Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74d4a89-fc97-3a42-a2d7-677e029049fe.roa
File: f74d4a89-fc97-3a42-a2d7-677e029049fe.roa (raw, json)
Hash identifier: seCgg9AYxRI+LZdQ+EOZkgbJuxuOFWBDso9oZlIOAB8=
Subject key identifier: 71:C0:99:9B:03:E1:24:58:15:C7:D0:52:CA:B9:A2:93:AF:CE:82:4F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E212CFCBB6ED268F0B9200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74d4a89-fc97-3a42-a2d7-677e029049fe.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 62583
IP address blocks: 207.8.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e2:12:cf:cb:b6:ed:26:8f:0b:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=eba19d81-3b80-4891-8b5b-7498af416031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:c9:c9:e1:d4:43:43:dd:92:52:65:29:06:
d1:87:47:50:c1:97:00:66:50:44:cd:8f:0b:a9:76:
2f:01:25:6b:58:53:04:00:8a:cc:18:7a:89:84:14:
0c:70:e6:a4:4f:42:55:5d:1f:5f:9b:c0:9a:1e:1f:
cb:ec:49:e7:fd:35:7e:62:9a:88:eb:64:65:12:f7:
57:92:4e:09:ba:74:a8:a8:58:e2:27:cf:13:17:34:
c6:c7:e2:6c:14:ec:52:26:7e:12:63:af:a9:25:2b:
27:f6:f8:0d:f8:93:fc:c3:fe:35:45:e8:0c:90:62:
2b:3d:7c:fe:02:f5:37:4e:04:cb:4b:82:86:ac:80:
59:16:45:c7:7f:20:d7:ac:77:d8:c7:f2:0e:a1:a8:
d2:f4:53:24:fe:22:3d:9c:a7:80:4f:76:7f:88:e6:
d1:e0:7d:0e:3b:61:0d:35:7b:d4:f7:5b:66:63:3e:
0f:4a:90:09:65:51:41:f7:77:d4:c9:d3:a2:44:9a:
79:bf:9c:15:3e:b6:75:ba:26:d6:05:01:32:c6:1d:
cc:a1:0f:b1:0a:4f:89:a1:c8:f3:45:9f:0d:95:26:
db:e5:99:0f:e7:32:5a:c8:75:6e:43:17:9d:a2:a7:
fc:47:11:54:46:81:12:a1:d2:07:e7:86:9b:d0:86:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C0:99:9B:03:E1:24:58:15:C7:D0:52:CA:B9:A2:93:AF:CE:82:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74d4a89-fc97-3a42-a2d7-677e029049fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.8.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:87:a3:10:fc:58:f7:df:06:ff:9b:7c:e6:d7:f8:e4:51:bf:
bf:91:28:fc:b3:f5:f1:c7:e3:82:ce:20:59:4e:ec:96:b2:3e:
9b:b8:28:68:7c:92:bf:c7:41:83:62:3a:27:ef:54:22:d4:34:
ae:6d:07:31:c4:d3:aa:24:b1:59:6a:4d:ad:92:c6:6c:24:a6:
85:76:31:6c:3d:4a:1d:7d:af:49:56:b1:50:57:73:78:94:1d:
96:36:1d:72:7a:db:ac:46:16:34:a5:eb:43:11:5c:c1:7d:ec:
53:85:10:85:a4:b1:73:dc:90:43:74:81:72:a3:87:fe:e3:9b:
d2:55:b3:fa:6d:d6:a5:a4:ad:22:9c:ae:9d:64:2a:93:b0:0e:
bd:4d:fa:94:2a:1d:64:05:6f:1f:32:48:61:fd:80:12:b1:0b:
a0:1f:53:d4:c4:f4:23:ae:ec:e5:54:69:fd:31:df:01:85:d8:
22:32:6d:bc:b6:59:e8:f0:a0:4a:66:cb:1c:12:fc:5a:b1:fd:
44:b5:f4:0c:19:41:51:6e:6f:02:27:c3:16:4c:6d:c2:f2:01:
b0:a6:61:21:3c:78:79:c3:eb:13:c4:15:57:9f:5b:fd:d9:2b:
b1:27:43:db:9b:38:ba:fc:69:e0:0f:2d:3f:7e:df:e5:18:90:
51:2b:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:25 2025 by rpki-client