Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7312ab3-559f-3ecf-887a-e62ba396d4cf.roa
File: e7312ab3-559f-3ecf-887a-e62ba396d4cf.roa (raw, json)
Hash identifier: 0xcD+Gxs5rgo58Inv/lyEEyxbThCXgAewV7nJx5dScQ=
Subject key identifier: 68:DE:B0:A2:9A:A8:16:FC:97:00:F2:FA:CA:CE:0E:44:A2:D5:0B:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F5FE4EFD728D4A45374E200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7312ab3-559f-3ecf-887a-e62ba396d4cf.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 204.194.168.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:5f:e4:ef:d7:28:d4:a4:53:74:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=1987db41-6493-4966-b367-19b81ca954b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:7c:ad:da:9a:88:a8:10:ad:fa:94:0e:ce:
33:4d:85:87:41:ef:ab:93:e0:79:88:f6:ae:d7:1c:
f6:39:ea:85:05:26:bd:47:a1:25:5a:fb:19:7d:1e:
7a:c6:6a:68:19:67:01:84:f8:a3:7c:07:48:4d:23:
28:99:c1:76:f9:b0:89:29:16:1c:b3:4b:ba:ad:31:
d2:9f:09:ac:c3:f6:7d:b0:0c:3b:5d:7c:32:16:09:
01:95:cd:76:e4:69:38:5e:48:27:45:08:58:f8:e2:
92:4c:60:8a:c5:58:dc:ff:1c:40:38:14:e7:37:fc:
d9:9f:57:0d:46:3c:f5:3d:b1:c8:e7:90:a4:71:eb:
fd:38:ac:db:0f:3d:9b:b8:19:5f:d8:80:1b:32:76:
d4:7a:65:b6:19:f8:2d:84:09:07:01:c0:c3:54:99:
e4:33:b2:97:13:ed:ff:c7:08:d8:49:2a:44:02:21:
05:40:30:7b:df:c8:91:96:4e:02:23:3e:92:0e:52:
90:85:8c:f2:be:bb:1c:ad:00:34:8d:ad:67:10:ae:
8f:9e:51:17:c4:11:5b:dd:57:86:9c:5f:bf:08:f7:
e4:6a:37:71:4b:1f:05:46:9e:ca:19:90:8f:48:d0:
ff:51:33:4f:c0:a5:a4:9f:95:ec:63:8e:32:4b:c1:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:B0:A2:9A:A8:16:FC:97:00:F2:FA:CA:CE:0E:44:A2:D5:0B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7312ab3-559f-3ecf-887a-e62ba396d4cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:42:3c:c2:c2:3e:d5:55:c7:a4:a3:b6:6e:53:fc:e6:3a:43:
55:08:d9:c4:5f:90:1e:7f:64:27:ee:c8:2b:6e:35:db:21:b7:
77:3d:ab:5c:40:66:8a:40:57:6c:c9:e8:92:98:1a:b1:ca:30:
ed:8f:09:f7:00:dc:97:b6:2c:2a:ef:d3:bb:44:81:78:20:5f:
dd:9a:6a:28:6d:96:29:37:d0:9a:31:08:3d:49:40:fc:1a:47:
c1:41:06:37:9c:8f:91:ae:0b:2f:8c:eb:7e:8b:61:07:1c:5d:
9a:d9:6a:c2:08:ac:6e:41:db:54:81:74:8e:a0:f5:1b:ea:ec:
d9:17:ca:25:0d:25:1a:82:07:d0:24:7b:65:45:a3:4a:8a:33:
cd:a2:ec:25:84:29:cc:33:2d:9c:e4:c5:3c:8a:6f:06:df:a4:
61:3d:64:ed:c3:7e:41:87:32:88:f2:cd:bf:88:36:f1:cf:62:
f3:72:a9:72:10:4f:46:f8:53:d2:f6:af:6c:17:58:f4:5c:d2:
c4:95:a2:d6:b3:fc:fa:83:68:32:d6:4c:b7:5a:95:cd:c7:60:
34:46:e4:b7:b3:67:55:d7:d9:b4:c0:8a:a5:ae:ee:f6:a1:a9:
d1:60:36:19:3e:dc:28:72:24:6f:dd:ec:23:b6:52:aa:6a:5a:
ce:ee:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:52 2025 by rpki-client