Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b628637f-7aa4-3436-a83b-0db92946bde3.roa
File: b628637f-7aa4-3436-a83b-0db92946bde3.roa (raw, json)
Hash identifier: LH94mhDVwYC+PsIsbJTuaJA83FrK0MujPaaY8jT3iTM=
Subject key identifier: C6:B2:E8:A9:CC:82:FC:C5:3A:99:3B:35:FF:B2:15:DE:CC:B0:AF:E5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551B3C0F424800A8EFD97E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b628637f-7aa4-3436-a83b-0db92946bde3.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 29877
IP address blocks: 74.221.248.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1b:3c:0f:42:48:00:a8:ef:d9:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=cc209dbe-0aae-4d37-be43-ccc88a2cf09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:7c:f8:15:5e:e6:77:c5:07:2e:e4:ff:13:
c7:19:51:a1:75:5b:30:e1:85:af:9b:f2:23:03:7a:
92:59:d5:27:e7:ba:10:a6:71:8a:59:41:1f:b7:17:
ea:a4:29:e7:cc:37:2f:9b:49:88:b8:6f:08:45:aa:
29:99:f9:fe:9f:5f:58:77:0e:82:e6:db:69:9e:7b:
0d:e0:df:fe:a1:bd:d6:1e:56:bc:10:54:e9:34:07:
f3:f2:46:90:a0:91:3d:a0:34:3a:df:b5:9a:56:1f:
fc:05:5b:51:92:a5:b3:78:58:18:c8:98:83:9c:97:
4f:16:f0:f0:07:d6:ea:b0:96:f1:36:70:86:e2:1a:
95:59:0b:7b:56:2e:81:d1:60:45:43:f3:a8:26:a0:
91:26:ab:5d:a0:6b:12:d4:c0:77:25:91:ab:54:15:
a2:f3:70:34:eb:ea:c3:d4:a9:99:2d:a6:cb:d1:b8:
d3:d7:b2:81:dc:a6:ad:b8:7c:79:5c:3b:13:c4:1e:
a7:46:39:d8:31:4e:eb:40:1f:19:35:ee:75:67:6c:
05:6b:d1:3c:d1:68:9c:fe:a5:12:0e:00:84:b8:92:
d8:c1:7c:1a:1d:88:a5:38:42:47:00:70:c8:0b:ad:
fb:69:a5:84:ac:6c:ea:fb:bd:32:db:04:ef:7d:5c:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:E8:A9:CC:82:FC:C5:3A:99:3B:35:FF:B2:15:DE:CC:B0:AF:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b628637f-7aa4-3436-a83b-0db92946bde3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.221.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:38:69:bd:8b:e8:3a:c2:4a:38:d5:3d:7f:3c:17:21:17:d4:
82:77:0e:f1:cb:36:a5:19:5a:44:c6:50:a9:fd:b6:bc:39:5d:
5c:38:0e:b1:ee:f8:dc:e2:5c:96:11:51:52:15:e4:dd:43:ca:
54:62:f9:f2:82:91:3e:04:fe:a2:a3:87:4d:2e:79:3c:aa:a7:
ef:12:41:b0:c4:c8:46:d9:c8:b8:8f:ef:6e:61:03:26:33:d2:
7c:bb:23:b3:26:fb:43:2b:c9:af:7e:dc:d6:07:69:50:cc:e7:
0e:b6:0f:d9:be:c5:b0:3a:53:9a:d5:3c:19:c7:df:13:0a:01:
0a:60:07:13:04:a4:8a:f5:f4:bb:c0:ac:ec:3c:6c:67:c8:fe:
1f:7c:a9:8a:1a:ef:b0:07:7e:15:07:46:3c:d5:72:c0:be:40:
8a:81:63:3d:1d:52:0b:ca:06:f5:59:9b:76:5d:87:79:19:94:
96:62:31:a7:6a:cd:97:65:1b:3f:4b:29:74:c3:f6:f0:07:3e:
46:fb:c9:b0:86:3c:2b:5b:11:4b:74:02:bb:3a:75:86:90:c1:
84:6a:e1:dd:09:fa:ce:67:76:e8:17:ee:71:c8:da:e6:cd:be:
4c:99:5b:a7:e2:f6:60:79:ca:47:cd:33:10:60:fa:d0:08:5d:
11:75:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:29 2025 by rpki-client