Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0435928-e422-34c2-9bbf-e65a8b872efa.roa
File: d0435928-e422-34c2-9bbf-e65a8b872efa.roa (raw, json)
Hash identifier: 8vY0Afk8/HJiiEki3PTg8p1r2uhZgPJWimS6cLdz4QM=
Subject key identifier: A8:96:9B:01:D3:FC:59:9F:C5:5B:3E:13:A6:AA:BA:20:75:F1:44:45
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E08E6E5FA9E44BE225E800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0435928-e422-34c2-9bbf-e65a8b872efa.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 27338
IP address blocks: 209.168.159.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:8e:6e:5f:a9:e4:4b:e2:25:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=aa6a51df-e21e-4c3a-99d4-ed8351697c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:2e:7a:ba:9b:88:7e:a6:e5:df:81:08:7e:
0f:10:8e:7b:22:1f:b0:a8:ba:85:5c:09:cc:f2:ed:
bb:bd:6c:0e:8c:7d:3c:a6:81:28:f4:9e:7c:9e:dd:
66:53:38:12:07:55:ce:c5:b0:79:9c:8b:c4:16:d4:
75:db:ac:48:e0:5b:1d:bd:ab:37:4e:ac:ca:00:37:
2a:be:79:0f:77:cd:86:57:8d:fe:24:9e:12:49:13:
08:d1:76:5f:c2:5b:09:1c:98:bf:99:94:f7:94:49:
aa:c6:5e:f3:22:01:9b:8f:83:bc:2a:b9:0e:7d:e3:
b4:57:37:0f:81:ae:a6:42:92:08:13:2f:fa:f3:a4:
62:fe:c8:d4:c7:c4:34:38:f6:91:22:23:68:8f:80:
3b:d1:9c:2e:11:4b:b9:73:e8:fb:45:8e:b8:db:4d:
5d:c8:ce:b3:8f:5c:fb:e4:ed:e8:2a:61:d4:79:39:
95:b3:1a:38:b6:8b:79:c7:00:2e:a3:0c:0d:cf:fd:
ef:58:53:54:26:14:ed:a7:b9:b6:57:16:86:21:f1:
ad:af:c7:97:2d:cb:fd:35:24:18:53:85:ad:e1:57:
24:f7:83:49:b0:d4:d1:42:4c:61:71:b9:5e:7e:50:
87:74:60:fb:ce:59:f2:af:aa:fb:75:46:39:3f:5b:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:9B:01:D3:FC:59:9F:C5:5B:3E:13:A6:AA:BA:20:75:F1:44:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0435928-e422-34c2-9bbf-e65a8b872efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.168.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:1c:2a:6d:d4:d4:ce:d7:56:9b:fe:3c:28:90:5a:9b:bd:47:
2e:c4:49:29:a2:24:d5:a1:40:99:7d:d9:3d:6a:fa:75:76:3c:
e8:ef:4a:2b:33:c5:9b:eb:98:1d:56:fb:8c:a6:47:dc:18:9e:
94:71:44:82:50:f0:d5:d8:e5:de:cc:84:ad:6a:0b:25:88:05:
f0:8a:3c:da:2e:7d:b6:dd:04:46:9c:95:97:b7:81:e4:2b:a6:
b7:2f:f8:72:26:0d:ce:eb:3d:15:04:70:8e:af:ec:23:68:28:
35:4d:cf:07:ea:74:86:30:6c:8c:66:8a:8b:e9:62:ad:ad:4d:
fb:6d:97:ac:98:ac:1c:5b:7f:9a:91:18:53:0b:3b:47:e5:43:
c3:8d:ad:c6:0c:c2:99:1f:db:df:5e:be:a1:1c:fa:5b:6c:7c:
6d:58:84:8e:55:e0:63:32:2f:ca:cb:b8:cd:f5:51:5b:12:f4:
86:2e:8c:04:a6:e3:ca:05:68:75:5f:c6:00:0f:f4:68:ba:5a:
5a:d5:bb:dd:75:87:f0:eb:ff:45:93:2f:48:ae:95:01:34:25:
18:8b:7b:cc:4d:2a:96:df:dd:74:01:1e:aa:14:8f:23:a4:ca:
32:22:20:13:2e:9b:5b:cd:93:4c:ef:7d:1a:b5:de:ce:b8:a6:
c0:19:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:36 2025 by rpki-client