Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/df14c599-a706-3525-96d5-50e6dcd7cec7.roa
File: df14c599-a706-3525-96d5-50e6dcd7cec7.roa (raw, json)
Hash identifier: oj1GlrNix3IWME8xr7KTZiU/PddnWfefSAjkTE6X9WU=
Subject key identifier: D6:B8:7F:A8:95:8C:23:C9:C2:C4:6C:E8:2D:B8:C4:E9:E6:58:82:CC
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858483720193772BE5E760D141280
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/df14c599-a706-3525-96d5-50e6dcd7cec7.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 30092
IP address blocks: 155.94.246.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:19:37:72:be:5e:76:0d:14:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=6a5ae315-c1c0-4d2b-bf56-96cde8533065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:e0:74:bd:a0:e4:53:8e:65:b9:11:d3:e7:
a9:e8:6f:ed:86:cb:5b:c1:e7:45:79:62:c4:06:72:
fe:b1:0d:79:35:32:34:88:94:8b:25:13:6f:e0:de:
84:2a:f3:c5:65:bd:8a:60:16:02:f1:49:a7:38:fc:
04:81:9f:5b:61:68:f3:bd:1a:6b:c7:b8:77:09:07:
f9:6f:07:07:34:ed:42:ba:61:31:14:5c:a0:3d:bf:
81:66:a3:8f:66:51:6d:1b:83:6a:85:61:ae:f1:48:
b7:fd:78:bb:a4:22:1b:12:80:5a:f2:b1:15:e9:30:
73:f1:c8:20:db:c2:1b:3f:7d:f9:71:5c:a3:93:22:
6b:38:9a:2e:93:5e:07:2c:f5:96:e1:43:cc:f3:4b:
c7:54:85:b4:5a:37:73:60:c4:ea:d0:a4:08:77:ff:
ad:ca:ff:96:49:aa:99:30:bd:f2:29:23:45:02:fc:
5e:b6:f2:67:28:d4:4f:20:5b:21:51:6b:ad:bc:f1:
8f:b1:2f:38:5b:86:26:d4:48:0e:62:45:eb:2d:12:
e5:13:f8:e7:15:87:a2:b5:5d:74:36:5f:ee:ce:dd:
7e:69:4a:22:6b:24:f0:f4:32:f3:5a:41:93:f3:a8:
6c:63:4d:62:05:ff:46:f7:31:49:7f:0d:54:bc:8e:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:7F:A8:95:8C:23:C9:C2:C4:6C:E8:2D:B8:C4:E9:E6:58:82:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/df14c599-a706-3525-96d5-50e6dcd7cec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:5b:a6:5e:2f:f1:d4:39:f5:d5:75:fe:8e:e7:6c:c7:98:37:
37:58:38:ed:d8:ec:51:0f:c8:f8:d8:df:c8:82:67:e3:cc:b3:
52:2e:c0:ef:b0:a2:fb:11:05:fa:dc:0a:00:a3:cf:df:51:2e:
aa:68:b5:c9:1f:03:d6:ab:d0:aa:4a:84:d2:9e:19:7a:74:92:
01:30:ae:56:1f:61:dc:1e:68:44:e7:0c:a1:f8:73:e9:ee:1f:
22:b3:6b:41:6c:d3:c1:da:b6:60:9f:63:bb:79:bd:91:00:6d:
b5:4b:df:59:5b:55:9c:70:42:3c:5c:0a:62:9f:00:6d:25:ed:
51:42:ac:ce:cb:ee:7a:fd:12:af:c0:07:f9:87:b2:d3:83:fa:
1b:41:c3:11:7a:14:a5:51:03:cf:c0:6f:b6:8e:47:10:e4:ef:
60:20:d2:92:93:06:64:e1:11:60:3b:6a:c5:a1:e7:c0:92:a5:
c3:7c:8e:79:49:b4:da:2a:73:1e:55:dd:7d:ab:ad:0f:1a:df:
04:1f:f1:4f:ac:98:96:1e:ed:08:c3:38:e2:cb:b9:c4:24:19:
59:ee:91:b1:95:dd:49:50:84:d3:fc:36:87:7c:04:62:99:10:
2a:eb:00:5f:58:af:66:ca:e7:59:0d:0c:4a:c3:ed:d2:a2:03:
aa:51:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:45:55 2025 by rpki-client