Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/fdb5caab-5dba-3921-86bf-be429bec2859.roa
File: fdb5caab-5dba-3921-86bf-be429bec2859.roa (raw, json)
Hash identifier: vdjDm1+egysGSleTDSiSL835xOF/bvyBu/VG1ao9Ug0=
Subject key identifier: C0:2B:52:5E:CA:75:88:4A:52:3C:19:C4:D6:50:EE:F3:DC:8E:8F:C8
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858487644257F2E6C9EC38B0CD900
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/fdb5caab-5dba-3921-86bf-be429bec2859.roa
Signing time: Tue 07 Jan 2025 04:49:35 +0000
ROA not before: Tue 07 Jan 2025 04:49:35 +0000
ROA not after: Mon 07 Apr 2025 03:49:35 +0000
asID: 9009
IP address blocks: 45.115.60.0/24 maxlen: 24
45.117.52.0/24 maxlen: 24
45.117.54.0/24 maxlen: 24
45.123.144.0/24 maxlen: 24
103.4.248.0/24 maxlen: 24
103.4.249.0/24 maxlen: 24
103.4.250.0/24 maxlen: 24
103.4.251.0/24 maxlen: 24
103.49.155.0/24 maxlen: 24
103.81.231.0/24 maxlen: 24
103.196.8.0/24 maxlen: 24
103.196.9.0/24 maxlen: 24
103.207.45.0/24 maxlen: 24
103.207.46.0/24 maxlen: 24
103.216.1.0/24 maxlen: 24
103.216.3.0/24 maxlen: 24
116.206.150.0/24 maxlen: 24
137.59.61.0/24 maxlen: 24
139.5.22.0/24 maxlen: 24
139.5.23.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:76:44:25:7f:2e:6c:9e:c3:8b:0c:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Jan 7 04:49:35 2025 GMT
Not After : Apr 7 03:49:35 2025 GMT
Subject: CN=ced8650a-f87e-4ca1-948b-9e23b20b49af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:af:5e:8a:63:21:3e:c3:49:41:ea:e2:ab:5c:
2c:0d:28:ac:d2:5d:5e:0c:5e:16:fa:94:1d:4f:94:
95:01:36:4a:b5:6a:18:6c:18:65:37:a7:74:99:08:
da:d3:97:93:78:a6:28:e1:99:52:ae:f8:83:47:a4:
09:e9:4c:c0:b8:59:f1:53:e6:92:9d:d6:20:4f:b7:
94:4f:2c:6a:ae:07:1c:49:33:c1:6c:7b:e6:c6:ff:
9a:23:24:9b:ce:cb:91:b8:85:0a:21:b9:4e:a7:08:
d9:db:62:0f:1e:4c:56:ca:ba:18:1e:3b:e6:b8:62:
05:cb:0c:14:be:ec:14:ce:12:40:2e:10:0a:75:68:
f8:7d:3a:71:83:0f:ab:d0:5c:4a:ce:8b:4d:0d:06:
94:c2:b0:a6:a0:95:9a:9d:87:a3:7a:7c:bb:a5:e3:
c1:74:40:30:e4:f6:f3:11:95:8c:77:48:d3:a1:fc:
a3:b0:74:54:68:92:79:ea:bd:1a:d7:70:2a:57:bd:
c6:d3:c3:13:3a:3a:ed:57:57:b9:d8:1b:e5:ec:c4:
a9:e9:32:84:74:08:15:b0:d5:be:71:54:05:2f:d9:
e0:3f:9f:a1:44:26:1d:7f:b7:6c:20:83:89:ff:09:
e0:ea:1b:52:ba:b7:b0:33:85:ec:9d:1a:04:53:39:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2B:52:5E:CA:75:88:4A:52:3C:19:C4:D6:50:EE:F3:DC:8E:8F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/fdb5caab-5dba-3921-86bf-be429bec2859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
45.115.60.0/24
45.117.52.0/24
45.117.54.0/24
45.123.144.0/24
103.4.248.0/22
103.49.155.0/24
103.81.231.0/24
103.196.8.0/23
103.207.45.0-103.207.46.255
103.216.1.0/24
103.216.3.0/24
116.206.150.0/24
137.59.61.0/24
139.5.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:a4:99:81:1a:d0:b9:cc:8d:db:87:3d:1e:75:2b:d5:72:b0:
c6:a6:04:f2:74:1a:cb:81:dc:dd:df:17:15:89:31:a2:a2:4a:
f3:45:f8:2d:2d:ac:b4:58:be:9b:69:77:c4:54:44:30:5e:85:
f9:6c:6b:0c:32:41:8b:db:73:f2:92:ee:24:be:16:ef:1b:af:
ac:5a:8a:31:dc:79:66:99:79:19:f8:14:10:2a:58:95:5f:e2:
91:82:34:55:1e:47:a6:07:ba:82:a8:4b:1b:56:22:c3:11:e4:
cc:3f:3f:2c:91:d5:3b:b8:05:9c:d7:27:6c:e2:4d:3d:cc:37:
48:af:a0:10:9b:8c:69:f9:98:81:4b:ea:8e:b0:a1:bc:96:11:
34:87:16:28:80:c0:d5:32:3b:ae:2a:3c:57:d5:93:78:07:b8:
96:f2:b1:07:9b:2e:f6:f3:55:39:a6:29:df:f8:b2:b2:cd:97:
8d:19:bf:d6:18:2c:6c:b1:d7:4d:14:c2:35:b6:69:a0:a5:67:
b5:b5:35:73:1d:25:e2:22:92:3f:48:b3:19:c0:e0:5c:8c:9c:
a9:35:22:c4:7b:8e:bf:ea:0e:bd:32:f1:46:02:9c:29:fc:f2:
4a:8c:58:97:ec:25:0e:38:25:8f:92:3d:9a:26:fa:9c:b3:46:
e0:f8:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:57:01 2025 by rpki-client