Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/4b95d003-907c-35f8-bd3d-5b59dc7756e9.roa
File: 4b95d003-907c-35f8-bd3d-5b59dc7756e9.roa (raw, json)
Hash identifier: D4XdoTvTzZ/KANUh2K17FXET1XFm2ydaPtVqnUN+gRQ=
Subject key identifier: 1C:FA:0E:F5:E8:81:94:F2:71:2C:C4:8C:C2:D3:18:C0:E2:A2:A7:06
Certificate issuer: /CN=9767f423-1d76-4b17-b2d6-3bb753094e71
Certificate serial: 010D0C9F4328583A6B11E6C243A9FDB1E33002C0
Authority key identifier: 56:01:26:67:D1:51:07:99:FD:17:FF:DC:06:E0:79:DB:32:2D:6A:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/4b95d003-907c-35f8-bd3d-5b59dc7756e9.roa
Signing time: Tue 29 Dec 2020 05:00:00 +0000
ROA not before: Tue 29 Dec 2020 05:00:00 +0000
ROA not after: Mon 02 Oct 2023 04:00:00 +0000
asID: 54994
IP address blocks: 138.113.72.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:6b:11:e6:c2:43:a9:fd:b1:e3:30:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9767f423-1d76-4b17-b2d6-3bb753094e71
Validity
Not Before: Dec 29 05:00:00 2020 GMT
Not After : Oct 2 04:00:00 2023 GMT
Subject: CN=ab2cd6c2-cc9a-4a82-b8a4-a54e76f75501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:1f:ca:52:19:20:4f:2b:ec:2b:05:85:95:
b8:b5:0c:e3:db:4f:ef:ee:31:47:e5:f4:a6:4b:04:
20:5c:da:87:59:91:d5:3e:a1:9b:af:51:ca:ad:10:
8a:a8:be:bc:93:ff:88:e0:a8:78:8f:37:de:39:a9:
cf:52:dc:d4:2c:9a:b6:4f:84:d1:b3:8c:d9:c7:1c:
27:0d:9a:54:09:28:67:db:7b:fc:10:72:7c:09:a4:
97:8c:78:12:a6:83:4d:fe:9a:d6:15:89:2e:60:2c:
29:5a:13:0f:fc:27:8e:47:81:25:b1:64:c6:2c:16:
b6:d0:7e:a2:a6:fb:31:dd:5e:00:5e:28:09:85:95:
98:b3:0c:95:23:93:e8:66:3c:81:4b:0f:49:7c:24:
cc:73:0d:59:23:21:f9:50:cb:d2:e4:53:6f:d2:e3:
29:2c:f2:bd:76:d2:92:f9:ca:bd:6d:8b:ef:11:b1:
c2:15:bb:99:d0:91:98:d6:83:37:56:e5:35:f1:fe:
3d:29:98:ed:af:a1:86:99:b1:bb:1a:31:16:a7:74:
ac:5d:c4:56:6a:54:e6:db:24:4d:dd:86:20:b4:d8:
98:28:4c:e2:a8:3b:38:17:5a:a7:ca:f0:41:87:de:
f0:a4:50:0e:c1:e8:19:19:e8:cf:8a:50:49:d4:b7:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:0E:F5:E8:81:94:F2:71:2C:C4:8C:C2:D3:18:C0:E2:A2:A7:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/4b95d003-907c-35f8-bd3d-5b59dc7756e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/9767f423-1d76-4b17-b2d6-3bb753094e71.crl
X509v3 Authority Key Identifier:
keyid:56:01:26:67:D1:51:07:99:FD:17:FF:DC:06:E0:79:DB:32:2D:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0c:02:4b:da:f5:0f:76:30:e3:c5:35:1d:7e:dd:09:b2:3a:
fb:f1:33:1d:8d:d1:cf:73:da:b9:32:45:de:bb:63:d9:ba:6c:
d8:53:bb:f5:9b:12:60:d1:d5:cc:76:7b:6d:06:d6:40:7d:28:
d4:4a:49:c2:be:97:8a:cd:a5:a6:76:62:a2:90:b6:c0:92:e9:
c2:32:a2:a7:b4:0b:79:27:8b:1d:ef:38:b2:98:eb:0c:ec:77:
90:26:9d:cd:17:73:1a:91:02:f6:04:c2:3a:e7:46:7a:f3:eb:
dc:75:f0:3a:42:64:30:21:41:01:89:58:de:78:bc:16:59:75:
da:52:1e:5f:43:b7:9f:a5:76:d9:8d:84:63:f5:c5:b9:0e:80:
3c:f4:1f:19:80:72:20:1d:d4:dc:52:23:92:d4:84:6b:15:3d:
26:25:7c:e9:6e:f4:6c:f4:74:05:5e:7e:c7:d8:74:b6:82:7e:
61:b0:62:60:8b:cc:24:4e:be:a1:e3:2e:25:f7:93:f8:f4:b9:
a1:73:86:01:0d:e4:04:39:d4:2e:d9:f1:7a:33:51:41:9c:04:
7d:22:60:a5:27:3b:a3:11:8d:0c:a7:04:d4:a3:49:bf:3d:b7:
3a:47:6a:bf:f8:0a:12:6b:16:77:2e:da:3d:8a:3e:c7:be:bc:
e9:6e:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:19 2025 by rpki-client