Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3c97374c-36e2-336e-9315-7f3b5b9610b0.roa
File: 3c97374c-36e2-336e-9315-7f3b5b9610b0.roa (raw, json)
Hash identifier: /H77pdbwC0db2Mv8mc90fLJXmcw8ezI9Tsg/foDalUo=
Subject key identifier: FF:7E:3B:85:A4:8A:57:55:96:EB:2C:FF:6E:D5:8D:92:95:58:D2:EF
Certificate issuer: /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial: 010D0C9F432858461C3415C6649E993635A4D980
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3c97374c-36e2-336e-9315-7f3b5b9610b0.roa
Signing time: Wed 05 Jun 2024 13:00:33 +0000
ROA not before: Wed 05 Jun 2024 13:00:33 +0000
ROA not after: Tue 03 Sep 2024 13:00:33 +0000
asID: 31898
IP address blocks: 65.20.50.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1c:34:15:c6:64:9e:99:36:35:a4:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Validity
Not Before: Jun 5 13:00:33 2024 GMT
Not After : Sep 3 13:00:33 2024 GMT
Subject: CN=f846c097-8355-43a9-8756-26cb1775897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:ea:93:1c:e7:9e:1f:ac:ca:1a:67:cc:44:
6d:3d:47:bd:d1:93:e2:08:23:cd:d1:49:e3:4a:a2:
35:ab:75:ac:bf:06:5c:1f:da:fb:c3:a9:bf:3e:23:
5b:d2:c0:9c:ab:e8:8b:26:84:5a:ac:34:f3:b8:27:
67:55:38:bc:33:6f:99:23:fd:d3:c2:ff:36:6e:6f:
bd:3c:76:37:07:74:9b:c1:f1:8e:cc:04:c8:6c:85:
f4:1e:df:cb:03:5a:59:ba:be:ad:a8:ac:d8:89:32:
b7:80:bb:49:74:f0:c8:36:33:44:58:56:58:c6:68:
ca:09:7a:3a:bc:5d:31:5b:62:cc:d2:3f:1f:96:08:
56:ce:92:ce:82:24:ca:a8:72:5a:1e:bd:9c:60:ee:
76:5b:7f:26:0c:87:99:34:c0:e5:49:89:2b:c4:21:
28:ab:c3:e3:b8:ac:31:18:57:a3:db:d0:91:ce:00:
0d:87:c6:80:ef:c6:a8:f2:52:8b:87:3a:a2:da:f7:
83:fa:a7:46:fd:d4:ee:e5:06:77:7c:bb:70:c5:1d:
b7:8f:a3:57:61:0b:44:d4:d3:60:1f:13:55:64:c6:
39:e1:7a:70:95:0c:2f:8c:eb:5a:fb:9a:5a:0d:63:
42:d2:cc:6a:f0:de:4e:e4:32:78:0b:7a:50:02:c7:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:3B:85:A4:8A:57:55:96:EB:2C:FF:6E:D5:8D:92:95:58:D2:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3c97374c-36e2-336e-9315-7f3b5b9610b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
X509v3 Authority Key Identifier:
keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
sbgp-ipAddrBlock: critical
IPv4:
65.20.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7a:d1:5d:f0:13:d3:d2:3e:b4:21:87:c6:95:ee:58:72:f2:
5e:14:78:4e:ca:a4:71:6a:c1:65:03:19:5b:01:93:3a:45:31:
75:2b:72:35:f5:aa:13:f8:dd:97:ab:b7:6d:24:ab:37:32:12:
2f:85:d9:5f:be:e2:76:15:e7:3c:1a:77:8b:24:e1:42:e1:9b:
dc:93:33:9e:8c:7b:0c:1c:8d:b4:25:5d:8b:e3:e5:28:c9:b4:
e8:3e:75:3c:26:fb:25:fd:1d:0d:ed:32:ed:37:8b:a3:9f:b9:
df:9c:8f:e3:02:86:7f:86:6d:8e:1e:b8:cc:78:57:7d:d7:b1:
c6:69:75:28:aa:e0:7e:c3:03:b6:83:a0:49:99:fe:89:93:5d:
52:51:60:28:3d:4b:6b:b2:f5:3b:b7:d7:8d:c8:97:fa:8a:21:
fc:9b:55:3e:a1:49:12:30:32:da:e9:4c:79:54:3d:6a:57:9e:
17:07:0f:8f:91:86:40:ae:b5:f1:23:f7:cf:f2:4a:a2:c7:d9:
c3:55:ae:ab:6b:97:cd:37:e4:b8:a2:48:73:04:10:d6:26:32:
f5:a9:c2:10:98:cc:de:9b:f4:76:fa:08:42:f2:87:80:dc:eb:
b9:21:8e:6e:24:a1:08:04:83:d7:e5:21:51:69:a4:f1:c6:aa:
4f:73:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:33 2025 by rpki-client