Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb812fe-2223-38af-847d-a3531dde3c91.roa
File: dfb812fe-2223-38af-847d-a3531dde3c91.roa (raw, json)
Hash identifier: RYprAq1DFsRD8ejq2lIyoe+Y0dyaB7n+lIngJNJUhXc=
Subject key identifier: 52:BF:F8:CA:F3:78:E0:42:D4:22:2A:74:C4:9D:54:25:99:F1:31:AD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FA987FE0D6EA882062C5D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb812fe-2223-38af-847d-a3531dde3c91.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 207.94.208.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:a9:87:fe:0d:6e:a8:82:06:2c:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=3f492334-eea4-4460-ad8b-ff6ffec015f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:2c:b9:9d:6e:d1:81:dc:64:68:f7:ff:82:
3d:07:aa:4d:fa:e0:eb:79:98:64:71:f8:48:69:e9:
c5:fd:35:53:04:75:77:8d:c1:56:38:03:c4:fd:ef:
2f:f1:59:a7:94:4a:ba:fd:d2:2d:47:11:0e:5f:ca:
04:fd:16:38:a6:e8:90:74:e7:73:85:ff:06:ae:8f:
26:52:29:94:f2:f0:e7:d9:2c:67:e8:02:d5:7d:ec:
05:aa:2f:51:8d:6a:a8:55:fe:b3:58:3f:b5:64:96:
4e:3c:1d:0e:6c:51:c9:62:be:56:a3:fd:96:33:98:
1b:48:fc:f4:40:16:a9:ea:be:71:cd:71:97:ee:aa:
66:06:75:7e:0f:ed:6f:a9:3d:ae:5a:61:bf:a1:64:
2a:d2:65:14:3b:9e:fd:0d:b9:58:c6:f9:c6:5a:dc:
f4:bb:40:53:58:4a:bf:30:8a:f0:74:dd:6a:0d:6b:
10:10:f9:d5:0e:ed:f5:46:b5:27:88:d1:b1:56:1b:
17:7a:93:73:7a:81:f5:2b:f3:67:fa:f3:e1:bf:a2:
ec:e5:96:96:40:a0:c9:69:ac:3e:bb:b2:3f:8c:48:
e2:61:57:b9:d8:e7:72:51:87:1f:90:c6:f9:72:4e:
ea:c3:da:ec:1e:a5:95:3a:4a:64:0c:f3:82:b9:c8:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:F8:CA:F3:78:E0:42:D4:22:2A:74:C4:9D:54:25:99:F1:31:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb812fe-2223-38af-847d-a3531dde3c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.94.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:d3:aa:39:50:ac:65:db:10:d8:d9:28:f0:b5:ab:e9:54:f6:
77:bd:c3:0a:eb:ac:f7:4c:d4:f3:16:13:60:81:91:d8:aa:67:
b6:cc:ed:c1:c2:c1:34:44:1e:88:ae:8d:8b:6d:9b:2e:bb:23:
ff:2f:48:45:c6:59:a1:48:17:38:87:f7:c7:1d:59:42:79:fe:
6d:ca:e5:3f:95:d8:f8:85:bb:8d:e0:d4:54:a5:f5:4e:31:47:
cd:8d:bf:19:0f:47:9e:15:f7:cf:48:84:a8:2b:b4:f1:6d:5f:
a7:1d:bd:50:1f:cc:29:dc:c8:44:4d:82:05:d6:ab:fc:01:75:
8e:f7:23:56:bd:44:7c:81:eb:95:cc:3f:f0:ed:27:20:2a:ff:
ac:3b:06:e5:f0:6b:c6:13:d4:cb:79:30:1b:43:9c:e0:62:33:
7e:5e:0c:a8:d3:d7:cc:43:f1:80:23:c2:bb:7e:a1:c3:30:a9:
86:d6:72:56:08:f6:b5:f9:ba:37:04:cd:f6:cb:09:d2:fc:7c:
7d:e2:c9:0a:d8:49:a3:f8:33:2e:78:a5:ca:51:c8:ed:45:70:
00:6d:eb:57:d8:11:25:1c:8c:05:3c:c9:fd:3b:51:2c:89:4d:
20:60:e2:fe:c7:c0:be:de:12:19:5e:9a:cb:83:8e:90:a6:a5:
8d:e5:2a:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PqYf+DW6oggYsXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
M2Y0OTIzMzQtZWVhNC00NDYwLWFkOGItZmY2ZmZlYzAxNWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDYsuZ1u0YHcZGj3/4I9B6pN+uDreZhkcfhI
aenF/TVTBHV3jcFWOAPE/e8v8VmnlEq6/dItRxEOX8oE/RY4puiQdOdzhf8Gro8m
UimU8vDn2Sxn6ALVfewFqi9RjWqoVf6zWD+1ZJZOPB0ObFHJYr5Wo/2WM5gbSPz0
QBap6r5xzXGX7qpmBnV+D+1vqT2uWmG/oWQq0mUUO579DblYxvnGWtz0u0BTWEq/
MIrwdN1qDWsQEPnVDu31RrUniNGxVhsXepNzeoH1K/Nn+vPhv6Ls5ZaWQKDJaaw+
u7I/jEjiYVe52OdyUYcfkMb5ck7qw9rsHqWVOkpkDPOCuciTwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK/+MrzeOBC1CIqdMSdVCWZ8TGtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZiODEyZmUtMjIyMy0z
OGFmLTg0N2QtYTM1MzFkZGUzYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz17QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbTqjlQrGXbENjZKPC1q+lU9ne9wwrrrPdM1PMWE2CBkdiqZ7bM7cHC
wTREHoiujYttmy67I/8vSEXGWaFIFziH98cdWUJ5/m3K5T+V2PiFu43g1FSl9U4x
R82NvxkPR54V989IhKgrtPFtX6cdvVAfzCncyERNggXWq/wBdY73I1a9RHyB65XM
P/DtJyAq/6w7BuXwa8YT1Mt5MBtDnOBiM35eDKjT18xD8YAjwrt+ocMwqYbWclYI
9rX5ujcEzfbLCdL8fH3iyQrYSaP4My54pcpRyO1FcABt61fYESUcjAU8yf07USyJ
TSBg4v7HwL7eEhlemsuDjpCmpY3lKkw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:30 2025 by rpki-client