Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4355507-dd75-3b5b-9066-4ec763fb3711.roa
File: e4355507-dd75-3b5b-9066-4ec763fb3711.roa (raw, json)
Hash identifier: +nzYvK3tpPZwD89wsPR2pGKsEpAbyscPxs1dOajhURc=
Subject key identifier: AA:0D:10:F6:95:D6:49:D0:1F:B4:EB:9E:AB:E1:4F:92:3D:DA:F0:A8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0856C4545FAE2D03B9E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4355507-dd75-3b5b-9066-4ec763fb3711.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 209.248.128.0/17 maxlen: 17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:85:6c:45:45:fa:e2:d0:3b:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=2007f761-9ee6-44a9-a293-50e37df7ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:87:52:78:48:da:06:7e:48:fd:bf:d9:74:
4b:a3:0c:f0:e6:43:d0:ba:f9:8e:44:ed:74:ee:ef:
74:50:29:57:af:38:91:66:5d:f1:be:0c:a9:22:fd:
e4:e8:fa:f7:4f:8c:47:38:39:9c:48:cb:e4:39:40:
b7:e1:0f:f0:6d:f0:f4:d2:85:bf:f8:b1:ca:1b:2d:
76:ad:69:08:1e:cb:6a:44:02:52:32:24:c4:cc:ef:
1b:2d:e7:8f:d1:4b:7a:64:a7:bb:43:41:b5:94:1c:
6b:ef:51:f8:22:7d:64:1a:9d:e0:a3:a3:75:af:55:
f2:91:a4:67:a6:ae:b4:46:b2:bb:99:95:c4:7f:2d:
a3:09:98:d1:d1:e8:19:9f:9f:a5:81:0f:6d:ee:e1:
28:93:98:aa:a1:f1:a7:c9:61:1c:ab:26:de:66:32:
26:0f:f7:5a:98:51:c7:01:12:41:21:47:7d:c1:83:
99:ee:b4:e2:ce:fb:e1:d4:42:9d:28:a4:b8:7f:8c:
87:d1:2a:0e:7f:7e:b5:87:02:a5:ca:c4:0a:d9:29:
e5:62:e5:97:21:b6:a1:37:6b:e3:c1:12:89:b8:01:
d2:e3:03:2d:58:78:56:d2:fa:3c:7c:74:f1:a0:16:
07:97:a3:9a:3b:ac:45:cb:3f:8b:69:eb:8d:db:83:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:10:F6:95:D6:49:D0:1F:B4:EB:9E:AB:E1:4F:92:3D:DA:F0:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4355507-dd75-3b5b-9066-4ec763fb3711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.248.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:83:38:c1:42:0d:45:6b:17:cb:1a:16:7a:a0:57:4d:25:ac:
e4:eb:39:8b:3b:c5:f9:49:c8:36:fa:b5:cb:34:7d:c0:7d:12:
15:b8:07:31:1d:46:81:c7:7b:04:9b:97:1a:94:cc:9e:72:71:
d9:17:51:bd:6a:2a:24:48:ba:4d:ed:47:c6:b4:9e:48:37:66:
36:dd:1e:f4:55:ef:d2:93:90:b6:d6:f1:fe:a9:0d:da:47:d0:
38:35:95:3c:90:10:d4:3d:c1:21:e2:39:da:17:ec:ce:9d:e7:
80:18:3a:b2:6a:94:e9:cd:83:07:e6:a7:0e:9a:73:b3:d0:5e:
20:f5:02:d8:c4:92:cb:7b:fc:55:ec:ad:75:1a:4d:b7:e7:4c:
ff:84:7d:ee:90:cd:d4:c3:74:cc:25:3b:0e:1f:d1:5e:45:d7:
05:20:fe:c3:1c:0f:56:93:b5:fa:47:e6:94:d1:83:ee:4b:25:
75:55:0e:7f:24:1d:65:dc:6a:7b:2f:a6:6a:2f:2b:3b:97:f9:
8c:4e:22:79:15:9c:83:6f:e7:19:1e:eb:a5:c6:47:de:18:7d:
5b:3d:4c:c9:c9:d4:7e:41:d4:53:e6:8f:59:bd:7e:bc:e4:50:
f3:4d:da:c0:61:bb:e0:72:d8:e2:53:9d:d4:19:ac:1c:0a:78:
ac:d5:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:30 2025 by rpki-client