Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/94b44aaf-b89a-39ba-94d6-64bf0b5c35aa.roa
File: 94b44aaf-b89a-39ba-94d6-64bf0b5c35aa.roa (raw, json)
Hash identifier: pkj3HEcVe8WEy9fxMab7dIHfaHb/HEGiWtGrt9Xauuc=
Subject key identifier: A7:C1:76:D2:63:5C:70:BC:1F:46:42:05:7E:4D:7D:CD:96:FE:9C:6E
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285848BD20DCE7B9140AAAB77D09E0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/94b44aaf-b89a-39ba-94d6-64bf0b5c35aa.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 216213
IP address blocks: 45.117.53.0/24 maxlen: 24
45.123.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:dc:e7:b9:14:0a:aa:b7:7d:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=bcf67160-1d3c-436f-97a0-6c69d6d7b564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:b4:2d:b4:10:c8:8c:20:1e:5f:a4:6e:02:
40:df:72:e7:b7:b0:c9:29:4c:66:c7:91:a6:b8:df:
eb:6a:be:ed:03:d0:37:54:2e:0f:a1:0f:99:8f:3d:
ec:ab:34:46:05:37:15:b1:09:f1:96:bb:f8:e5:44:
58:50:89:32:6f:d1:c0:01:43:8b:28:42:2a:80:76:
98:3e:65:72:c5:50:1f:86:fd:01:07:f1:a6:ee:cf:
1d:d4:ff:13:70:ef:be:b8:d9:df:da:af:10:17:d4:
0a:80:33:b1:1e:95:35:3d:97:79:36:2b:2c:a7:b6:
60:b7:53:6d:39:19:da:1a:ca:3f:08:b2:71:45:38:
90:70:61:07:cf:cd:06:2c:16:75:b7:03:0e:97:36:
37:d8:c0:16:c4:3b:a8:27:74:a4:ba:1a:bb:1e:d1:
d9:23:78:42:c8:f3:cc:ea:f0:8c:0f:9d:af:de:16:
4a:68:f0:95:29:10:19:41:35:37:cb:f8:a2:b2:0f:
64:3f:f4:80:70:de:67:48:f1:79:bd:a0:82:8e:25:
54:16:3b:2b:41:e9:73:39:6e:15:91:a1:a8:70:02:
fd:12:da:55:ba:32:9b:2d:f9:f2:95:50:07:2f:06:
2e:54:98:14:5b:e7:21:81:0c:28:d8:b4:2f:ba:70:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:76:D2:63:5C:70:BC:1F:46:42:05:7E:4D:7D:CD:96:FE:9C:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/94b44aaf-b89a-39ba-94d6-64bf0b5c35aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
45.117.53.0/24
45.123.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:27:78:a7:81:0a:61:9e:f4:c1:93:3a:bf:bf:bc:d7:56:6e:
06:77:7a:73:80:5d:4a:a8:a7:d0:56:dc:10:c7:db:7a:cc:85:
ad:a4:83:a9:67:10:7d:9a:49:61:fa:67:c1:86:bd:fd:c6:d4:
12:bc:2e:1c:cb:0e:57:8d:bd:22:8c:d9:76:0f:74:a4:83:f9:
55:80:ac:48:46:c2:77:8a:55:63:43:2c:ce:92:60:4e:bf:39:
c1:e3:0b:76:e2:ed:7e:10:31:c9:a9:23:3a:a5:9a:69:1c:9c:
9b:22:74:2d:cd:74:2e:90:8b:72:a9:7e:26:f0:b5:a4:89:cd:
f4:b9:b8:01:9a:4f:98:68:5d:be:0b:e0:b0:bd:e3:e4:e7:55:
62:2b:dc:06:60:e5:ff:2d:fe:bb:7e:00:18:80:b0:58:d7:39:
a5:e3:85:e3:df:dc:de:c8:d4:0a:a1:b8:32:8e:2e:7d:be:d8:
0d:c2:db:f0:5f:a1:3c:2d:57:55:a7:84:ad:11:a9:dc:93:30:
8c:a3:2b:9a:fb:ab:bd:f1:81:3b:09:1d:1a:6d:d8:f2:3a:5b:
ab:02:7e:c1:e0:ab:9e:36:3b:5e:e6:1f:45:b7:10:8e:bd:1b:
95:25:e4:a1:93:34:c7:10:91:b9:98:28:19:66:af:a3:54:d6:
13:74:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:02:39 2025 by rpki-client