Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3dde9d06-71a7-30f5-b245-b1cfa2e5750c.roa
File: 3dde9d06-71a7-30f5-b245-b1cfa2e5750c.roa (raw, json)
Hash identifier: juDZJAT7flAXX8y9JY1GTM0BNQHIuD7xz9OjuiJzVWo=
Subject key identifier: A3:DB:4C:95:3A:67:42:04:CC:C7:BD:AF:16:8A:BB:94:A5:9C:39:F9
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858491ED6D2700AFF99C321FF13C0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3dde9d06-71a7-30f5-b245-b1cfa2e5750c.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 26548
IP address blocks: 103.24.232.0/24 maxlen: 24
103.24.234.0/24 maxlen: 24
103.24.235.0/24 maxlen: 24
103.65.230.0/24 maxlen: 24
103.196.10.0/24 maxlen: 24
115.42.46.0/24 maxlen: 24
116.206.97.0/24 maxlen: 24
137.59.62.0/24 maxlen: 24
137.59.63.0/24 maxlen: 24
163.53.213.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d2:70:0a:ff:99:c3:21:ff:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=a6ccf65c-555a-4b8e-a457-2d75803b9284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:b8:2d:5f:96:6d:67:ba:de:c6:0f:ab:d2:
38:0e:fe:3d:6a:ca:a8:62:eb:62:45:79:20:28:f9:
5c:23:0f:98:68:68:d9:ec:7c:b0:f0:d0:b1:fe:92:
c8:8c:f6:b9:98:25:e3:e7:59:d5:2e:57:c6:d4:6a:
a2:2e:f7:28:d0:96:e2:4d:ca:bc:c6:b0:f1:70:f5:
58:95:e8:cf:cb:66:31:26:da:ea:9c:48:cd:f8:d1:
aa:9b:cc:23:be:64:d5:5f:31:44:e3:f3:62:ad:84:
e5:f0:75:53:93:bb:04:af:5f:66:5b:73:c5:58:84:
a5:91:37:ad:aa:33:82:9d:fc:4d:73:60:d8:1d:71:
d2:43:57:00:9a:d3:8f:24:6d:16:c5:d7:03:ba:75:
23:a0:e3:56:32:75:bf:eb:44:61:fc:71:04:30:c6:
00:6b:4a:e7:dc:68:fa:bd:9c:ba:95:49:3b:76:61:
a1:33:33:a4:22:44:6d:35:d0:1b:ad:d9:4a:65:a5:
2d:fe:11:6a:2c:c2:d9:1a:ea:4e:85:e0:a5:96:18:
87:c4:de:dd:b3:ca:eb:2f:a4:11:59:a8:c8:4c:83:
31:2f:10:75:37:8b:fb:d6:9d:51:df:2f:6c:4f:e8:
34:81:48:86:95:d5:67:4a:cd:03:c7:89:c6:5f:42:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:4C:95:3A:67:42:04:CC:C7:BD:AF:16:8A:BB:94:A5:9C:39:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3dde9d06-71a7-30f5-b245-b1cfa2e5750c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.24.232.0/24
103.24.234.0/23
103.65.230.0/24
103.196.10.0/24
115.42.46.0/24
116.206.97.0/24
137.59.62.0/23
163.53.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:56:c2:42:d9:10:b3:6f:fc:23:e6:06:6d:61:5b:98:0b:32:
67:d1:5e:5f:c1:83:9c:ce:85:c0:2b:cc:15:91:a2:b3:4a:e1:
ad:ce:04:fd:3c:f3:54:ce:01:0c:8a:6b:6c:e9:a6:7a:63:9d:
3d:b4:da:e6:2a:04:27:2e:d5:43:bc:c6:2b:9c:4e:04:25:fb:
cf:20:0f:c5:a1:84:e1:13:26:cc:e9:03:a9:2a:85:b3:33:9d:
c1:67:66:e3:e6:16:86:c9:95:80:15:12:74:9b:b4:be:8a:e0:
58:4b:93:f3:6f:54:7a:8f:13:2e:b3:dd:f9:78:d8:47:66:27:
2f:31:51:f7:70:db:7d:ee:0f:18:42:6d:8d:07:28:76:e2:fa:
db:f7:d9:be:9b:c9:dc:b4:8f:df:74:bd:e4:f5:fc:ce:2f:b3:
fd:25:c0:c5:2a:81:66:3c:51:82:d4:75:76:6d:32:2a:cb:f4:
9e:b6:dd:f5:e8:ae:28:86:0a:b2:a2:71:17:16:85:2f:bc:63:
18:ee:38:78:69:4a:4e:a8:99:d0:29:8c:92:e3:6e:b0:21:48:
c1:b5:d1:03:32:5a:bf:8d:74:95:eb:08:7a:a6:57:5c:0b:fa:
56:aa:a6:70:d6:7f:ae:ce:06:d5:d6:11:cc:2e:4e:02:27:9b:
64:51:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:20 2025 by rpki-client