Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/7861b567-a672-399a-b9f1-836f210f55ff.roa
File: 7861b567-a672-399a-b9f1-836f210f55ff.roa (raw, json)
Hash identifier: k2Y6EZIXR1oBSbeKF44Br8WPkbiaZRbYbnAAGxBnIZ0=
Subject key identifier: FD:EE:B4:01:85:5D:5B:5C:DF:B8:25:39:A0:4A:B9:47:45:4D:0C:F1
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858488DF9FD7D87DFC453D7305000
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/7861b567-a672-399a-b9f1-836f210f55ff.roa
Signing time: Wed 15 Jan 2025 16:39:34 +0000
ROA not before: Wed 15 Jan 2025 16:39:34 +0000
ROA not after: Tue 15 Apr 2025 15:39:34 +0000
asID: 8100
IP address blocks: 155.94.192.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:f9:fd:7d:87:df:c4:53:d7:30:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 15 16:39:34 2025 GMT
Not After : Apr 15 15:39:34 2025 GMT
Subject: CN=b026c221-5071-4a0a-8b17-c52c075d6452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:f5:8f:61:5d:fe:7c:8f:64:80:e7:b5:4d:
84:ed:f5:35:39:f4:51:6b:55:b7:7f:c8:6f:c9:dc:
e2:20:ad:f5:b9:9e:0f:a7:32:83:66:f9:eb:d5:d5:
1f:14:f3:6f:a8:8c:fe:7d:6e:b0:d1:2a:e6:15:52:
5e:1d:32:52:87:cc:c0:e1:3b:32:46:c6:70:90:57:
45:f7:dc:12:d6:83:77:cf:24:44:81:a0:3b:18:38:
07:c5:d5:d8:32:4f:8c:d5:46:9b:c1:93:24:35:08:
6e:dc:ae:d4:e7:e7:f6:3d:b5:80:8c:48:54:a6:ea:
1b:f7:4a:d8:6d:9a:63:a5:57:67:32:24:16:09:31:
4e:a2:32:54:52:c7:ad:c1:f8:8d:e5:e8:a4:52:d4:
70:61:13:35:f1:c0:23:61:38:56:e8:f0:ad:9f:1b:
14:1f:66:04:fc:69:ce:f4:dc:17:00:38:8d:39:22:
8a:91:c3:e5:3e:e1:09:ff:f0:32:ca:64:ed:8e:6f:
c7:01:2b:f7:a9:16:2d:35:2f:bb:05:b5:da:9d:3a:
05:29:a2:e3:1f:80:71:42:64:b1:8c:34:fe:b3:5a:
cd:ca:69:e6:00:84:47:8a:95:be:72:a3:e8:f6:65:
c2:e9:02:46:0b:86:fd:42:87:e6:b1:52:80:e7:fb:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:B4:01:85:5D:5B:5C:DF:B8:25:39:A0:4A:B9:47:45:4D:0C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/7861b567-a672-399a-b9f1-836f210f55ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c8:f0:b0:54:78:08:45:fc:44:7b:67:63:72:66:d5:69:a3:
de:c8:c3:d5:49:31:ad:3c:be:f0:78:d2:aa:14:4c:6a:06:dd:
0d:94:33:e8:88:24:dc:0f:e3:78:6c:f7:7b:72:79:c7:6d:a0:
0d:db:43:7b:f4:f0:7f:2d:50:ac:b8:2c:17:2e:5c:09:17:e3:
5b:46:be:30:fe:94:4b:f8:c7:7c:8a:8a:c2:69:20:92:a1:19:
13:80:60:f7:9c:80:26:af:cb:1e:38:86:af:31:4d:75:ca:e4:
56:2d:0d:d0:b7:e6:60:47:14:d5:54:e5:fc:2a:f8:dd:2b:fb:
88:df:95:11:a6:3b:aa:71:ba:3f:46:b6:14:f3:b0:95:eb:45:
05:d4:b5:28:84:48:e0:75:7f:56:84:f9:76:cf:e3:ce:ae:ca:
72:2d:66:b0:17:71:b8:c5:11:95:8b:33:6e:00:8c:dc:07:7f:
88:95:66:ad:1b:ea:57:0a:3c:20:29:e2:64:55:ec:4c:38:a5:
bc:75:ff:54:da:46:0a:24:99:cb:3f:82:d2:90:69:8f:52:f2:
81:9e:f7:a5:5d:27:a2:36:a6:9a:4e:ab:05:59:3f:b3:4e:82:
fb:1f:be:97:4e:17:e0:b2:9d:f8:f0:0a:14:a2:6d:22:df:f1:
d4:8b:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:29:27 2025 by rpki-client