Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
File: 5e508305-9fc1-313d-8943-64f35786eeb3.roa (raw, json)
Hash identifier: a8LLGiFcIxpdgD1BaNONRoVIhj8v2YlOEl8D/lLFMjg=
Subject key identifier: 00:DE:FD:63:44:6C:B8:BA:92:CF:9B:06:E3:57:70:0D:1D:DE:52:A2
Certificate issuer: /CN=41dcdb5d-400c-4bbe-8411-2529aa359a0c
Certificate serial: 010D0C9F43285847D999F2B9DB1D7984006AC400
Authority key identifier: 5F:95:64:AF:62:76:C1:89:E8:38:5D:63:8A:DA:99:9A:40:82:40:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
Signing time: Tue 12 Nov 2024 02:00:27 +0000
ROA not before: Tue 12 Nov 2024 02:00:27 +0000
ROA not after: Mon 10 Feb 2025 02:00:27 +0000
asID: 395763
IP address blocks: 23.142.64.0/24 maxlen: 24
2602:fbc6::/40 maxlen: 40
2620:34:2000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d9:99:f2:b9:db:1d:79:84:00:6a:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dcdb5d-400c-4bbe-8411-2529aa359a0c
Validity
Not Before: Nov 12 02:00:27 2024 GMT
Not After : Feb 10 02:00:27 2025 GMT
Subject: CN=7a7bdb4b-5a2e-4491-a6f3-22fbe60f1290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:25:27:a7:7b:92:59:1d:9b:fd:0a:06:e3:
1d:82:0f:cc:fe:27:a3:08:49:da:2b:c1:b1:4b:c0:
31:a5:4f:5b:82:ea:24:80:e3:61:9a:de:ac:d9:13:
23:3b:93:3f:5d:1d:2b:48:4f:aa:20:fd:cf:2d:b8:
51:f1:a9:d6:dd:78:e6:52:73:e6:cc:e8:49:55:67:
fd:61:92:33:90:e1:3e:3a:43:72:a8:00:1e:01:69:
7b:be:0a:68:42:cb:ca:a1:78:9e:d8:a4:d7:68:46:
cf:22:ab:08:f0:3a:21:a7:d2:89:5b:02:61:c6:78:
94:3d:7a:1e:bd:bf:a6:09:57:c1:da:8c:1e:d0:26:
7e:54:b8:bf:65:ef:8f:ed:de:42:a3:77:a8:d5:67:
91:a3:37:47:c2:34:88:c4:c7:ad:20:de:c5:2f:7f:
c8:a2:3c:c4:f3:36:6c:69:60:79:e7:f5:8f:02:a4:
b9:48:ee:ee:8c:fd:a7:23:26:49:e1:f0:0c:a9:63:
73:55:f6:2c:be:7a:1d:cf:17:da:2c:89:ff:04:4c:
f8:ae:75:6d:52:14:ee:11:e1:b6:19:99:d8:a8:2a:
e9:9e:ce:cd:49:34:80:08:af:7a:ea:91:a1:7e:68:
d8:d0:fc:97:e7:8c:37:4c:72:e7:b1:1d:af:13:b5:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:FD:63:44:6C:B8:BA:92:CF:9B:06:E3:57:70:0D:1D:DE:52:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.crl
X509v3 Authority Key Identifier:
keyid:5F:95:64:AF:62:76:C1:89:E8:38:5D:63:8A:DA:99:9A:40:82:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.64.0/24
IPv6:
2602:fbc6::/40
2620:34:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:60:35:b2:71:12:ab:58:aa:69:2e:1b:e2:75:8f:43:cb:93:
03:47:d3:6d:48:6d:40:f2:b7:36:7d:e7:5b:cc:c9:8c:b1:40:
ac:05:74:f6:9a:e8:bb:e0:50:02:4d:2d:06:a0:db:ca:97:3f:
66:f5:4a:09:0b:65:a5:b6:05:12:02:d2:d0:f1:f7:51:7c:3e:
89:2f:ce:91:5d:e9:67:ff:14:12:a1:ab:f6:22:0f:c4:2b:3c:
f2:50:ae:45:58:52:12:a1:f8:41:1b:07:b4:eb:e5:cc:cb:3d:
ba:bc:e5:68:d2:06:78:0a:a1:d5:07:75:81:89:bf:ec:ce:11:
ba:62:a7:41:a0:9a:28:dd:a7:29:89:63:40:2c:74:09:30:9f:
51:3c:4e:b5:90:8f:5d:a0:df:60:92:8d:f5:1a:91:02:f5:d9:
12:77:3d:37:f7:0f:49:a0:b1:da:55:4c:e7:c0:dd:f7:cf:03:
86:ff:a0:fe:66:1a:fd:c9:88:ed:ec:86:8f:1d:78:91:c0:f6:
72:21:bd:0d:75:ab:40:89:7b:bc:53:c2:66:d7:99:b7:56:a6:
21:b3:bd:44:4c:87:6b:b1:33:25:2a:d6:78:da:b9:9b:14:b4:
c9:3f:b6:81:0c:8d:c5:f7:85:1b:ea:9c:03:35:51:07:71:a2:
8b:87:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:00 2025 by rpki-client