Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/cc5899a2-f13a-37aa-a3f9-daa6bfa39d9c.roa
File: cc5899a2-f13a-37aa-a3f9-daa6bfa39d9c.roa (raw, json)
Hash identifier: 9vnMV/JKdg+DsnJcBZK8bN7AAlQCeQCCu7xqe4IRy10=
Subject key identifier: 78:E8:82:4A:9E:15:22:67:C3:98:01:26:05:6D:B6:93:51:2A:C1:E9
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285848A4FDD9B152B06D4447686510
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/cc5899a2-f13a-37aa-a3f9-daa6bfa39d9c.roa
Signing time: Thu 23 Jan 2025 22:30:56 +0000
ROA not before: Thu 23 Jan 2025 22:30:56 +0000
ROA not after: Wed 23 Apr 2025 21:30:56 +0000
asID: 36352
IP address blocks: 104.223.32.0/24 maxlen: 24
104.223.33.0/24 maxlen: 24
104.223.37.0/24 maxlen: 24
104.223.38.0/24 maxlen: 24
104.223.40.0/24 maxlen: 24
104.223.41.0/24 maxlen: 24
104.223.42.0/24 maxlen: 24
104.223.43.0/24 maxlen: 24
104.223.45.0/24 maxlen: 24
104.223.46.0/24 maxlen: 24
104.223.48.0/24 maxlen: 24
104.223.50.0/24 maxlen: 24
104.223.51.0/24 maxlen: 24
104.223.52.0/24 maxlen: 24
104.223.55.0/24 maxlen: 24
104.223.57.0/24 maxlen: 24
104.223.59.0/24 maxlen: 24
104.223.66.0/24 maxlen: 24
104.223.67.0/24 maxlen: 24
104.223.69.0/24 maxlen: 24
104.223.72.0/24 maxlen: 24
104.223.73.0/24 maxlen: 24
104.223.77.0/24 maxlen: 24
104.223.79.0/24 maxlen: 24
104.223.121.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:fd:d9:b1:52:b0:6d:44:47:68:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 23 22:30:56 2025 GMT
Not After : Apr 23 21:30:56 2025 GMT
Subject: CN=30a7cf98-2b83-4ba1-bda4-47168b326bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:ee:d1:c9:8f:a5:d4:be:cd:e1:4c:4c:be:
6e:00:75:ee:a4:a8:f5:ee:ce:90:fc:02:ff:60:52:
07:cc:94:6a:e5:09:60:04:1d:ce:dd:41:2b:79:38:
5f:3d:bc:94:6a:c7:34:a0:f3:c7:40:c8:37:d2:01:
aa:c2:91:d8:87:2a:0e:a2:97:46:b3:aa:b8:39:4b:
b5:e2:a7:72:7d:97:c5:3f:88:41:df:79:44:f8:13:
d2:df:1e:38:24:10:96:01:d9:1a:cc:83:e5:af:af:
e5:ef:7e:b4:a6:98:74:f9:8c:72:32:01:fa:14:2f:
35:ce:84:02:55:f7:2b:5d:40:bd:11:a8:22:c0:45:
7a:9b:3f:54:3a:c6:86:e2:99:95:b8:c8:05:e6:cf:
e5:2a:e6:8b:88:6d:51:1b:8e:e9:6a:e0:54:fe:7e:
8d:40:26:a8:33:85:41:f9:ad:77:c5:ae:ef:cd:5d:
65:6b:9f:a5:a4:56:d8:ea:52:50:34:20:41:c1:3d:
9f:cf:0c:a8:1a:c6:9c:43:e3:3b:c2:8c:49:f5:83:
90:60:a9:8d:1f:1d:c4:59:cd:16:e2:62:a7:40:31:
e7:1b:89:4b:79:a7:50:f4:14:58:c9:0f:f6:90:15:
25:a0:17:e7:83:eb:dd:10:09:b0:dd:d5:34:5d:29:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E8:82:4A:9E:15:22:67:C3:98:01:26:05:6D:B6:93:51:2A:C1:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/cc5899a2-f13a-37aa-a3f9-daa6bfa39d9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.223.32.0/23
104.223.37.0-104.223.38.255
104.223.40.0/22
104.223.45.0-104.223.46.255
104.223.48.0/24
104.223.50.0-104.223.52.255
104.223.55.0/24
104.223.57.0/24
104.223.59.0/24
104.223.66.0/23
104.223.69.0/24
104.223.72.0/23
104.223.77.0/24
104.223.79.0/24
104.223.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:eb:51:af:11:35:77:36:91:92:e8:91:76:c8:69:ff:e4:8e:
dc:0d:29:cb:88:5e:de:cb:34:e3:49:1d:fd:85:dd:8a:d9:f9:
65:4c:2f:4a:42:a9:eb:60:d3:32:5b:e8:d3:79:2a:7d:96:62:
c1:2a:32:e0:d8:e0:7c:68:db:29:99:ee:e0:70:0e:e2:c3:40:
90:b7:6e:7d:7e:40:cd:e6:09:b4:bf:4f:fc:22:3d:27:b3:51:
df:93:55:91:ad:a5:78:db:70:6a:c1:1c:09:79:e5:14:60:82:
60:c9:1e:22:d2:bd:09:3a:31:ba:b3:bf:fb:41:d8:67:dd:f7:
ec:d2:1a:ac:c7:12:34:07:60:cb:7e:99:a0:26:2d:29:c6:c2:
2a:be:e6:cb:32:ce:54:51:7c:70:b8:cf:70:c4:ac:c3:8b:f0:
08:c8:fa:47:bd:97:d1:9c:31:24:73:4d:db:d8:54:3f:84:f1:
ae:74:88:da:0d:88:5f:a6:5a:ba:8d:32:00:0b:e3:d0:95:07:
43:c0:97:2f:9c:29:1c:20:34:82:40:c0:38:8e:95:71:15:2f:
56:ff:62:f8:7b:75:45:d8:0c:e1:a5:40:29:5b:8d:0e:18:4e:
91:9b:b1:f5:88:d1:aa:13:29:75:75:1a:ec:01:bc:bd:9c:53:
d0:d7:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:20:22 2025 by rpki-client