Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdca7298-4dd0-35c9-83b7-bf45630480c1.roa
File: bdca7298-4dd0-35c9-83b7-bf45630480c1.roa (raw, json)
Hash identifier: ETC6R6lA83eCq6d7SPkLeAxjP55v6r+xaHxJ3VJ3l3o=
Subject key identifier: 34:CB:35:AC:22:CC:67:A0:EB:E5:C1:60:86:4B:79:D7:E3:F9:D9:1F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584553331D1D454270E0348C81E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdca7298-4dd0-35c9-83b7-bf45630480c1.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 207.95.144.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:1d:1d:45:42:70:e0:34:8c:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=aea8b682-c563-430e-8d23-066f2e157e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:d3:35:13:3a:9f:e1:7b:87:bb:a6:14:0c:
ee:a0:4f:c0:0b:a1:2f:26:ff:c9:cd:8d:59:a5:46:
20:57:89:75:a4:a9:54:bb:48:17:71:eb:6c:ba:4b:
b0:bf:4b:64:46:f9:54:36:51:9f:1d:33:bb:5a:51:
fe:2a:4f:e9:96:62:d6:71:d6:9a:c1:2f:64:0f:93:
05:bc:8a:d0:cc:2c:66:2e:2f:6f:cb:62:7d:e1:c0:
0b:f7:85:42:4f:49:67:bd:8f:90:23:d5:77:bd:24:
29:64:d6:00:e8:c2:da:5f:29:84:2a:60:22:99:e3:
de:32:98:e8:6b:17:76:6b:98:7b:b1:b4:5d:28:46:
6f:20:a4:ba:d8:2b:3a:36:41:26:61:58:e1:10:1b:
d0:ea:78:d6:45:db:8d:b7:7d:42:57:61:ea:2d:38:
b9:e7:e5:b6:d0:8e:ff:a7:ac:97:80:00:17:eb:44:
ca:75:ca:24:e9:ee:be:e9:20:40:1f:00:7e:0c:12:
23:a0:ac:cb:64:1d:83:8e:ad:95:91:e9:ed:1f:5c:
46:4d:c6:80:9d:03:d8:88:88:61:06:e4:07:a6:27:
ee:98:48:25:6f:90:80:23:4e:ff:b5:1d:91:bf:d8:
83:22:3e:53:86:fb:b4:f4:ad:b3:fe:7b:66:7c:61:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:35:AC:22:CC:67:A0:EB:E5:C1:60:86:4B:79:D7:E3:F9:D9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdca7298-4dd0-35c9-83b7-bf45630480c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.95.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:46:30:4f:0d:ea:75:7a:40:9e:fa:83:c9:1b:d7:fa:e0:ab:
a0:44:c1:34:4c:a0:53:07:56:38:6f:ba:c0:58:b6:0e:33:d2:
ae:4a:f5:75:f3:72:65:19:4a:77:4d:66:86:c2:8e:29:00:3d:
21:19:a1:f4:07:19:8a:5c:b2:ed:b2:a0:13:fc:d5:6c:3d:03:
b3:77:0a:a7:62:ad:38:74:c5:25:94:76:33:48:7e:b4:fe:59:
38:e7:44:49:d5:e9:b3:36:f1:92:d2:cb:5e:29:a9:3d:40:44:
9f:9d:0a:ab:9e:59:bb:31:33:40:21:ce:64:e0:25:c4:01:ae:
da:69:cd:26:96:9b:5b:bb:40:01:f3:bb:b4:e9:d6:22:dc:7c:
87:40:50:3d:62:58:61:b2:a3:3a:4e:8e:89:dc:9c:e1:b2:c7:
f1:ef:93:fb:5c:36:90:9c:b2:b5:0b:5c:43:fa:18:d8:a5:34:
93:77:31:52:4a:12:6d:b7:85:7b:ea:37:43:73:2a:96:17:1a:
f1:1b:33:a7:1b:d7:83:2c:bd:e6:fa:84:c4:29:ee:c5:21:b0:
f0:bc:a9:4c:02:85:b9:8b:ed:5d:2b:b1:81:16:08:11:0c:68:
fd:2a:fd:4a:32:d1:90:ba:df:53:f6:81:2f:c7:fa:3c:e9:27:
78:08:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:50 2025 by rpki-client