Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d29038fe-e48c-304e-b092-22699394b48e.roa
File: d29038fe-e48c-304e-b092-22699394b48e.roa (raw, json)
Hash identifier: Ne4NQxnA/mkYH0i5RlQkDHJeb2EuBGiSNBTZuMsgi5g=
Subject key identifier: A7:A8:7A:9B:4D:FB:16:2E:55:AE:75:46:3C:94:05:29:AA:A5:72:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551AB5A080187C442CE30580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d29038fe-e48c-304e-b092-22699394b48e.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 72.243.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1a:b5:a0:80:18:7c:44:2c:e3:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=3d87c496-8459-461c-a12b-9505baf7beea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:59:a2:ce:67:e7:3b:a9:cc:bb:cf:32:75:
ec:72:c6:72:f3:f6:b8:5b:b9:e1:5d:9b:a6:3b:f0:
df:a2:db:55:52:4b:84:9a:82:b4:45:c2:2a:00:03:
75:af:f3:b1:ae:94:0d:8e:6f:33:f1:de:7f:a9:05:
8b:e8:73:77:97:14:e0:79:ba:6e:45:1f:e6:a6:0a:
cc:7c:2f:00:44:5a:67:dd:ea:d3:a2:43:4b:76:19:
f7:85:35:ab:10:87:a5:f8:48:52:f3:c3:7a:c7:e3:
30:c6:a8:b7:fa:53:0c:99:50:7d:89:f1:62:22:c5:
80:a5:aa:99:fe:da:68:2e:8a:6b:aa:b8:04:44:36:
a4:29:70:b7:b9:84:e6:b4:eb:3c:25:b9:70:92:d1:
be:66:5e:1d:83:37:ae:0a:55:4b:a5:11:44:de:6f:
35:d7:ee:b2:2c:bf:8c:35:e9:a0:fa:4f:02:53:49:
a3:57:42:0c:11:a0:dc:c6:aa:fc:e0:ed:66:5f:85:
61:0e:74:19:6d:28:63:c7:66:20:2c:b8:c3:c4:3d:
06:2a:fa:aa:41:5f:21:38:42:20:73:fa:4e:91:2a:
02:d8:eb:6e:99:2f:ee:eb:f4:e3:39:11:20:44:78:
d3:de:66:66:fb:d5:f4:9b:f2:34:4e:a3:31:ef:50:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:7A:9B:4D:FB:16:2E:55:AE:75:46:3C:94:05:29:AA:A5:72:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d29038fe-e48c-304e-b092-22699394b48e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.243.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:99:8c:25:93:2e:2a:98:92:68:c6:43:21:04:8e:75:24:3f:
7f:3f:d0:5d:80:8b:11:fa:e6:e9:4d:e4:c3:fb:8d:fb:de:f9:
f1:6e:84:af:75:25:da:68:bc:c8:c1:db:85:39:27:1f:d7:77:
2f:81:c6:6d:1b:ab:d5:b5:ab:ff:01:eb:73:77:20:b5:28:4f:
bf:d1:aa:17:42:d0:f6:4e:76:f8:01:78:0a:bb:e6:6a:c1:fc:
eb:19:49:86:5f:a9:8a:d7:31:d6:72:59:d7:f1:23:4a:c9:da:
31:e5:6b:ed:dd:a5:cf:01:21:84:f2:17:7b:a9:2a:86:b8:27:
ed:eb:05:e0:fa:b2:42:79:21:37:d6:85:4f:de:90:69:f6:79:
56:84:5e:5c:df:b4:4a:b8:7d:3e:22:35:12:87:4c:d0:ba:e9:
e6:43:af:21:13:6a:f5:17:5b:f0:4c:6c:71:c3:56:e2:f0:8a:
57:8c:2d:0a:aa:0f:c0:49:53:61:8b:a3:6f:f8:82:49:c7:29:
02:91:2a:eb:5d:8a:89:05:2c:7e:89:85:84:74:46:9c:36:10:
75:52:92:da:28:6f:36:01:82:c8:b7:f9:8c:dc:2f:fc:6c:ea:
14:09:3d:07:6c:0a:a1:46:64:f7:43:d6:f1:17:cd:42:5b:be:
00:be:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:59 2025 by rpki-client