Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/437abdd8-15dd-32de-8926-1187388752de.roa
File: 437abdd8-15dd-32de-8926-1187388752de.roa (raw, json)
Hash identifier: PNeYbK8dksSPpfPp4gTlspY7qxTld9sGKjl4wVIh08w=
Subject key identifier: 0D:82:F8:9C:D7:44:28:E0:9A:7B:0D:98:05:04:ED:93:40:9E:D8:70
Certificate issuer: /CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a
Certificate serial: 010D0C9F4328584940394C8C11404E0A1B8A4B00
Authority key identifier: 1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/437abdd8-15dd-32de-8926-1187388752de.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 174
IP address blocks: 72.46.64.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4c:8c:11:40:4e:0a:1b:8a:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=c6b1980f-e165-4d38-91eb-fbfdfd3176df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:2e:04:ed:20:28:0e:a3:59:74:9c:03:7f:
49:3e:b9:78:7f:36:e8:8c:03:9d:70:31:58:8b:04:
a9:c2:d7:56:c4:c4:0b:53:d5:9c:9a:4f:2b:0e:db:
53:2e:9a:9b:1a:08:c9:0e:c2:5e:8f:1d:57:9c:36:
7c:f3:48:c1:7a:cc:1a:1c:d0:82:c7:ce:fd:c9:db:
3c:22:74:91:93:29:59:5d:75:21:ac:f5:40:96:41:
e6:d3:22:52:26:47:40:3d:e1:4c:3d:a7:b5:bd:62:
9a:00:02:b5:c1:71:a0:4a:46:e1:a3:e3:b2:38:f8:
7a:b4:7e:9b:af:14:98:b2:c3:08:ca:f0:cb:0e:38:
d6:e4:54:34:c8:59:b3:48:4e:d2:12:4b:42:53:f4:
05:fd:30:3d:78:19:ea:2f:d1:7a:32:08:7b:8c:e5:
99:b9:8a:ea:d9:5b:0e:3c:d7:b6:bc:01:88:42:2a:
7b:4c:3f:83:f3:d7:eb:c4:8d:ca:56:98:d0:f5:01:
bb:c2:88:97:ad:62:ba:f5:5f:60:de:72:36:08:ff:
78:3e:5c:4a:0f:f4:82:54:9d:b9:f1:c6:a7:a4:bc:
35:23:02:70:07:c0:34:d7:f0:f5:de:48:36:10:e3:
1e:a9:a2:77:12:66:81:7f:0e:28:b1:9d:c8:33:af:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:F8:9C:D7:44:28:E0:9A:7B:0D:98:05:04:ED:93:40:9E:D8:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/437abdd8-15dd-32de-8926-1187388752de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.crl
X509v3 Authority Key Identifier:
keyid:1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer
sbgp-ipAddrBlock: critical
IPv4:
72.46.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:18:f0:f7:be:ae:d8:68:bc:12:a3:97:fb:99:6e:81:4b:f1:
a5:bf:9d:5b:c3:8d:d1:cb:72:2f:06:0b:d1:4a:d0:48:fe:88:
b7:28:03:87:18:82:2f:7b:56:02:ae:03:a9:5a:37:7d:29:0c:
d5:1d:6b:ef:23:fa:1e:54:ee:c5:f7:d9:d8:f1:4c:50:03:ab:
d3:5a:ac:8e:eb:dc:ab:8a:99:fc:0d:3c:cb:c0:75:73:33:e3:
87:cb:13:b7:b6:d8:3e:26:c4:b2:c2:5e:b8:93:bd:51:75:9a:
70:c9:c2:ae:6a:d1:6d:24:20:e7:f5:36:45:5c:03:58:d1:fb:
e5:dd:b9:e2:a4:5e:ee:64:3b:4d:fe:2a:ca:f1:7f:66:ba:cc:
83:99:41:05:42:ca:01:2e:d7:75:a5:33:4a:c3:e8:15:4f:ec:
0f:d4:c6:30:7e:3c:8f:72:5a:4b:f8:73:5a:e5:6c:60:bb:85:
b7:d4:95:97:6e:dd:cb:36:bd:19:59:e5:63:06:d8:3e:ca:15:
f4:59:b4:99:22:0c:e5:d9:8a:6d:81:2a:01:35:80:4f:a2:f9:
4a:c7:ad:4e:ea:e6:7d:c0:d5:3a:2f:ea:9c:ff:26:31:83:54:
3c:8a:61:c8:9d:73:a4:85:2f:b4:35:5f:e0:fd:9d:16:8e:f1:
30:95:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:09:02 2025 by rpki-client