Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/7ebc8d1d-06a8-399d-8256-9a11593e9267.roa
File: 7ebc8d1d-06a8-399d-8256-9a11593e9267.roa (raw, json)
Hash identifier: L+azQNN9GxIZoJec4gO8bWufTMz5nidX88/akgjNzDs=
Subject key identifier: 5F:16:C3:6C:28:4B:13:D7:35:72:A3:80:95:AC:88:B2:4F:97:E8:1F
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285848A500BFD3B74C523C732868C0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/7ebc8d1d-06a8-399d-8256-9a11593e9267.roa
Signing time: Thu 23 Jan 2025 22:36:46 +0000
ROA not before: Thu 23 Jan 2025 22:36:46 +0000
ROA not after: Wed 23 Apr 2025 21:36:46 +0000
asID: 36352
IP address blocks: 192.161.48.0/24 maxlen: 24
192.161.50.0/24 maxlen: 24
192.161.51.0/24 maxlen: 24
192.161.52.0/24 maxlen: 24
192.161.53.0/24 maxlen: 24
192.161.54.0/24 maxlen: 24
192.161.57.0/24 maxlen: 24
192.161.62.0/24 maxlen: 24
192.161.160.0/24 maxlen: 24
192.161.162.0/24 maxlen: 24
192.161.163.0/24 maxlen: 24
192.161.166.0/24 maxlen: 24
192.161.167.0/24 maxlen: 24
192.161.173.0/24 maxlen: 24
192.161.177.0/24 maxlen: 24
204.44.96.0/24 maxlen: 24
204.44.106.0/24 maxlen: 24
204.44.111.0/24 maxlen: 24
204.152.200.0/24 maxlen: 24
204.152.211.0/24 maxlen: 24
204.152.213.0/24 maxlen: 24
204.152.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:00:bf:d3:b7:4c:52:3c:73:28:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 23 22:36:46 2025 GMT
Not After : Apr 23 21:36:46 2025 GMT
Subject: CN=c1a15bbe-e03a-44d4-8738-3159eecef9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:dd:eb:07:3c:81:2c:9c:2b:b9:a2:f6:0b:
e6:ce:2f:10:e7:44:27:fd:8e:03:fb:d3:4d:b1:bf:
5a:78:20:1d:23:94:8c:e5:f4:b7:56:a7:06:a8:69:
c1:ce:26:1a:c1:61:38:37:6c:cd:54:3b:f3:22:2d:
30:fb:c6:6f:c8:cb:77:bd:b7:33:d5:ac:85:94:ab:
82:30:24:6a:0f:08:14:7c:35:63:f1:1f:9b:0c:bc:
a6:4e:82:87:a6:ac:75:51:a9:5f:e9:1f:29:9a:73:
e6:dd:43:80:bf:35:1f:50:40:ba:5e:62:8b:b7:54:
cf:0a:3a:de:95:d8:bb:53:1b:44:46:4a:de:3f:d2:
5d:b7:87:15:06:8d:2f:7c:b4:48:ce:d2:e9:3a:35:
cc:6c:9a:1c:41:4e:96:a3:5f:bd:ad:31:57:ca:d4:
c5:91:53:56:0e:70:6b:1d:ca:39:20:d2:9c:36:96:
6c:61:ee:2e:44:4c:7c:be:8d:04:75:1d:b2:41:d1:
6d:54:b4:ec:e0:49:19:79:ef:2a:0b:36:26:42:10:
9e:9b:9d:31:56:3d:3a:7c:28:e1:89:5d:b2:3e:f0:
bf:f7:f1:16:fb:3a:a4:7e:bf:d6:54:95:e3:23:44:
c3:0c:fd:cb:11:6e:a9:5a:74:65:a0:b3:31:f2:b3:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:C3:6C:28:4B:13:D7:35:72:A3:80:95:AC:88:B2:4F:97:E8:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/7ebc8d1d-06a8-399d-8256-9a11593e9267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.48.0/24
192.161.50.0-192.161.54.255
192.161.57.0/24
192.161.62.0/24
192.161.160.0/24
192.161.162.0/23
192.161.166.0/23
192.161.173.0/24
192.161.177.0/24
204.44.96.0/24
204.44.106.0/24
204.44.111.0/24
204.152.200.0/24
204.152.211.0/24
204.152.213.0/24
204.152.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:69:c3:72:76:42:86:e2:81:0d:93:02:c4:58:2e:20:ab:7f:
94:c4:17:0f:82:2b:59:82:f0:56:48:ff:ad:6f:97:5a:42:95:
40:5e:46:d5:ba:0f:5d:20:bf:1e:57:c1:97:8d:27:e6:0a:36:
e0:8d:ff:4d:e4:8d:a5:ae:ef:bf:2a:e3:56:53:cd:38:05:3e:
b5:26:b0:06:12:e1:53:42:8e:e3:63:04:08:35:3c:e0:1b:51:
83:3a:89:f0:aa:ed:c9:e6:98:6c:2e:0d:21:eb:9a:aa:20:05:
7a:dd:81:6b:0b:51:99:36:d3:4f:b0:07:7d:0b:ec:31:23:34:
fc:81:6a:4e:c3:59:09:e6:6a:c5:69:64:a0:07:3f:b2:90:c1:
b3:61:b7:62:08:68:b0:a1:24:e9:0b:21:f6:ad:9f:62:24:37:
2b:79:f1:35:45:9e:5d:13:c5:a1:19:62:79:87:d3:30:18:1b:
5e:af:c0:20:f5:ae:33:1d:eb:27:13:66:cb:e5:ae:d4:37:51:
79:83:9d:34:f0:a7:8c:61:60:ac:66:dc:ba:20:52:5d:95:f6:
23:f8:52:48:0b:ab:04:00:e8:4d:42:4d:77:c7:8e:2a:95:2a:
1b:48:78:de:26:69:e5:a1:80:9b:b3:3a:16:ad:68:e0:27:49:
cd:97:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:39:04 2025 by rpki-client