Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/a742d430-8d6a-3ac7-8efd-506c18aaac0d.roa
File: a742d430-8d6a-3ac7-8efd-506c18aaac0d.roa (raw, json)
Hash identifier: /AHG0Dc2o7MmPW1TvZDAwmSIjGC+AXhN/MbCsmKTUEM=
Subject key identifier: 90:36:A4:0B:B7:B2:42:29:97:98:B1:EC:65:20:3B:26:8D:3C:77:2D
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858481B3530A1124633799A8F2600
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/a742d430-8d6a-3ac7-8efd-506c18aaac0d.roa
Signing time: Thu 05 Dec 2024 14:00:51 +0000
ROA not before: Thu 05 Dec 2024 14:00:51 +0000
ROA not after: Wed 05 Mar 2025 14:00:51 +0000
asID: 30092
IP address blocks: 192.161.161.0/24 maxlen: 24
192.161.164.0/24 maxlen: 24
198.55.103.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:35:30:a1:12:46:33:79:9a:8f:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Dec 5 14:00:51 2024 GMT
Not After : Mar 5 14:00:51 2025 GMT
Subject: CN=6dc01144-1635-408e-8a8c-12de96901f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:9b:e7:65:de:95:91:55:c3:8a:29:f6:6c:
ff:cb:a2:66:8b:ed:d8:1d:2a:a3:a0:9b:69:0f:fd:
e3:ff:c6:49:62:0c:3d:46:52:dd:40:e7:60:b0:09:
8e:03:fa:79:47:15:7d:f5:53:a7:fb:d1:35:2d:c9:
3e:b7:af:58:d7:6b:71:ea:9c:dc:b6:12:7d:e9:4a:
b8:83:75:f5:40:d2:03:72:25:e7:38:d9:a8:ae:06:
5a:c4:8c:53:60:a9:88:90:58:e6:96:9a:b9:38:b0:
5d:d7:45:eb:81:75:07:36:0e:57:92:2f:8e:b7:15:
12:ec:aa:7f:aa:03:53:9e:bc:91:57:20:1e:82:62:
ac:14:89:eb:c2:04:62:ca:67:f6:43:91:8e:93:46:
73:1e:d5:9b:d1:8f:1d:1a:78:2f:8c:be:a4:93:f6:
fc:08:7b:c8:da:ce:57:f7:40:fe:01:31:87:59:f0:
8e:27:b8:e3:cb:87:07:3c:92:bc:81:8f:a8:7c:9e:
c8:65:5f:f2:cb:71:43:f7:e1:d8:0c:91:f2:a5:fe:
8b:bb:74:93:f1:98:aa:4d:4c:33:b8:d1:21:b8:6a:
20:1d:02:b5:90:42:10:5f:02:e0:65:c7:e2:87:77:
b1:78:2b:b4:41:9c:1f:52:c8:0c:a3:bf:06:fd:eb:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:36:A4:0B:B7:B2:42:29:97:98:B1:EC:65:20:3B:26:8D:3C:77:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/a742d430-8d6a-3ac7-8efd-506c18aaac0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.161.0/24
192.161.164.0/24
198.55.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:50:0e:a4:16:9b:4e:e5:e5:0c:c5:67:ca:52:ab:db:d2:d8:
76:eb:43:c3:d2:22:14:86:93:88:3e:81:3e:68:c5:bf:f4:d5:
c1:42:cb:ca:89:21:2c:d8:f0:6a:f3:59:79:ba:75:16:4c:71:
02:d7:e1:7c:45:a3:ab:17:b2:f0:50:87:1c:08:f7:1a:37:23:
10:af:b1:f1:76:3a:38:3a:49:db:71:81:27:6b:7c:00:c0:d9:
7b:0b:b1:4a:a4:17:7d:de:da:f7:11:64:58:fa:cf:f1:a8:c0:
75:d0:b6:f7:f1:b4:a7:c6:68:fc:d4:2e:bc:31:fe:c5:ef:f2:
c4:97:47:18:c9:29:3d:1e:48:b8:1a:cb:10:d2:74:7d:f6:89:
7a:a7:c2:94:83:35:64:6b:b9:84:db:77:83:4c:2d:76:17:b8:
12:03:f8:65:1e:e5:16:f0:6c:bd:30:74:58:b6:b4:af:c5:85:
4b:a5:68:65:52:97:8d:6e:c0:57:1b:e2:31:29:35:16:78:bf:
26:ad:ef:c8:55:08:c5:21:ab:36:fe:0b:21:09:37:97:18:4d:
b1:ad:2b:2e:ea:ae:97:2f:6e:69:09:f9:b1:f1:01:2c:00:ef:
75:58:1e:f1:3b:2a:0f:ca:e9:bb:a5:42:47:0a:bd:53:9f:44:
cd:88:9e:ff
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEgbNTChEkYzeZqPJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MTIwNTE0MDA1MVoXDTI1MDMwNTE0MDA1MVowLzEtMCsGA1UEAxMk
NmRjMDExNDQtMTYzNS00MDhlLThhOGMtMTJkZTk2OTAxZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Wb52XelZFVw4op9mz/y6Jmi+3YHSqjoJtp
D/3j/8ZJYgw9RlLdQOdgsAmOA/p5RxV99VOn+9E1Lck+t69Y12tx6pzcthJ96Uq4
g3X1QNIDciXnONmorgZaxIxTYKmIkFjmlpq5OLBd10XrgXUHNg5Xki+OtxUS7Kp/
qgNTnryRVyAegmKsFInrwgRiymf2Q5GOk0ZzHtWb0Y8dGngvjL6kk/b8CHvI2s5X
90D+ATGHWfCOJ7jjy4cHPJK8gY+ofJ7IZV/yy3FD9+HYDJHypf6Lu3ST8ZiqTUwz
uNEhuGogHQK1kEIQXwLgZcfih3exeCu0QZwfUsgMo78G/es6JQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJA2pAu3skIpl5ix7GUgOyaNPHctMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvYTc0MmQ0MzAtOGQ2YS0z
YWM3LThlZmQtNTA2YzE4YWFhYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwKGhAwQA
wKGkAwQAxjdnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAENQDqQWm07l5QzFZ8pSq9vS2HbrQ8PSIhSGk4g+
gT5oxb/01cFCy8qJISzY8GrzWXm6dRZMcQLX4XxFo6sXsvBQhxwI9xo3IxCvsfF2
Ojg6SdtxgSdrfADA2XsLsUqkF33e2vcRZFj6z/GowHXQtvfxtKfGaPzULrwx/sXv
8sSXRxjJKT0eSLgayxDSdH32iXqnwpSDNWRruYTbd4NMLXYXuBID+GUe5RbwbL0w
dFi2tK/FhUulaGVSl41uwFcb4jEpNRZ4vyat78hVCMUhqzb+CyEJN5cYTbGtKy7q
rpcvbmkJ+bHxASwA73VYHvE7Kg/K6bulQkcKvVOfRM2Inv8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 12:34:38 2025 by rpki-client