Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/2f1a47e2-a130-322c-b9b4-511d2c207963.roa
File: 2f1a47e2-a130-322c-b9b4-511d2c207963.roa (raw, json)
Hash identifier: GswheR+By3LndD2wddxlzyy9Hgdkk7hjVW7ukFdiC94=
Subject key identifier: D2:6C:94:04:EF:DB:88:94:90:1B:85:A3:73:26:38:E6:80:CD:0E:28
Certificate issuer: /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial: 010D0C9F432858481C9A8DE0956F0C36DD75E8A0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/2f1a47e2-a130-322c-b9b4-511d2c207963.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 51082
IP address blocks: 104.218.237.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8d:e0:95:6f:0c:36:dd:75:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=a69f4cfe-49b2-4cfb-90e5-32ddb60944f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3c:c0:d8:18:3a:ea:fc:4a:52:2f:99:03:7b:
1f:43:6d:6b:3b:f2:f3:49:b4:b5:3b:19:e0:cb:ba:
6f:c5:e7:62:dc:1d:e8:10:28:91:c3:00:ac:1f:ea:
19:9d:0a:bc:5d:4d:39:d9:06:59:ad:f1:63:75:5e:
c6:9e:fc:46:32:ce:60:bc:3b:0c:0f:55:33:f9:0d:
c3:55:2b:99:ea:71:04:38:68:95:bf:14:c7:13:78:
47:a4:d3:f0:5a:ca:2a:6b:c7:db:26:be:d9:4d:c7:
6c:86:7d:cb:48:bb:cc:87:ff:a8:26:16:c7:62:e1:
96:bd:fd:c9:fe:16:d2:3e:ea:6c:92:5e:8b:d5:97:
d7:08:f6:53:df:75:b2:73:0f:49:90:a4:3e:11:e2:
a1:db:0c:72:8f:56:75:30:80:2d:2a:39:33:b6:6d:
b9:d5:01:2d:c5:73:08:ee:5c:99:af:df:be:34:2b:
d8:08:29:2a:46:0e:3d:45:c7:87:00:32:bc:1a:d2:
9c:52:96:5c:a8:50:5c:03:e3:2e:f3:8c:71:35:c0:
c4:4c:0e:f9:b5:21:6a:d1:27:bf:01:71:84:6c:91:
13:a9:af:7f:04:17:51:23:ce:5e:88:55:57:bd:cd:
a5:4a:03:3e:e8:8b:87:b9:e9:c7:8e:c3:26:41:9f:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:94:04:EF:DB:88:94:90:1B:85:A3:73:26:38:E6:80:CD:0E:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/2f1a47e2-a130-322c-b9b4-511d2c207963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
X509v3 Authority Key Identifier:
keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:05:88:0e:1c:87:fb:f7:77:60:f6:33:c7:ba:96:59:9c:c9:
68:01:d6:d5:a8:91:c5:53:2e:90:80:ce:18:63:91:bb:eb:f2:
54:e2:16:53:89:9c:ac:c6:a8:41:01:29:4f:27:b5:7e:45:ca:
b0:26:33:bf:01:ed:83:e7:d1:d5:71:3c:a8:78:04:a5:cd:6a:
26:b2:5e:6e:1c:83:38:05:9c:76:52:90:0e:a7:6e:da:48:51:
0a:61:ac:d7:5c:45:35:f5:6b:25:8d:c1:a3:c9:72:fa:07:90:
8b:52:d4:20:56:da:82:7e:bf:3c:08:3e:85:6d:f4:5e:e4:02:
9a:a8:05:bf:f2:f4:90:22:75:7e:78:9d:24:dd:b8:41:af:af:
61:b4:21:e4:77:47:71:07:16:83:d8:fb:9a:ca:1c:16:bb:93:
0f:5b:26:1f:a1:38:eb:70:48:4e:df:23:75:07:93:77:76:f6:
ec:2e:7c:56:fb:79:97:d8:f0:c8:e2:4a:31:d1:99:e4:94:e0:
d1:87:49:2c:3d:13:43:af:18:ef:6c:d5:98:98:6a:66:77:14:
f1:56:90:f6:e9:b6:b9:7b:8d:6b:7a:ac:eb:33:d5:d5:80:a8:
07:e1:3b:3b:80:2f:98:8f:1a:f6:b0:ac:62:30:56:b0:1a:8c:
25:cd:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:07 2025 by rpki-client