Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/89adcd84-8644-31d9-886b-8a236cab267e.roa
File: 89adcd84-8644-31d9-886b-8a236cab267e.roa (raw, json)
Hash identifier: pvPpgNncTxWoo5P3DIqpVsi+WMMDcR9SXSsH/hrPeUw=
Subject key identifier: 53:CA:65:6F:1E:53:9F:EF:F3:07:F4:58:83:72:25:43:77:8B:A4:BC
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F432858448FE4B50868129992040C0200
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/89adcd84-8644-31d9-886b-8a236cab267e.roa
Signing time: Mon 15 Jan 2024 14:00:31 +0000
ROA not before: Mon 15 Jan 2024 14:00:31 +0000
ROA not after: Sun 14 Apr 2024 13:00:31 +0000
asID: 7018
IP address blocks: 68.233.47.0/24 maxlen: 24
68.233.37.0/24 maxlen: 24
68.233.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:8f:e4:b5:08:68:12:99:92:04:0c:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Jan 15 14:00:31 2024 GMT
Not After : Apr 14 13:00:31 2024 GMT
Subject: CN=99f62aee-57b7-4ef3-9bff-c168530ca154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:12:74:c9:43:2d:d3:b8:e0:3c:72:12:4d:
ed:6f:b4:bb:c6:b8:61:ed:6d:84:5a:3a:27:ac:47:
68:96:5b:29:0c:c1:7a:ef:e2:fe:9d:64:8a:5b:e3:
9a:67:47:29:02:51:e7:34:d0:00:c5:05:56:ab:d5:
a0:e9:6b:66:87:94:22:f2:c5:10:af:ae:df:96:82:
85:4e:89:0b:01:05:4b:c4:37:53:b0:49:f7:08:59:
33:59:bc:bb:5d:17:3c:3e:ac:09:f7:b7:4c:82:a0:
b9:5e:3d:a7:bb:c1:68:d7:40:43:5a:26:3a:72:71:
92:0e:00:43:27:32:35:2e:10:94:8b:79:3b:fb:8b:
56:e4:bd:a3:ab:13:8a:13:5f:37:a9:c3:90:1d:6d:
0a:d5:fa:b3:ea:14:ea:af:ae:a4:45:62:33:5d:29:
e1:1d:e4:c2:a3:de:22:1b:5d:fa:e4:fe:dd:f5:6f:
4a:b3:a1:06:82:9e:27:81:a1:c3:dd:2e:49:26:36:
04:e3:01:53:14:5c:9e:26:60:27:68:6e:37:e5:ea:
79:83:37:7d:30:14:b2:4a:13:8c:c4:76:29:c9:8d:
ea:91:91:27:dd:bd:0e:a7:3e:15:67:24:26:50:36:
c4:8f:ed:08:02:9f:32:3a:e3:ae:1e:b7:01:ea:9e:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:65:6F:1E:53:9F:EF:F3:07:F4:58:83:72:25:43:77:8B:A4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/89adcd84-8644-31d9-886b-8a236cab267e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.37.0-68.233.38.255
68.233.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:71:f3:05:a2:3e:bc:c3:02:30:dc:57:5d:c0:ff:de:e5:42:
f8:a6:f4:06:cf:0b:40:43:ed:32:70:d6:1e:26:35:0c:4a:66:
c3:59:2c:82:2a:da:dc:3e:6a:14:c9:9f:30:71:31:be:30:a2:
a7:d7:30:6f:cc:20:50:8b:5a:13:d3:3c:7a:9e:6a:61:c7:4a:
33:e8:7b:6e:84:21:c2:66:96:41:82:4e:5f:96:b2:c8:17:ba:
22:55:6a:b1:3f:9b:a9:08:24:a4:dd:21:d7:bc:cf:df:fc:f6:
74:b7:eb:13:19:39:3f:a4:86:7c:1e:9a:6f:ac:27:c9:9f:9f:
bd:f4:83:8b:fc:f0:19:39:69:25:3b:b8:d2:d2:67:75:8a:65:
d3:89:35:f6:47:24:e5:e8:32:90:dd:2e:88:2d:b3:db:f0:1e:
20:75:23:bf:df:47:1e:96:b9:4c:7a:f5:15:72:a5:8a:30:cc:
eb:a8:01:10:62:8c:5a:a3:3a:70:99:5b:d2:88:bd:bf:56:9d:
36:7a:2e:a6:14:44:70:63:a0:8d:18:69:5a:0f:36:d5:21:c0:
a3:c4:52:ca:ca:60:c1:6e:99:d1:7f:40:9e:0e:d9:c9:0c:07:
6b:5d:6c:5f:93:ba:67:c3:91:34:1f:00:c3:c5:cd:25:b0:b2:
19:4d:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:56 2025 by rpki-client