Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/55f5ce27-64bf-370c-bb99-bbc2bb433d61.roa
File: 55f5ce27-64bf-370c-bb99-bbc2bb433d61.roa (raw, json)
Hash identifier: 91xwxUDIs0FLcOyDwtMP7N8z9q5dCTTWYSHviDvbabw=
Subject key identifier: 35:30:01:C1:FA:46:A6:94:36:E7:EB:A5:D2:5C:E0:66:AE:56:65:E5
Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial: 010D0C9F43285838CED5490D084AB2F86C7AA1D0
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/55f5ce27-64bf-370c-bb99-bbc2bb433d61.roa
Signing time: Mon 25 Jan 2021 05:00:00 +0000
ROA not before: Mon 25 Jan 2021 05:00:00 +0000
ROA not after: Sun 07 May 2023 04:00:00 +0000
asID: 36445
IP address blocks: 149.248.72.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:ce:d5:49:0d:08:4a:b2:f8:6c:7a:a1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Validity
Not Before: Jan 25 05:00:00 2021 GMT
Not After : May 7 04:00:00 2023 GMT
Subject: CN=c71009d0-4b46-4892-8bfe-7efc9b814b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:e7:dd:e4:4a:23:4a:a5:a9:c6:7a:b0:b3:
8e:07:8c:32:29:ab:1c:5a:6a:7f:e1:15:36:f7:f7:
34:f0:c6:42:96:92:f4:4f:01:5e:d2:68:7c:7a:18:
43:44:6e:7c:20:69:d5:54:f7:36:e8:f7:e8:3e:9d:
43:96:4d:36:dd:1d:31:29:e8:2e:b5:36:be:9d:88:
94:2d:6b:78:41:10:70:32:d9:b4:62:49:56:ce:f4:
0d:6d:a0:09:28:84:5c:fc:32:4d:42:8c:fb:34:19:
16:73:7b:de:22:bd:57:9c:30:f5:f7:25:27:cb:05:
b6:82:26:ee:9c:95:09:bc:0a:2e:3c:ef:29:eb:85:
4a:a8:1c:22:3c:85:29:77:6c:d4:79:08:08:c3:17:
65:3f:14:43:b6:80:28:9f:c4:a8:fc:ac:7f:0e:6b:
32:1b:41:b5:4b:26:2c:ad:c8:6b:0a:86:3d:8a:a6:
62:5f:06:f7:67:e8:26:dc:e3:e3:2b:4c:69:e3:9c:
ef:38:f5:1a:06:47:1e:d6:a7:bf:27:ea:bf:1b:6b:
37:38:bb:fc:77:f8:1e:c8:84:38:68:d3:7f:3c:94:
e7:e2:8b:cc:46:bc:82:76:07:9c:90:8c:a0:76:a3:
ff:87:30:55:a9:30:97:01:8e:03:df:9a:db:a3:83:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:30:01:C1:FA:46:A6:94:36:E7:EB:A5:D2:5C:E0:66:AE:56:65:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/55f5ce27-64bf-370c-bb99-bbc2bb433d61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
X509v3 Authority Key Identifier:
keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
sbgp-ipAddrBlock: critical
IPv4:
149.248.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f0:5f:91:6d:4f:d6:85:b7:27:02:9c:28:19:4f:a1:91:73:
17:1c:41:df:db:9d:47:cb:9e:63:e2:6a:f3:ac:a5:98:6e:22:
fc:cb:d0:57:a2:74:9b:34:e5:32:d4:8a:1c:93:26:58:2c:5c:
ac:c1:e7:a5:57:60:68:c9:39:b2:93:29:74:cf:31:4b:61:82:
1f:63:5f:74:ae:41:a1:f0:6b:0e:5a:e5:16:c2:ec:f7:80:95:
82:de:ae:2e:1f:96:51:80:1e:b1:5a:fd:ce:bf:5b:3a:3b:1f:
aa:09:f3:9a:84:0c:45:01:ba:40:1d:30:b0:fa:94:a4:b9:ff:
7e:4b:82:26:78:41:cd:5e:aa:42:4a:87:60:72:a8:b3:4d:ed:
4e:4a:78:94:f6:61:b5:fb:73:bb:36:b8:08:8a:9e:a3:d4:a6:
ce:78:c3:05:89:0b:90:ee:c0:0a:72:d4:eb:d6:74:5a:90:a8:
35:2e:53:22:cc:68:ff:07:ce:6c:40:07:dd:26:ac:5f:c1:f8:
8f:34:22:59:ef:1a:6c:1d:93:37:74:96:c4:43:0b:76:62:e2:
46:ee:71:ae:5c:2a:c6:ef:de:80:0d:59:b2:bb:1e:0a:a6:52:
a4:ed:99:76:13:2d:f5:16:56:cd:e1:4b:81:eb:13:cd:90:e3:
30:a5:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:20 2025 by rpki-client