:e3:ca:45:fa:41:ae:ee:e0:fd:c0:fd:b0:9e:80:78:bc:fd:
d2:1f:7c:ad:df:65:35:62:28:84:ef:1a:b4:70:9e:f9:67:16:
2a:e4:74:d3:fa:a6:5e:9e:2c:d3:e0:43:c3:a1:2b:b2:59:c6:
05:9d:ec:33:3b:38:27:11:f4:db:52:65:a9:e2:d7:a3:ff:3a:
89:6b:36:71:08:e6:13:3c:44:e6:4a:e5:06:7f:fc:d6:44:59:
f1:a1:76:77:d2:93:f3:dd:d9:c7:09:80:c1:aa:bf:58:5a:e0:
5c:fb:db:f7:59:6e:53:0d:ab:d1:30:45:94:ce:f0:c5:ca:6c:
d0:7e:03:93:b6:48:a1:ec:7b:ec:18:dc:03:a8:3b:47:07:e0:
35:76:6a:5b:78:bb:8c:06:59:72:b9:49:2b:38:0b:97:8e:ac:
41:91:27:16:ba:49:63:82:25:27:cd:f1:b7:2c:7a:ee:42:6d:
0b:ea:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:34:41 2025 by rpki-client