Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/febac60d-14a4-3a49-a1df-2f6d1cb140bc.roa
File: febac60d-14a4-3a49-a1df-2f6d1cb140bc.roa (raw, json)
Hash identifier: nAVtz4EqX7x4dGEAw9xI77w8SwFUhDbL4x6v66o//a8=
Subject key identifier: 10:33:2C:DE:B1:F0:8C:24:EE:D6:7F:C7:88:9E:29:A8:AC:70:78:04
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FAF1EE43B3E2FBEAEB7C300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/febac60d-14a4-3a49-a1df-2f6d1cb140bc.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.111.224.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:af:1e:e4:3b:3e:2f:be:ae:b7:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=90661e22-01d3-491f-bdd1-64adb135477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:90:2d:93:c0:42:97:17:3d:08:8b:fb:d8:
41:87:09:ba:85:a2:da:62:b4:cf:0a:57:64:25:2f:
91:c0:e5:6a:93:fe:cd:83:16:52:eb:7d:d9:67:93:
63:8c:e3:49:2a:23:f6:91:cb:0d:22:13:a3:44:c6:
36:a3:05:77:79:99:c2:eb:63:3d:26:b1:00:02:d6:
d7:cf:42:f6:03:be:ae:f2:84:55:e8:bd:9a:8b:34:
3a:2c:45:2d:1b:c2:8a:f5:58:97:12:92:93:6e:33:
87:4f:4f:fc:49:89:cd:65:f6:56:b0:3b:b6:cd:61:
6e:e3:1a:84:81:76:7d:8f:61:af:77:a7:35:d6:c9:
18:72:38:9b:4f:e0:5a:7d:b4:36:4b:20:3d:2c:cc:
e9:36:d8:23:d4:b0:11:c1:0a:b0:16:e9:5e:83:e0:
c1:9b:51:fc:fd:80:ca:91:f2:a0:20:55:39:cf:0e:
32:7a:e4:e3:92:9a:23:8d:a3:69:df:86:24:7a:72:
0e:41:c2:d3:67:eb:d1:7c:bc:2a:15:34:9f:4b:8b:
ea:0d:9b:e9:5f:e6:07:d2:b8:5c:f0:71:ee:65:5d:
37:d6:8f:c8:b1:6c:2a:68:d5:ca:25:64:7d:51:17:
22:0c:2f:90:37:b0:05:28:5f:0a:47:c8:a4:72:83:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:2C:DE:B1:F0:8C:24:EE:D6:7F:C7:88:9E:29:A8:AC:70:78:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/febac60d-14a4-3a49-a1df-2f6d1cb140bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.111.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ab:85:aa:82:97:95:40:29:d2:a1:f2:11:cf:d6:cd:14:01:
75:7e:4f:f6:95:ca:05:63:ac:cb:3a:13:98:6d:3c:96:ef:e1:
51:a2:d9:70:9a:a6:23:5f:6f:5c:94:06:59:1f:65:65:10:e5:
3f:2c:e4:48:55:c8:8c:11:5a:06:a0:96:17:a5:63:8f:58:ec:
11:48:88:30:9d:7a:18:98:ce:a0:2e:1a:10:11:fe:de:b3:81:
54:b5:80:ec:0b:02:cf:69:03:33:47:f6:12:9f:3c:22:7c:df:
c7:ba:a0:0a:6e:3f:f1:22:5e:21:60:6d:44:2e:07:c1:d1:ab:
8e:9b:db:48:0c:d1:44:09:83:21:4c:95:08:3b:ca:51:dd:ea:
06:d7:64:a4:fa:50:5d:77:35:31:5c:6b:08:47:79:50:bf:4f:
ef:3c:12:67:81:cf:aa:5c:cc:a9:e2:11:e2:50:93:d6:c7:10:
e6:49:11:25:c5:18:61:13:09:85:f2:dd:4b:44:9b:02:71:d1:
f4:dc:fd:46:ef:98:ed:db:37:52:62:99:78:0e:d5:bc:9c:3a:
6f:ba:95:9e:5c:3a:21:2c:3c:62:ff:fa:e6:3f:f7:dc:da:e8:
00:ef:7f:0d:e8:05:e9:d8:4c:99:2a:80:59:01:33:b3:f1:22:
5d:65:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:52:18 2025 by rpki-client