Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6072d6d2-65dc-35d7-b9dc-8a72b7efaa61.roa
File: 6072d6d2-65dc-35d7-b9dc-8a72b7efaa61.roa (raw, json)
Hash identifier: OojGavv3Oz8UqZY4Qna29WROaCtYrks1kVQ5hdCKlwI=
Subject key identifier: 67:ED:7A:73:9E:EB:DF:06:23:42:E2:85:89:09:06:23:AD:AF:40:50
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858488B78A6AD8CD78BB5701F7B80
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6072d6d2-65dc-35d7-b9dc-8a72b7efaa61.roa
Signing time: Tue 14 Jan 2025 19:07:21 +0000
ROA not before: Tue 14 Jan 2025 19:07:21 +0000
ROA not after: Mon 14 Apr 2025 18:07:21 +0000
asID: 18779
IP address blocks: 155.94.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:78:a6:ad:8c:d7:8b:b5:70:1f:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 14 19:07:21 2025 GMT
Not After : Apr 14 18:07:21 2025 GMT
Subject: CN=b2cd1fc2-0885-4847-8a5d-d553d4e82e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:0a:6e:1f:0e:33:3e:db:af:29:a7:7f:60:
4b:9d:2a:28:cc:b8:4c:f9:dd:94:27:d5:c6:55:fb:
d2:38:41:d5:97:9b:c8:b1:17:1f:71:f9:1d:67:d6:
ba:e7:69:1d:7f:8a:b6:6e:b5:8c:11:45:19:bf:5e:
c8:e7:5e:dc:d3:9c:73:96:6a:ee:7d:21:69:53:3a:
65:7a:11:d4:84:b0:3a:97:50:78:96:38:3c:f4:10:
6f:a6:1d:db:e7:08:33:57:03:69:31:3e:3a:8b:ec:
e5:ab:87:da:55:7c:09:01:8e:8d:35:26:53:07:df:
ea:65:c9:74:be:d8:0e:22:bf:40:11:94:dd:18:db:
b7:3e:b1:46:5e:15:90:c8:82:c5:f3:cd:fd:fb:56:
eb:23:ce:72:bb:30:7f:60:1a:eb:0d:51:ff:8b:32:
3f:9b:56:c6:13:ef:71:ed:9f:01:22:17:70:10:a3:
c1:ed:17:cb:54:1f:fc:d3:15:77:bd:e6:20:32:88:
db:fa:3d:77:d0:0c:e6:cb:a7:76:10:2e:21:84:76:
d5:1e:ba:c1:f6:14:bd:8a:0c:5f:c4:06:3e:a6:69:
85:33:0d:83:f8:27:71:c0:12:9b:a8:09:39:14:6b:
ce:00:e4:eb:42:f5:7a:36:26:4d:e1:f9:6d:b8:16:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:ED:7A:73:9E:EB:DF:06:23:42:E2:85:89:09:06:23:AD:AF:40:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6072d6d2-65dc-35d7-b9dc-8a72b7efaa61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b5:f5:1a:62:be:0e:8f:27:fc:e4:f6:ad:1b:08:28:4c:17:
7b:fa:b8:73:d5:c3:f2:b4:2f:ec:38:ce:f4:a1:d1:15:9d:a7:
18:b3:e3:a4:7b:2e:fa:c4:91:1c:6c:fe:0b:79:66:33:32:de:
40:80:7f:a4:17:65:ec:63:64:b6:2f:83:92:1e:f0:20:6a:90:
84:30:c6:e7:c6:b8:fd:58:a0:50:9b:14:96:0c:bc:83:7d:c3:
d7:9b:4f:19:33:3e:c5:b4:2b:98:af:bd:cf:f0:40:06:dc:d4:
79:64:34:75:b9:68:45:c8:2e:cf:d4:78:48:ac:a1:2e:df:a6:
f2:67:07:ff:e8:e4:e1:cd:95:27:78:10:d7:4a:bf:6f:eb:f7:
c6:52:0f:29:07:e3:25:1d:2d:11:5a:88:3e:62:ad:a0:04:a1:
78:df:b7:e7:5a:30:f0:0d:74:4f:c9:71:f3:b9:07:58:62:cb:
2c:00:a8:c2:ac:fe:ea:04:b2:aa:7e:b5:8b:33:97:3a:8f:9c:
bf:10:47:38:bc:11:88:bf:a4:cc:e2:62:47:b1:72:97:b8:b9:
b2:7e:ba:b0:17:9d:18:c8:44:23:dc:6b:72:ca:05:0d:00:b5:
0f:c3:2b:ee:3f:4e:c8:d9:92:d2:2c:d0:39:49:51:37:1b:34:
e8:f3:75:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiLeKatjNeLtXAfe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI1MDExNDE5MDcyMVoXDTI1MDQxNDE4MDcyMVowLzEtMCsGA1UEAxMk
YjJjZDFmYzItMDg4NS00ODQ3LThhNWQtZDU1M2Q0ZTgyZTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNEKbh8OMz7brymnf2BLnSoozLhM+d2UJ9XG
VfvSOEHVl5vIsRcfcfkdZ9a652kdf4q2brWMEUUZv17I517c05xzlmrufSFpUzpl
ehHUhLA6l1B4ljg89BBvph3b5wgzVwNpMT46i+zlq4faVXwJAY6NNSZTB9/qZcl0
vtgOIr9AEZTdGNu3PrFGXhWQyILF8839+1brI85yuzB/YBrrDVH/izI/m1bGE+9x
7Z8BIhdwEKPB7RfLVB/80xV3veYgMojb+j130Azmy6d2EC4hhHbVHrrB9hS9igxf
xAY+pmmFMw2D+CdxwBKbqAk5FGvOAOTrQvV6NiZN4fltuBYy7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGftenOe698GI0LihYkJBiOtr0BQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvNjA3MmQ2ZDItNjVkYy0z
NWQ3LWI5ZGMtOGE3MmI3ZWZhYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm17dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADa19Rpivg6PJ/zk9q0bCChMF3v6uHPVw/K0L+w4zvSh0RWdpxiz46R7
LvrEkRxs/gt5ZjMy3kCAf6QXZexjZLYvg5Ie8CBqkIQwxufGuP1YoFCbFJYMvIN9
w9ebTxkzPsW0K5ivvc/wQAbc1HlkNHW5aEXILs/UeEisoS7fpvJnB//o5OHNlSd4
ENdKv2/r98ZSDykH4yUdLRFaiD5iraAEoXjft+daMPANdE/JcfO5B1hiyywAqMKs
/uoEsqp+tYszlzqPnL8QRzi8EYi/pMziYkexcpe4ubJ+urAXnRjIRCPca3LKBQ0A
tQ/DK+4/TsjZktIs0DlJUTcbNOjzdXE=
-----END CERTIFICATE-----
Generated at Thu Apr 17 12:37:16 2025 by rpki-client