Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2e58233-dca8-3f97-a076-6a2bb1f1cdbd.roa
File: d2e58233-dca8-3f97-a076-6a2bb1f1cdbd.roa (raw, json)
Hash identifier: Xu/60rbdxmeD1at/qYihxjYaquPTdV8tM1D6mxoPRtw=
Subject key identifier: 65:AA:2C:2F:82:5F:CB:2A:3E:E1:B9:21:53:80:71:99:DC:AD:8C:AF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FD9DA8CAB3DB91B0A580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2e58233-dca8-3f97-a076-6a2bb1f1cdbd.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 72.243.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fd:9d:a8:ca:b3:db:91:b0:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=85f04c55-698d-492d-98a4-dcdd0149501c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:ab:63:7c:5b:a6:35:97:e8:09:48:52:1d:
a3:cc:de:53:a3:df:75:67:33:33:9e:1a:60:13:3c:
ac:16:7e:51:2a:0d:2a:e1:02:4b:92:19:68:f7:9d:
07:de:16:c2:a8:e7:83:58:74:6d:c9:c3:42:c4:47:
15:16:c4:53:c2:ae:d1:60:6b:97:79:40:be:bc:a6:
15:b0:38:fb:c8:c0:f4:e5:b3:28:09:d7:69:b6:cc:
d9:ed:69:c2:66:7c:9b:33:96:f0:2e:b7:e2:f8:ec:
35:42:56:81:16:a5:8d:de:29:d9:2a:0c:83:4f:14:
c1:60:1c:24:35:88:66:5c:d8:a9:7c:83:3c:1c:0e:
83:07:b8:8a:49:a4:76:94:13:5c:8c:bc:74:0e:5c:
16:94:f9:61:2c:79:c8:ab:0a:50:11:b2:77:a3:dd:
bf:8a:93:b4:2e:06:86:0e:15:45:1f:74:c4:80:7c:
cc:6c:fc:94:b0:73:d6:eb:da:0e:aa:22:de:f0:3f:
00:a1:30:a8:48:ce:f1:d4:54:a0:eb:3d:1d:67:4f:
f7:81:e1:23:8a:72:3e:05:18:48:18:34:22:90:37:
66:7f:d9:2a:8c:47:d9:9c:86:81:d2:f5:9c:72:98:
c6:8a:5d:bc:62:b9:71:93:be:c0:7c:c2:38:b3:5e:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:2C:2F:82:5F:CB:2A:3E:E1:B9:21:53:80:71:99:DC:AD:8C:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2e58233-dca8-3f97-a076-6a2bb1f1cdbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.243.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ce:a3:e2:71:b3:09:5f:08:75:99:28:df:a6:88:c4:58:be:
c6:5a:f3:87:5f:21:f2:48:0b:4b:4b:c1:00:d2:93:6e:8f:ad:
14:2c:19:97:ad:52:9e:bf:d9:61:07:51:0a:e3:77:5c:f3:87:
89:3e:ab:9f:b3:a7:aa:84:15:cc:1f:12:ad:f3:50:59:93:5d:
76:0e:64:29:4b:df:33:7c:60:9b:a8:00:fb:20:32:2e:a3:a3:
d1:7c:23:c9:f2:47:32:76:87:6b:25:41:c4:29:ec:93:ee:65:
7d:fa:3e:f1:9a:67:1c:4e:d8:5a:4c:77:86:4f:6c:4d:95:4a:
56:77:cb:5e:f4:ff:a5:1d:dc:0a:5c:27:4b:bc:7f:5f:56:8b:
01:69:31:9f:a4:24:2a:b8:ce:b1:bf:5d:3e:f2:6c:32:08:b8:
44:49:34:64:57:55:86:85:6a:1b:92:8d:03:e0:dd:d1:85:bb:
93:5d:73:25:1c:7b:1c:f8:20:47:15:06:61:2b:85:83:6c:db:
c8:80:a7:5a:a8:c6:b8:3d:f2:07:a4:e5:57:3f:cf:56:b9:ef:
bd:83:6f:d5:19:cb:85:8e:4a:e5:0b:12:41:c2:c0:9b:5e:0c:
8d:92:9b:61:05:d0:43:cb:0c:4d:ab:8a:a1:f1:09:1b:01:eb:
74:3e:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:51 2025 by rpki-client