Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce25e8c1-6b52-3bcb-a9a9-d17e49bf5352.roa
File: ce25e8c1-6b52-3bcb-a9a9-d17e49bf5352.roa (raw, json)
Hash identifier: a9dk0xKJxraSuVdA/dYadtvfwQZex9SoB7Z3rsy8dUw=
Subject key identifier: 10:46:90:E8:48:5C:00:B2:3F:3E:27:8B:9B:F7:8B:47:1F:15:81:F4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB44107D8FCF7F7B54B592380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce25e8c1-6b52-3bcb-a9a9-d17e49bf5352.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 68.232.112.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:41:07:d8:fc:f7:f7:b5:4b:59:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=272f2815-ab9c-4ca8-b6a8-42742bcc97e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:7c:59:53:54:2f:5c:8d:10:c1:66:83:41:
15:87:be:2f:d0:9b:c7:90:3c:12:7f:40:20:4c:47:
84:72:9e:dc:c2:5f:58:5c:9a:1d:f1:cc:0b:b9:f5:
37:e8:e1:91:14:32:12:58:af:b1:a9:f1:86:3b:62:
67:52:39:a5:4c:ab:cb:99:3c:dc:5c:f9:4d:78:43:
ec:b8:1b:81:82:66:86:4a:74:c9:db:8b:d6:0c:1e:
ae:05:b3:46:a6:cd:37:94:e4:2c:52:ee:8b:ba:16:
ce:e6:eb:aa:06:ea:7a:8b:d7:d7:64:4d:8b:c9:c3:
ef:27:09:d9:fb:0e:c4:aa:86:7b:05:b7:ae:f6:5a:
19:01:13:fe:73:95:28:ba:50:0d:8a:aa:da:86:a0:
ba:11:82:e7:fe:cc:c0:e5:30:1a:51:08:95:e8:c2:
04:fb:19:ed:3b:e0:d5:5f:8e:3b:40:1f:e4:e3:b6:
de:64:41:3e:1e:cc:a8:0b:a1:d5:28:72:48:61:e7:
a1:80:7b:74:00:11:30:37:29:04:db:b9:71:ce:89:
bd:e1:e8:d1:9d:f6:0a:b0:f2:dc:30:79:91:c1:3f:
52:1a:0a:5f:11:4f:ee:bf:c9:3c:7e:45:ba:b4:c0:
d4:6b:f3:58:58:8d:06:42:92:73:4e:52:50:85:ff:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:90:E8:48:5C:00:B2:3F:3E:27:8B:9B:F7:8B:47:1F:15:81:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce25e8c1-6b52-3bcb-a9a9-d17e49bf5352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:56:8a:56:bb:0f:98:5b:6d:25:a4:d7:c5:1d:5f:33:a1:e1:
0a:23:2d:f4:f3:ac:fc:59:e6:59:b4:5c:f0:1f:f0:05:23:b0:
0b:2d:1b:b6:99:4d:6f:f0:a8:92:90:74:a8:91:d9:8a:d1:6f:
fa:1d:94:17:62:06:40:12:15:c2:bf:18:4a:15:9e:d7:79:7c:
48:b5:02:cb:c0:66:d5:1e:73:b6:df:e2:fc:d8:5b:70:19:02:
6a:6d:f1:e2:19:bc:29:e9:b4:bc:fb:b5:b5:45:3b:c8:83:e8:
f9:87:e3:61:60:fe:c8:1e:a8:f1:9e:bf:62:8e:66:34:5e:87:
ba:c2:8b:ed:bb:c4:26:db:d8:54:e9:a6:7a:9a:d9:c2:6e:d5:
cb:55:4b:77:d0:77:70:6e:c1:a1:ac:0f:09:4e:fc:3a:79:a0:
eb:8e:69:70:d7:46:12:24:cf:2e:11:94:0e:ae:52:d5:41:1d:
73:d5:2e:9e:19:86:66:cf:dc:e3:45:65:76:cf:c7:90:17:c9:
df:de:96:06:85:81:26:9e:d0:5c:7a:5e:42:db:24:8a:6e:ec:
9f:ad:35:9d:93:67:c0:e7:f5:9e:9d:19:4a:43:d3:54:d5:2d:
d3:e4:af:b7:f6:b3:54:51:e8:f8:ff:28:27:98:91:fa:28:3a:
7b:57:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:39:21 2025 by rpki-client