Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cf803360-ec35-38ea-b0d8-e9f477fec20f.roa
File: cf803360-ec35-38ea-b0d8-e9f477fec20f.roa (raw, json)
Hash identifier: EK9gSyHrSVyE4XDyFs7rubcnEfuJ6essxer6zDEjJ8g=
Subject key identifier: 58:08:43:0E:08:55:1A:30:94:15:C7:2F:4D:6E:25:BA:73:30:73:4A
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858490A22718D87B8E2ECEDAB6300
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cf803360-ec35-38ea-b0d8-e9f477fec20f.roa
Signing time: Sat 01 Mar 2025 04:01:18 +0000
ROA not before: Sat 01 Mar 2025 04:01:18 +0000
ROA not after: Fri 30 May 2025 03:01:18 +0000
asID: 9009
IP address blocks: 45.117.52.0/24 maxlen: 24
45.117.54.0/24 maxlen: 24
45.123.144.0/24 maxlen: 24
103.4.248.0/24 maxlen: 24
103.4.249.0/24 maxlen: 24
103.4.250.0/24 maxlen: 24
103.4.251.0/24 maxlen: 24
103.49.155.0/24 maxlen: 24
103.81.231.0/24 maxlen: 24
103.196.8.0/24 maxlen: 24
103.196.9.0/24 maxlen: 24
103.207.45.0/24 maxlen: 24
103.207.46.0/24 maxlen: 24
116.206.150.0/24 maxlen: 24
137.59.61.0/24 maxlen: 24
139.5.22.0/24 maxlen: 24
139.5.23.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:22:71:8d:87:b8:e2:ec:ed:ab:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Mar 1 04:01:18 2025 GMT
Not After : May 30 03:01:18 2025 GMT
Subject: CN=ad118f84-6572-4762-993a-6ce03bc92b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:54:c6:72:5e:91:b3:c4:40:be:c0:cb:c1:
8d:1b:f7:7c:56:bb:ca:88:76:d9:ad:8c:23:86:6f:
13:d3:de:0c:9a:50:34:cd:99:19:a8:a5:f7:40:ec:
4d:55:6a:57:f5:13:b2:49:ae:35:67:1f:bd:a0:5f:
9d:6e:ea:b9:6f:1c:e7:bc:42:12:82:7e:6e:e5:5a:
6b:e4:a4:d6:b9:86:0a:43:22:a7:f7:8c:4e:d6:9b:
4a:4c:c1:1f:68:58:66:cb:c3:a0:3f:2f:59:49:54:
73:77:d1:7a:69:65:8f:f0:c1:78:9e:fa:31:b3:00:
f7:ae:8f:c6:28:4f:59:11:14:e5:b5:e2:81:59:82:
61:00:09:8d:a1:2d:6e:30:4a:54:d2:a4:50:d1:60:
69:4b:c6:bd:0f:96:2b:ea:bf:50:eb:9d:56:46:75:
c4:6b:d9:12:9e:74:6a:1c:a3:79:19:0c:be:f1:bc:
04:6f:76:37:66:d7:69:f7:91:fc:a3:70:48:e6:84:
a6:9b:ab:4f:14:d1:f5:04:c4:7e:54:65:66:76:b3:
3d:b0:44:e0:56:23:88:48:32:0c:4a:3d:0d:7a:a8:
4a:5d:0c:a8:e7:96:e5:e7:80:8e:4c:b9:f4:87:e9:
41:0a:32:3d:94:e5:04:26:c6:77:3e:f9:a7:37:3e:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:08:43:0E:08:55:1A:30:94:15:C7:2F:4D:6E:25:BA:73:30:73:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cf803360-ec35-38ea-b0d8-e9f477fec20f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
45.117.52.0/24
45.117.54.0/24
45.123.144.0/24
103.4.248.0/22
103.49.155.0/24
103.81.231.0/24
103.196.8.0/23
103.207.45.0-103.207.46.255
116.206.150.0/24
137.59.61.0/24
139.5.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:4c:11:df:d1:39:c8:3b:a9:8a:14:ce:d0:f4:df:a7:b6:a2:
c5:e1:11:14:e3:7e:7b:d1:5f:c9:bd:ed:d0:af:05:80:e1:d1:
9b:5e:3a:97:68:a7:3f:bc:b1:61:c3:63:68:02:dc:9e:b3:a8:
8e:61:4d:1c:e3:6e:88:f3:51:a6:13:b8:b1:ab:01:6b:1f:fd:
b3:d8:6d:db:53:ce:c9:7d:78:8f:7c:48:68:24:cf:87:37:1f:
98:2e:22:60:7d:59:9c:6a:20:f3:f6:2e:0a:23:61:b2:d6:84:
0d:a2:8d:72:15:1f:94:81:97:67:a4:88:50:40:72:34:ab:67:
24:73:e9:4e:af:49:ab:89:e5:a3:c7:37:89:c4:04:1d:25:a5:
09:2e:2f:d8:80:e0:b3:b5:db:bc:cf:59:27:ac:c3:ab:58:ce:
c6:89:8e:47:5e:88:d2:4a:09:ab:18:90:65:98:59:f5:6a:50:
75:1a:e8:08:12:9f:0b:56:45:ea:9f:e8:a9:08:58:b7:81:8b:
57:ff:11:c0:ba:85:c2:a5:db:0f:cf:d9:35:9b:40:0a:a7:61:
a4:67:17:a4:89:9e:b2:09:4a:6c:52:00:fb:0a:7b:89:b3:f4:
08:db:a2:84:e5:29:81:f6:6d:cd:33:7d:8d:16:3b:2d:f9:20:
74:78:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:49 2025 by rpki-client