Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/98b6dda5-c123-3259-9727-9c26ebb5e655.roa
File: 98b6dda5-c123-3259-9727-9c26ebb5e655.roa (raw, json)
Hash identifier: kfxN7M0uPKt/2c0PO0Sdb3sjsRMEAGcuwUkZu5/gJs8=
Subject key identifier: 77:4C:55:7D:E3:60:A1:0C:73:9E:52:C9:6A:FF:32:0F:A8:52:55:29
Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial: 010D0C9F43285842C111D588E58589726284A880
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/98b6dda5-c123-3259-9727-9c26ebb5e655.roa
Signing time: Wed 02 Aug 2023 19:12:12 +0000
ROA not before: Wed 02 Aug 2023 19:12:12 +0000
ROA not after: Tue 31 Oct 2023 19:12:12 +0000
asID: 18733
IP address blocks: 107.180.192.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c1:11:d5:88:e5:85:89:72:62:84:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
Validity
Not Before: Aug 2 19:12:12 2023 GMT
Not After : Oct 31 19:12:12 2023 GMT
Subject: CN=3ccb17ea-9160-429d-943d-c322fe004912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8e:ae:db:ae:23:52:7f:99:2c:62:6e:8f:59:
c4:11:94:ab:8d:22:80:5c:8f:47:99:98:a8:e6:73:
36:dc:dc:f0:e7:d3:ea:ea:65:7c:cb:da:4e:3f:1c:
54:04:38:bd:50:70:c9:e9:1d:e4:b5:ed:d8:1f:ad:
57:2f:e4:90:c5:d9:8e:e3:74:ac:ff:3f:44:3f:5d:
27:a5:65:8e:82:7e:cc:81:6b:09:2f:20:46:9f:74:
03:84:3d:df:3b:0d:62:07:bd:b1:49:00:0d:31:a4:
1d:d1:46:17:7e:99:2b:b7:30:ce:65:0a:71:a9:46:
ec:8d:f5:3b:60:75:72:34:47:2c:49:bc:78:72:3c:
ca:c2:ac:5a:3d:ab:38:82:fa:60:d1:15:af:05:c4:
8a:bd:57:33:d1:0b:d1:87:1c:5b:c2:d6:a7:51:ef:
f9:e4:b3:9a:23:ea:4a:d4:9a:22:b1:dc:28:98:e1:
99:ac:5f:71:f2:c5:00:0d:b3:6d:67:e2:c1:96:67:
ff:c0:38:a4:9b:3d:90:e6:62:25:e0:1b:95:f3:56:
0d:08:5e:02:92:4c:06:ce:43:42:d6:02:87:c9:92:
a1:ff:6c:0b:f1:e8:a0:c3:bf:e1:bf:1c:67:82:f1:
4b:6b:ee:e4:01:76:a2:73:51:0f:83:d4:a2:84:38:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4C:55:7D:E3:60:A1:0C:73:9E:52:C9:6A:FF:32:0F:A8:52:55:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/98b6dda5-c123-3259-9727-9c26ebb5e655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
X509v3 Authority Key Identifier:
keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.180.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:11:0d:b5:a1:b6:6b:02:22:0f:49:88:0f:ce:e3:27:6d:7e:
4e:84:d4:17:29:23:37:d7:2a:63:c9:aa:8d:e0:2e:94:69:5b:
be:61:87:9a:64:70:34:c1:1a:a9:15:2c:18:b1:61:31:73:0b:
f8:de:4d:a2:2c:d1:59:95:84:19:b1:02:4e:48:10:ed:e0:2e:
2b:14:85:09:c5:80:d5:72:15:bb:7c:a6:d4:f1:65:11:35:4a:
52:48:2c:07:a5:3b:41:5b:9e:75:19:21:b9:35:1e:36:e5:a2:
93:0b:bf:fd:63:47:e1:0d:6d:8e:7e:c7:86:9e:86:4b:d6:28:
ce:d1:40:6b:54:80:16:d9:89:e9:f4:96:07:89:11:ab:c2:00:
97:7b:5d:e7:87:a1:51:f9:0f:74:a5:a4:13:bf:8b:be:ea:0f:
7f:8d:b6:2d:06:57:62:1a:9b:b0:ac:d7:31:4b:75:fd:04:99:
27:12:cb:3d:48:67:4a:4c:11:b1:3a:47:64:c2:2f:04:9a:4b:
f9:9f:16:9b:48:3f:ca:e2:eb:40:0c:d6:54:fd:ae:85:6e:25:
99:fc:8d:ab:e0:93:07:83:1c:f4:05:37:a9:68:c2:c8:00:67:
6d:49:0d:e6:45:06:b1:f0:33:db:aa:17:20:dd:be:83:bc:a4:
6e:fe:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:18:05 2025 by rpki-client