Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa
File: 8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa (raw, json)
Hash identifier: T+k2UdYnzW5biMoglvnsNrTgxf6jEAj6/PvlSAJ7rF8=
Subject key identifier: 47:D0:33:AF:1B:D1:27:51:C7:6C:AC:D9:10:D8:C0:52:02:44:AE:1F
Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial: 010D0C9F4328584871C07E13AE0D0319D9AF2180
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 10835
IP address blocks: 63.251.186.0/23 maxlen: 24
64.74.184.0/23 maxlen: 24
64.74.186.0/24 maxlen: 24
69.25.218.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7e:13:ae:0d:03:19:d9:af:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=b4e98a9d-78b3-4840-8142-b7aa444976b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:a2:48:eb:46:b2:94:fe:db:58:e0:9c:a8:
0d:e9:41:a3:08:45:18:80:ee:75:6f:57:9c:e2:39:
5f:56:25:db:0d:d0:e2:ba:90:fa:af:5c:c1:ee:03:
42:40:68:2d:6a:13:78:0b:74:11:17:9a:63:11:54:
2e:85:c9:47:67:94:1b:a2:c5:05:ae:b0:8a:ba:86:
96:e2:c4:76:ce:9d:e1:42:96:fc:b9:a5:a3:dc:45:
60:63:c6:a3:45:2e:ee:32:06:5f:66:94:a8:cf:7e:
7c:13:24:74:38:58:34:5a:73:c4:26:36:a8:45:43:
e2:9f:db:ae:fb:0a:c9:5a:15:36:0a:3d:b0:b4:cc:
ff:7a:2d:6d:9d:a4:8a:56:0c:d7:a9:63:9c:d6:bb:
b3:4a:3c:0e:07:8a:b5:48:4d:76:7b:30:ea:29:96:
42:b2:03:ce:1d:a4:df:1b:6e:2e:94:8e:80:46:4e:
bb:05:d7:e0:82:c9:48:c0:d7:72:d2:06:d6:60:a1:
c2:42:e1:ed:26:a9:90:4d:cd:8f:b2:1a:91:b0:8a:
85:86:3a:f9:c7:61:e5:01:ef:be:2b:67:94:02:14:
cf:2e:34:7c:2f:a5:eb:f7:79:ee:e7:76:b9:a3:9a:
8a:55:9d:46:ed:24:9b:00:75:b3:84:1b:ee:6e:2f:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D0:33:AF:1B:D1:27:51:C7:6C:AC:D9:10:D8:C0:52:02:44:AE:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
X509v3 Authority Key Identifier:
keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
sbgp-ipAddrBlock: critical
IPv4:
63.251.186.0/23
64.74.184.0-64.74.186.255
69.25.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:83:ce:5f:31:79:a7:f8:1d:e0:90:6f:7c:c0:41:17:70:f5:
aa:20:63:a9:ee:4b:e4:3d:e7:76:38:cc:7c:69:14:fc:15:f3:
1b:50:80:60:37:86:dd:f8:59:44:48:d7:db:ec:b2:8e:07:2e:
40:c6:7e:d2:85:c5:27:1d:37:cf:21:25:c2:0d:0b:bd:4c:31:
28:bf:f9:e8:45:a9:d4:70:5d:58:77:45:02:f0:f2:26:71:e3:
a4:82:e7:09:74:b7:71:19:a7:c6:66:dd:71:e3:cc:17:21:bc:
d2:63:6c:16:8d:eb:7b:b8:08:71:67:1f:d4:f2:43:0b:b0:3c:
cf:53:17:63:a8:c8:26:79:d1:db:90:ad:d1:68:de:f7:5a:85:
fd:40:e3:e2:b3:d6:ba:a9:03:0d:35:87:68:aa:74:5b:16:9e:
93:db:49:a0:97:5d:28:4f:bc:8f:4e:47:c8:4d:31:a4:01:1f:
c3:cc:d6:0f:aa:83:22:87:2e:5e:b8:b2:78:e7:f2:a7:bb:48:
d2:54:03:9d:52:1a:05:5a:40:3f:7e:fe:1d:1d:21:a9:26:e7:
e5:1e:cb:f6:cb:66:c0:26:7e:70:bf:35:a1:1f:2d:99:27:36:
d5:a4:bb:f9:34:d7:6a:85:b8:15:4c:44:af:71:ad:9c:17:4a:
f2:ec:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:19 2025 by rpki-client