Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/e31cebda-6e07-3565-b072-87aff91d8061.roa
File: e31cebda-6e07-3565-b072-87aff91d8061.roa (raw, json)
Hash identifier: 2srIatlAFM0ioR8hFvy6lsAf9MP5AbsCiJm1GaopAto=
Subject key identifier: EE:68:21:D6:D6:E6:B5:F7:80:08:97:72:38:93:83:4A:3B:B4:F6:49
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285848A5B6191B96B93D65A2A36640
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/e31cebda-6e07-3565-b072-87aff91d8061.roa
Signing time: Fri 24 Jan 2025 04:42:10 +0000
ROA not before: Fri 24 Jan 2025 04:42:10 +0000
ROA not after: Thu 24 Apr 2025 03:42:10 +0000
asID: 8100
IP address blocks: 198.55.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:b6:19:1b:96:b9:3d:65:a2:a3:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 24 04:42:10 2025 GMT
Not After : Apr 24 03:42:10 2025 GMT
Subject: CN=5977fc99-3520-462f-9063-8e9c2d9425aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:ed:0a:a2:73:05:79:24:25:c1:80:59:9c:
4a:10:78:80:ad:4c:5f:80:69:97:36:d2:c6:e4:58:
2e:cd:fc:12:e4:1e:36:f9:f4:66:95:c8:bb:8d:26:
bc:dc:22:17:70:69:b1:46:b2:93:29:26:1b:5c:b0:
dc:6e:8d:00:6c:e3:15:0d:c7:90:76:8c:0f:f0:aa:
42:9d:65:22:d8:27:06:ab:b9:56:f6:a3:61:04:d4:
3a:81:ce:d7:39:92:ee:6f:5e:ea:8f:62:55:84:0c:
a2:ed:c0:49:82:6d:42:74:a1:94:5f:00:c0:65:00:
46:61:e0:6e:8a:1f:7c:a9:0c:da:e8:46:16:50:dd:
94:a5:a2:d4:57:53:a5:0a:02:f0:d8:83:df:e7:3b:
39:09:4d:51:c3:06:3b:2d:5d:25:37:de:bf:03:38:
d7:e0:5b:9a:da:ec:50:94:18:08:11:1d:22:1d:ef:
9c:5e:7c:73:05:69:5f:27:16:d1:ab:37:88:36:fe:
f7:14:6f:89:f5:f9:89:d8:62:f4:60:44:1b:ce:8b:
ec:f8:dc:69:f6:c1:e9:14:84:68:38:48:96:8e:0c:
44:a0:08:a7:f9:23:df:35:1b:a1:7b:21:96:31:28:
33:b9:b1:95:c9:66:91:f0:20:df:35:f3:1c:d3:cf:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:21:D6:D6:E6:B5:F7:80:08:97:72:38:93:83:4A:3B:B4:F6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/e31cebda-6e07-3565-b072-87aff91d8061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.55.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:76:63:da:07:49:90:f9:1c:eb:5a:8f:1e:80:18:27:0e:f2:
9c:6f:e8:6c:9b:bf:de:38:07:d7:67:d7:6d:b2:21:19:c8:7b:
92:50:17:e5:8b:c0:02:64:a8:0e:33:8f:98:02:7a:e1:3f:bc:
10:b6:4e:97:56:7a:3f:f1:18:35:1c:00:02:44:b9:8d:02:e0:
3d:e9:3c:4c:d8:58:d0:b1:56:0f:e6:91:e4:09:98:06:da:d4:
99:92:c6:a6:bf:76:5c:07:54:b7:5e:7f:4b:97:18:ce:5a:36:
4d:69:80:8d:b5:8d:98:40:d0:0d:30:a7:6b:7f:8b:68:c1:35:
f3:e0:18:7c:72:53:a1:18:9e:a7:8f:c2:e5:50:19:d0:56:e1:
e1:9c:7e:2c:b4:f3:59:32:17:fd:26:89:b2:4f:d1:81:fe:5a:
b1:8a:b6:a7:51:b9:ca:7e:2f:eb:04:04:70:76:c1:5b:54:5f:
17:47:9c:f7:f9:e1:8a:f4:61:30:af:b9:14:4f:c6:7b:dd:18:
72:4d:0e:60:3d:86:03:47:1b:28:17:53:a6:65:ae:ed:3a:e8:
a4:7e:9d:a2:fd:c5:14:66:48:46:e2:3a:7f:8e:68:20:0a:72:
3b:e4:e1:56:bc:7b:af:66:3b:a3:81:bd:ca:73:97:c3:ac:13:
1e:69:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:43:30 2025 by rpki-client