Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/97b3bcf5-f375-331b-a19c-9510f1711b04.roa
File: 97b3bcf5-f375-331b-a19c-9510f1711b04.roa (raw, json)
Hash identifier: ssFvCAmddzAiKFu782+np3g4u7yxd/V9z3Osjy374TQ=
Subject key identifier: E9:11:23:74:57:40:82:C6:2F:85:C3:7D:C5:B3:36:F9:94:62:EF:81
Certificate issuer: /CN=9767f423-1d76-4b17-b2d6-3bb753094e71
Certificate serial: 010D0C9F432858408B8F016699FDAE6E1E3ACD00
Authority key identifier: 56:01:26:67:D1:51:07:99:FD:17:FF:DC:06:E0:79:DB:32:2D:6A:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/97b3bcf5-f375-331b-a19c-9510f1711b04.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 11 Jan 2024 05:00:00 +0000
asID: 54994
IP address blocks: 138.113.237.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8b:8f:01:66:99:fd:ae:6e:1e:3a:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9767f423-1d76-4b17-b2d6-3bb753094e71
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Jan 11 05:00:00 2024 GMT
Subject: CN=983f65a8-ea6f-4b75-9855-322f4e841409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:d0:81:0c:60:32:92:cd:2e:54:78:96:6f:
e2:bf:a3:81:c3:07:04:b3:96:8b:8f:4f:ee:ab:e0:
98:82:56:1c:fa:72:31:ea:87:08:9c:98:23:1f:f6:
19:12:e8:65:b8:fe:df:fa:43:02:a8:e7:b0:be:97:
3b:9b:53:4a:e1:30:d7:a4:a5:8d:d5:80:52:b5:57:
b3:a9:1f:ce:6f:f6:88:6a:5c:a9:5b:03:1c:d6:72:
25:45:cd:b8:d8:6c:cc:32:ef:10:e5:1b:61:d2:a2:
31:b0:f2:a9:2a:89:f4:a4:ab:c3:49:45:cf:5f:a5:
96:8a:65:2a:65:11:12:12:7c:8b:c7:44:6c:ce:21:
25:4a:f5:47:04:fc:ec:2b:4b:9d:c6:25:5a:6e:74:
d3:a3:ce:4b:1a:a2:e0:d3:27:c4:f5:37:a5:8b:b9:
28:67:b2:1e:b1:74:43:06:00:8d:4c:43:1c:41:64:
f6:4d:8a:e1:78:6f:3b:64:48:e7:80:df:b1:14:6c:
ec:52:2b:99:98:9c:35:18:bf:f1:6f:4d:90:72:46:
4c:ee:84:07:47:5f:19:e9:dd:f0:cb:12:71:31:cd:
99:ff:dc:7a:b2:ed:bd:a5:26:44:e2:c3:fc:8f:58:
7b:7c:ef:ae:1c:f7:19:2e:c1:ca:86:44:74:9d:23:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:11:23:74:57:40:82:C6:2F:85:C3:7D:C5:B3:36:F9:94:62:EF:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/97b3bcf5-f375-331b-a19c-9510f1711b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/9767f423-1d76-4b17-b2d6-3bb753094e71.crl
X509v3 Authority Key Identifier:
keyid:56:01:26:67:D1:51:07:99:FD:17:FF:DC:06:E0:79:DB:32:2D:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:aa:d3:fd:5e:7f:f6:d4:38:7a:e6:31:c3:7a:2c:a3:3f:d5:
c1:8c:83:cc:bf:8b:99:f4:88:f1:18:74:b8:c2:a1:0e:fa:4a:
c5:8c:53:ba:ad:28:45:ba:8b:39:b7:b7:0f:e4:5d:61:a3:69:
eb:51:a6:17:df:8b:05:f8:68:3f:b8:37:55:d5:83:f7:e3:3a:
ad:c5:4d:dd:2b:51:ae:e6:02:1e:90:86:53:04:6a:95:06:0b:
1c:f8:2e:97:54:b0:af:3d:66:62:b9:4a:2c:54:c9:df:ff:38:
49:cc:ba:79:95:6a:3c:4c:48:3b:81:32:bb:e7:65:ff:85:dd:
21:3c:9a:9e:df:0b:fa:f3:7a:d9:78:b0:02:15:9e:6b:ed:42:
8e:f7:0c:7b:bf:61:48:6f:ac:a3:e4:9b:e8:37:7c:38:61:cc:
bc:b5:1e:b1:35:e9:ad:af:11:9b:93:c3:f2:3c:db:c0:8a:bd:
d0:ad:3d:ad:de:30:57:65:fc:b5:cc:85:42:2f:a3:08:ff:9f:
16:13:52:b1:e4:38:34:84:a9:56:ad:06:6c:42:21:6a:f5:24:
92:2d:d7:f1:1a:14:ec:f5:b7:f8:f0:95:a1:1e:c7:45:da:8c:
da:15:a4:36:11:fb:b8:b4:8d:a1:ce:3e:2e:23:6d:21:80:07:
17:a4:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:59 2025 by rpki-client