Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0aab615-c899-336b-9afa-450a86bb88dc.roa
File: e0aab615-c899-336b-9afa-450a86bb88dc.roa (raw, json)
Hash identifier: dirnVSxeaKCpmNYXUY4pGKOpOypPW4DS6fUKWrn9uw8=
Subject key identifier: 2C:59:19:F5:D7:3E:CD:2B:AF:71:AD:B1:29:D2:98:17:8D:E8:2E:FA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FACD5CB7C085F16E82648F8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0aab615-c899-336b-9afa-450a86bb88dc.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.52.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:d5:cb:7c:08:5f:16:e8:26:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=4ad359f3-a712-47d8-a398-19ddbcc711bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:c6:5e:90:96:e6:5e:45:a9:73:db:e7:fe:
61:25:93:22:08:55:6a:15:69:bf:10:cd:fe:9c:f8:
0f:36:9d:21:4c:77:29:a3:71:4b:17:03:e1:3e:3c:
f3:94:c3:da:da:b2:56:85:fb:9b:16:26:ac:09:e0:
af:83:ef:2f:49:11:96:b5:a2:bf:ce:a6:bb:87:b0:
b2:09:d4:d7:2d:4b:7f:52:43:eb:f6:85:3d:a3:df:
1e:1c:9f:46:c7:0d:ca:27:9f:b8:aa:80:f9:4a:b5:
44:39:80:20:20:2c:7c:2d:9f:fe:36:ab:cd:06:73:
28:74:4d:76:53:e4:ae:7b:30:68:92:6b:ee:f5:0e:
29:e4:64:e5:21:ac:e0:a9:8c:51:cf:da:ca:96:c9:
a1:09:f6:40:80:58:07:63:6a:07:83:62:75:6f:95:
11:3a:6e:04:ce:a6:8d:ad:ba:e2:15:c1:9d:e7:44:
c2:d6:ff:fe:71:6c:e4:43:fb:a0:bc:8f:67:91:c2:
e7:5d:da:d0:16:b0:2d:50:b2:90:9c:87:35:23:cf:
8e:35:c8:13:da:fd:04:35:ce:67:26:84:14:5d:0e:
bf:6d:8e:ce:98:be:44:bc:4d:73:cb:bc:9b:b9:db:
8b:05:0a:69:7f:69:1c:37:ae:cf:16:10:65:73:25:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:59:19:F5:D7:3E:CD:2B:AF:71:AD:B1:29:D2:98:17:8D:E8:2E:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0aab615-c899-336b-9afa-450a86bb88dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:74:93:59:85:ae:48:a0:29:65:78:31:19:2c:53:b3:c9:29:
57:04:4a:66:46:fc:d1:a1:fd:33:21:f2:8a:3b:1e:8d:35:75:
94:c6:21:80:ee:07:a7:11:d4:04:8b:72:e6:68:c2:e4:73:8c:
c8:8e:c5:71:51:3f:87:4d:8f:cc:de:c1:66:7a:52:34:2d:e5:
fa:2c:11:c5:d6:54:77:ed:74:34:f7:04:5a:f3:30:8a:79:6a:
9d:1c:b2:29:ea:0a:f3:9e:c4:62:70:88:df:ad:ff:d0:52:7d:
2d:79:f8:f3:3b:9e:d7:b6:7c:98:35:c0:c4:a8:2d:33:37:98:
14:cf:53:c8:54:06:05:20:b3:20:74:85:28:c7:e9:e1:9b:d4:
3c:d1:e6:7d:42:bb:26:82:95:b0:07:03:9b:03:43:06:58:c6:
1a:77:6c:8e:8c:7a:25:48:78:1f:76:fe:63:27:94:b0:90:07:
c2:73:f4:46:60:c6:c1:3c:43:66:1c:b8:a1:16:7e:e1:2c:90:
2a:4c:c5:8e:6e:1f:40:6a:c9:eb:c6:3f:0e:25:1b:c5:7f:1a:
e0:d6:50:d2:cc:e0:6f:8e:18:49:07:cd:f0:f6:d4:90:33:0c:
6a:61:f6:fb:42:11:e2:d2:b0:bb:4b:dc:e6:0c:cc:93:16:98:
24:ed:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:08 2025 by rpki-client