Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/c9a629cf-7eba-36ce-8d78-a681451b2615.roa
File: c9a629cf-7eba-36ce-8d78-a681451b2615.roa (raw, json)
Hash identifier: HoD8yvG9kyXzPZMkxLtZA4v4r1dA7JF6fWq7cs65QoE=
Subject key identifier: 93:09:BD:10:27:B1:EE:83:DC:98:AD:41:2A:8B:92:35:9E:28:1D:1C
Certificate issuer: /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial: 010D0C9F43285848EF61623E0B2A0B49A64CAD00
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/c9a629cf-7eba-36ce-8d78-a681451b2615.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 62529
IP address blocks: 67.221.251.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:62:3e:0b:2a:0b:49:a6:4c:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=0c17475e-56d2-4e60-8025-948221a12bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:f1:39:0d:8a:5a:eb:2c:d6:e3:c8:7c:8f:
e7:48:f0:83:ac:46:d9:b6:d0:63:80:ba:3d:cd:a4:
f8:df:e4:1b:04:7b:e4:ae:06:5f:fa:87:26:23:49:
83:20:6d:5b:19:ff:81:d4:6b:0b:16:02:5f:8c:8b:
18:fe:73:45:ac:d8:af:dd:e5:35:cb:8f:a7:e6:60:
b4:91:d5:10:5e:01:9b:7f:bd:db:77:2e:7a:3c:7f:
b5:68:72:93:bb:4f:da:c2:77:78:63:fc:5e:7a:70:
be:62:09:a3:82:32:f1:77:06:f9:f6:71:f3:01:10:
36:a7:32:84:b1:01:b5:af:e1:c5:ed:82:d8:72:1b:
f8:4b:85:30:e8:a6:6c:a7:33:f2:a1:ca:ad:30:96:
3d:01:ff:dd:89:da:06:84:79:a9:6d:7a:fa:16:fe:
65:7d:8c:80:b4:29:c3:03:c0:9a:17:b8:1d:75:73:
98:88:28:52:ce:b7:ab:44:74:97:68:f8:ee:75:b6:
98:6e:95:73:37:3f:f4:ee:6b:c0:a8:16:97:92:03:
eb:49:67:b4:89:26:a7:3c:16:4e:05:b6:27:60:bc:
8c:d9:22:0a:de:8c:ad:aa:2e:4c:01:de:07:c7:7a:
06:fb:d4:4f:bf:79:80:3c:d4:b6:37:ee:3b:49:31:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:09:BD:10:27:B1:EE:83:DC:98:AD:41:2A:8B:92:35:9E:28:1D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/c9a629cf-7eba-36ce-8d78-a681451b2615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
X509v3 Authority Key Identifier:
keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ac:b9:16:7a:12:73:d5:79:b3:74:8b:21:d4:37:18:0f:0b:
7e:51:a8:fb:cb:0f:57:ab:41:ec:93:69:8a:99:4a:c2:ec:b3:
50:a2:12:67:11:3b:dc:66:4d:ed:64:fd:1a:bb:9d:0d:8b:4d:
be:bc:30:e3:3d:01:20:57:a6:2c:1c:84:a3:f4:64:9b:79:4d:
be:96:27:a0:06:e1:79:94:5a:48:f8:89:ab:33:be:4e:04:80:
80:a0:f1:d7:82:4e:27:a2:e4:e0:3f:3d:35:c6:39:f6:a7:68:
29:e1:92:50:c8:ec:9b:fa:cd:dc:d7:ea:bb:0f:0e:cc:4e:1c:
23:15:ff:b2:90:f6:98:eb:fd:a7:2b:dc:ce:12:86:e5:4b:c8:
00:ed:92:a6:6a:07:0c:13:db:a1:cf:ba:08:97:c7:e4:09:1b:
fd:a4:a9:eb:4f:61:52:1c:2b:59:40:de:88:f4:8e:99:f9:97:
fc:af:ec:0c:8f:cc:be:a1:da:60:0b:cd:b7:56:c3:95:94:eb:
05:4c:62:98:6f:79:95:ce:52:88:45:be:25:37:5b:1d:51:65:
b0:cf:3b:13:5a:6d:ba:58:14:84:e5:e3:89:14:6d:eb:de:7d:
87:fe:4d:47:6f:40:d0:5e:b6:a3:49:53:93:8d:bc:90:f8:8b:
cd:36:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:53:05 2025 by rpki-client