Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b07358f1-c4bf-3f4b-97cd-4137bb4253ed.roa
File: b07358f1-c4bf-3f4b-97cd-4137bb4253ed.roa (raw, json)
Hash identifier: TXE1bDfcc+y/QB641AEM5Y7TyaGqm0wFIStz8kbxobU=
Subject key identifier: EA:95:1F:FA:88:62:15:60:D5:FC:3E:90:44:78:2B:9F:7B:92:8E:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E08E5F2EB443BB15A46F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b07358f1-c4bf-3f4b-97cd-4137bb4253ed.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 27338
IP address blocks: 209.168.156.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:8e:5f:2e:b4:43:bb:15:a4:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=e18b9b48-f99d-4b28-a635-eda7d79485df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:ac:ae:4f:8b:75:de:32:84:eb:ac:bc:4d:
d5:15:16:bd:28:38:75:bb:56:f8:34:e4:2f:91:0e:
7f:02:f2:cc:ac:20:4e:f6:bb:b6:e3:4a:de:64:82:
fa:9d:a0:c9:ed:ac:31:72:e0:0a:30:12:ac:25:01:
fd:0d:3c:06:89:1f:24:db:13:dd:84:63:8f:e3:31:
de:67:a4:21:83:ce:95:1e:2c:f7:10:75:64:f6:09:
ab:31:cb:b7:67:9b:a7:4a:58:e9:a5:17:65:11:09:
ff:11:23:50:03:64:c5:a3:d1:b6:18:72:e8:42:00:
38:1c:81:32:2e:9a:0e:df:ca:42:6d:c9:38:c0:fe:
96:1d:55:79:e4:a5:23:c6:cd:f2:99:02:39:43:e7:
9a:19:aa:fe:c9:bf:35:c6:28:61:45:24:20:f9:b3:
c8:16:4c:37:07:83:70:aa:c4:39:5a:38:8d:4e:b9:
e4:54:5d:71:7d:fc:4f:7c:a5:00:af:f9:6f:c2:3a:
14:1b:77:35:02:d9:bf:6f:10:e3:93:91:2b:82:ec:
e2:87:a0:b2:13:88:9f:9e:6f:8c:7f:11:96:87:80:
c2:d3:65:da:1e:ca:fd:a9:99:29:66:e5:a0:f5:a3:
2f:6e:ac:b6:1e:0e:0a:0a:41:24:82:70:03:88:59:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:1F:FA:88:62:15:60:D5:FC:3E:90:44:78:2B:9F:7B:92:8E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b07358f1-c4bf-3f4b-97cd-4137bb4253ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.168.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:6c:41:f0:c9:f7:43:1b:cb:85:80:2c:65:dd:6b:f5:6c:05:
78:4a:17:24:8f:11:95:96:d2:67:a9:19:ec:d2:c6:17:40:ad:
18:cf:d9:c7:64:5e:24:10:54:df:29:a4:2e:77:67:2f:32:b0:
a5:70:1b:96:74:25:35:98:70:a4:65:4a:39:68:25:90:cf:86:
44:67:af:d3:40:0f:f0:99:d8:bd:0c:5a:ab:a3:8e:87:a1:06:
ab:74:7d:c6:a0:ef:a8:22:0b:b3:82:26:0d:c2:88:01:80:2d:
f0:d4:1e:2a:32:79:85:5b:aa:ab:da:c1:f0:eb:37:39:b0:48:
e4:55:ba:aa:5d:f8:2b:ea:da:df:9e:f2:7e:9d:5c:61:dd:0a:
19:ee:5e:55:e9:c9:77:be:4f:fc:c0:21:2b:d1:05:0c:02:7d:
b4:1e:eb:72:15:2e:aa:61:c7:44:3d:5a:3d:e6:d4:3d:ab:6e:
c5:fc:31:94:7d:5e:41:3b:7b:96:f9:fc:3a:00:6f:80:63:b4:
44:a3:c3:39:a7:52:69:60:1d:25:ce:e0:48:77:1d:d4:5d:24:
06:0b:fc:11:29:f5:37:e4:40:3e:0e:be:3a:1c:95:91:e1:51:
1b:4e:1a:79:28:f5:40:57:4b:b0:37:81:9f:86:49:46:2f:39:
e8:76:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:23 2025 by rpki-client