Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/1f84e2c6-6102-36e2-a66d-6dcff6b85119.roa
File: 1f84e2c6-6102-36e2-a66d-6dcff6b85119.roa (raw, json)
Hash identifier: DRNy/Q/gPhq8mWKBQyzUOoVqcG6qTGLnyDnPQpfrT+M=
Subject key identifier: FE:B9:11:6B:CB:EE:42:F6:AA:34:06:A7:86:81:0C:ED:CA:84:A6:7A
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285848F7C143703A1F76F0D34DD9A0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/1f84e2c6-6102-36e2-a66d-6dcff6b85119.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 149197
IP address blocks: 103.49.153.0/24 maxlen: 24
103.216.0.0/24 maxlen: 24
103.216.2.0/24 maxlen: 24
103.251.25.0/24 maxlen: 24
139.5.20.0/24 maxlen: 24
139.5.21.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:43:70:3a:1f:76:f0:d3:4d:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=59085bf6-5676-4d3f-a8b1-1644a79586ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:3e:78:d6:16:81:d3:9f:bc:92:6b:5c:fb:
f0:18:bf:1f:b7:15:d3:91:9f:0a:31:94:c2:04:6a:
46:ba:b6:95:23:47:97:cf:5f:05:fc:2b:18:1f:4e:
65:43:0b:8b:46:b9:da:2b:e0:ce:30:4e:f0:18:43:
1c:63:4c:76:3a:29:38:41:b1:8b:86:fd:84:c1:48:
1d:5d:ef:c8:9e:22:cd:d8:60:e4:8d:26:2b:4c:cb:
be:dd:40:93:e5:e8:7c:96:28:6a:b6:dd:18:ca:43:
e3:97:13:2f:99:14:11:0f:23:ce:57:bf:eb:1c:0d:
32:5c:ee:11:92:b6:b9:1a:62:b4:ba:e4:2d:c4:41:
5a:92:b3:9b:e2:ad:0c:ab:ae:6b:6f:80:7b:82:26:
77:33:ac:c0:46:4c:1b:29:43:bc:52:1a:92:89:d2:
08:81:80:e2:fe:bd:a9:64:10:a1:e7:04:a1:ea:33:
8a:30:ea:11:df:01:07:e3:8e:ac:e7:7a:b4:71:5a:
8a:ee:60:72:90:6b:3c:b9:96:e2:84:69:26:8b:f6:
db:f9:05:62:d0:2a:b4:4b:0b:42:37:65:ab:68:fb:
e6:1a:d2:dd:43:59:96:1e:d9:ef:f9:7f:4f:33:87:
c2:c3:f5:ab:04:54:35:1d:cd:6d:4e:d9:3a:f6:49:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:11:6B:CB:EE:42:F6:AA:34:06:A7:86:81:0C:ED:CA:84:A6:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/1f84e2c6-6102-36e2-a66d-6dcff6b85119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.49.153.0/24
103.216.0.0/24
103.216.2.0/24
103.251.25.0/24
139.5.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:fb:1c:b4:46:74:a9:82:a9:79:e0:a3:15:c2:68:b9:c0:49:
7c:b9:e7:39:a3:91:bb:c1:81:61:9d:17:f8:0e:3e:2f:9b:9a:
25:b0:84:93:bf:bb:e6:6f:17:90:97:57:17:55:15:03:28:21:
e2:35:62:30:6e:53:79:a0:24:c8:89:23:58:fa:5f:72:c6:ce:
4b:8c:2c:2c:fd:02:20:b3:e7:bc:c8:dd:c0:32:e6:58:8e:be:
dd:c0:f9:31:c2:e0:ad:b9:ab:5b:86:8a:a5:c4:76:18:c4:52:
9e:fc:73:e5:43:dd:63:5d:48:29:de:4c:63:6a:c1:4d:23:b8:
04:e4:fc:43:0f:0d:78:00:ab:9f:2f:e8:cc:b7:3b:a1:2b:9d:
cd:0e:5a:99:f0:cc:32:12:03:a4:af:0f:8e:cf:07:43:a0:e3:
cc:68:36:ea:cf:20:8c:08:68:40:a8:34:41:e8:14:e6:26:38:
d1:e4:a1:ac:55:c0:97:65:f5:e8:c7:05:b5:52:64:42:ee:fb:
38:35:a8:69:49:5c:5c:e6:e1:40:97:4d:3a:1f:f8:f9:04:fc:
f2:91:ac:e0:b1:13:f2:8f:51:46:43:e4:1c:59:b0:3c:5f:05:
3c:4c:cc:73:c8:4e:c5:23:07:3e:9e:4a:b6:bd:51:bf:18:4f:
3a:bc:de:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:49:44 2025 by rpki-client