Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/995f97e7-0d15-39f6-b621-14a56ef81c04.roa
File: 995f97e7-0d15-39f6-b621-14a56ef81c04.roa (raw, json)
Hash identifier: kY4KRDM82SdSFmSL7BvBfbjCQIiBZ+Epw8qczEEal04=
Subject key identifier: A1:61:4F:3F:DB:2A:3C:D8:FD:5C:91:88:8E:8D:B0:B8:4D:D7:A2:0E
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584882809A1205045F59DFB3C080
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/995f97e7-0d15-39f6-b621-14a56ef81c04.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 74.199.0.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9a:12:05:04:5f:59:df:b3:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=e527bb7a-1fad-495c-9fdf-0dbcf0dbed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:ce:8e:3d:2f:28:ee:08:00:d3:ca:19:06:
8c:9a:7b:fb:44:ce:33:52:ad:2b:5c:3f:73:85:83:
2b:da:96:ae:e7:f5:7e:c5:b2:58:a6:c5:96:32:0f:
8c:e1:7a:e5:27:da:df:69:5b:78:4f:56:0b:6a:45:
dc:74:25:5a:69:b6:73:4c:20:dd:5a:cb:da:0a:51:
a3:56:c2:99:39:e3:05:3c:2f:1a:b1:5e:d2:ee:c0:
22:78:55:6b:ab:03:4e:3a:56:54:8b:33:7d:61:fe:
12:b6:03:5d:1f:b2:38:43:85:9c:00:2b:a9:26:56:
93:dd:cf:4e:5a:fb:20:20:07:2e:30:93:aa:18:10:
4d:b6:7e:f3:17:2b:7e:a7:b6:dc:86:b1:f3:41:f2:
df:34:66:c9:c6:ff:06:14:db:93:a0:04:43:e2:39:
ff:c6:4d:2a:6d:52:79:5a:a5:f9:3e:d1:00:a6:b2:
62:57:3c:63:20:f8:f0:c0:f2:b6:51:0a:14:71:ea:
59:d9:fa:bd:05:77:63:a6:a5:5b:67:6d:ad:97:20:
b2:a5:92:85:90:83:2b:9e:76:7a:b0:57:e5:97:a0:
66:ae:de:e7:f6:bf:b1:83:2b:ab:dc:cc:79:07:c1:
a6:39:66:e7:6b:cd:bc:2d:48:c1:c9:8d:e7:db:17:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:4F:3F:DB:2A:3C:D8:FD:5C:91:88:8E:8D:B0:B8:4D:D7:A2:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/995f97e7-0d15-39f6-b621-14a56ef81c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
74.199.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a3:46:da:41:44:25:39:ba:58:42:2b:08:40:7b:05:20:63:
c2:66:9f:e5:dc:cf:47:11:24:2c:8c:93:b3:b3:83:39:3e:d5:
fc:41:0b:94:57:12:af:d2:12:08:c5:32:9f:b1:67:1f:de:1a:
22:c9:06:e8:1e:25:81:01:3e:bf:50:20:f9:ab:fb:46:47:fe:
ef:2e:24:21:e0:fd:b8:7b:43:c1:ab:e7:d5:02:92:f6:c2:71:
99:dd:b5:d3:17:d3:e1:99:0a:83:61:47:43:78:a2:e4:2d:55:
02:15:0d:d9:6a:90:d7:4c:66:5a:f8:ce:97:66:f5:9f:3f:4d:
e6:c9:70:de:b0:36:10:3e:1d:36:cc:97:5a:14:5c:10:37:f4:
82:f7:e9:fc:36:d1:94:e3:62:3e:eb:01:6d:49:c0:f7:7b:be:
35:56:7f:de:e3:da:ae:91:5f:c3:5d:e4:59:3d:e3:8b:bb:9d:
45:ca:b1:97:b1:a9:38:63:aa:6a:26:6f:26:83:00:2e:17:aa:
65:6b:25:bb:3e:67:88:1c:7e:df:d4:7a:1d:f2:34:0a:7f:61:
e5:61:a0:3a:08:a2:68:cd:60:b2:71:44:95:f1:1c:6c:09:d8:
31:7d:9a:b7:92:32:46:c6:53:39:9f:0c:48:60:ca:4e:41:99:
52:f8:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:15 2025 by rpki-client