Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/087beaa6-f330-3c49-b6e9-98819b25831c.roa
File: 087beaa6-f330-3c49-b6e9-98819b25831c.roa (raw, json)
Hash identifier: Bsa60s2idmwqnokdS9gonJRtjFoF0/8AFzYdG/HbNHU=
Subject key identifier: 08:BD:24:4E:E8:85:35:3E:8B:42:9F:22:6E:D7:C2:8A:B2:E8:0C:C6
Certificate issuer: /CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
Certificate serial: 010D0C9F4328584818C499385D35852BD2E31780
Authority key identifier: 67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/087beaa6-f330-3c49-b6e9-98819b25831c.roa
Signing time: Wed 04 Dec 2024 17:02:25 +0000
ROA not before: Wed 04 Dec 2024 17:02:25 +0000
ROA not after: Tue 04 Mar 2025 17:02:25 +0000
asID: 40007
IP address blocks: 141.109.0.0/18 maxlen: 24
141.109.96.0/19 maxlen: 24
141.109.128.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:c4:99:38:5d:35:85:2b:d2:e3:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
Validity
Not Before: Dec 4 17:02:25 2024 GMT
Not After : Mar 4 17:02:25 2025 GMT
Subject: CN=126245f2-259a-4447-bf3f-914f74f56eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:3b:30:d9:d9:ee:5e:1d:ab:6a:50:cf:88:
cc:c3:d8:c7:2b:86:fb:82:b4:b2:d6:2b:4f:d6:c4:
ba:d0:a3:b5:57:9a:3f:67:cf:62:6c:44:ca:e1:35:
52:63:bc:dc:bc:8f:4a:89:0a:c9:30:a0:d3:3d:e5:
1c:31:f2:4c:31:05:b5:03:4a:ae:e8:40:56:39:35:
71:1a:19:71:d5:c3:5b:cb:67:a6:66:91:8e:a1:69:
2c:9f:72:eb:3f:5c:cf:41:0c:6d:e8:7f:81:b5:03:
0f:98:9b:6a:a3:6d:5d:86:d4:af:75:71:a0:ef:4a:
09:0c:9c:f2:7b:21:b5:ee:1d:4b:ca:09:5e:3c:07:
39:39:ac:db:4c:81:a8:35:87:e6:13:e6:80:b3:05:
9f:45:d6:b6:b3:4e:45:5e:d6:6e:b5:b5:70:2b:a7:
f8:89:a5:46:b3:60:66:29:ce:a5:a5:00:ef:9e:f6:
1a:6c:b9:96:fe:51:d8:e2:c1:94:c1:89:7c:79:64:
54:63:28:0a:81:41:ca:90:c5:e2:82:ef:16:ca:94:
5e:3a:6f:69:4c:f8:6c:19:f7:1e:06:e4:1b:99:bb:
0b:15:ce:40:34:eb:c3:de:d4:a4:09:5b:d9:7b:1d:
03:35:e0:3e:9e:cb:fc:31:75:55:55:36:19:6c:27:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:24:4E:E8:85:35:3E:8B:42:9F:22:6E:D7:C2:8A:B2:E8:0C:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/087beaa6-f330-3c49-b6e9-98819b25831c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.crl
X509v3 Authority Key Identifier:
keyid:67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
sbgp-ipAddrBlock: critical
IPv4:
141.109.0.0/18
141.109.96.0-141.109.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:35:1f:a9:e5:c2:82:92:ed:f5:d8:32:83:fe:56:b2:d2:d4:
44:c8:9b:f2:1b:bd:99:f3:9a:4e:d6:89:14:c1:a8:be:54:61:
f3:3c:0f:d4:12:19:73:7a:bd:10:40:e6:4a:d0:1e:6f:04:16:
48:1f:77:fb:2d:dd:ec:76:c1:f2:91:33:44:43:f0:f5:09:3a:
49:aa:5f:65:3f:3c:e3:63:d2:9b:d3:b9:a1:e5:b4:6e:31:d1:
42:84:88:80:ff:23:de:5d:99:4e:46:24:c8:68:dc:1b:11:be:
6e:ce:af:5f:95:04:be:d6:13:97:d3:40:21:2e:e5:8d:4a:99:
54:44:46:69:14:fe:a8:9e:67:22:a2:82:e5:02:7d:52:4a:21:
ab:2a:8b:09:1d:55:15:bb:f1:34:1a:9d:1b:d3:bb:6b:e0:d7:
2b:86:a8:80:a0:8c:91:4e:b8:fb:5e:15:11:43:2e:66:f8:3e:
77:ab:fa:78:cb:f2:23:cf:a5:56:d5:7d:af:0f:5a:b3:5b:de:
60:9f:7c:7a:97:cf:73:da:29:bc:63:2e:8b:42:7c:cb:a0:4a:
b2:b9:08:3d:74:b7:da:a2:a6:05:95:0c:6f:76:9f:81:bc:b9:
73:b6:7c:ae:22:c5:0d:be:5f:2c:86:1c:65:ee:be:42:7a:7e:
56:78:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:53:48 2025 by rpki-client