Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/a5b33767-711c-3b1e-8120-867b7b31861e.roa
File: a5b33767-711c-3b1e-8120-867b7b31861e.roa (raw, json)
Hash identifier: 0FZvGQhlTRH6amVonFxPAHQc8S60y7EEeqWNmjhNTTU=
Subject key identifier: 01:92:67:0A:6C:72:71:4D:AA:A7:6C:27:96:09:4B:F4:A5:F9:F2:77
Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial: 010D0C9F43285848302541735025EDFA98886CE0
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/a5b33767-711c-3b1e-8120-867b7b31861e.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 1828
IP address blocks: 64.74.188.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:41:73:50:25:ed:fa:98:88:6c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=a1c6d2cf-8788-42ef-bc86-9cfafcc5cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:df:b4:7a:6d:60:66:9c:47:42:b3:10:ac:
a3:c8:38:ef:a4:a3:8f:b0:de:fc:23:d6:62:97:1e:
e6:43:66:13:9f:48:87:fd:3b:29:49:2b:ad:ea:3d:
ab:96:12:bf:3b:69:c5:3f:2c:0a:84:d3:c0:30:c5:
77:13:7e:eb:ae:e0:56:f5:7e:f5:61:4e:f4:0e:1c:
27:61:bd:bf:d5:f5:c2:9f:4e:04:1a:8a:34:22:7a:
8b:11:7e:1d:26:b2:fb:00:54:d6:b3:d1:59:44:62:
b9:f8:54:c8:37:12:3f:ab:36:d0:79:44:71:85:30:
94:3f:6c:c4:33:ba:4d:b5:b5:1c:4e:b8:2e:cd:d0:
49:71:27:e4:2a:dc:a1:0e:08:b7:0b:2c:26:1a:1d:
07:5b:c6:41:20:6c:50:77:53:ca:2e:2b:d7:21:0c:
34:e2:32:0f:ef:d4:31:d0:a4:65:19:73:df:83:0f:
df:ce:1d:a6:f0:84:f5:3d:0a:b2:0f:6d:56:c5:66:
7a:99:f5:41:5d:cc:9d:8b:d0:40:83:e9:15:d4:a5:
e6:91:5b:dc:10:95:1c:77:89:39:42:6c:ef:63:f8:
ad:3d:79:00:4c:00:ea:65:73:1b:e8:dd:e6:92:c7:
fc:8d:0d:dc:07:79:b1:ce:38:80:cc:ed:45:cc:95:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:67:0A:6C:72:71:4D:AA:A7:6C:27:96:09:4B:F4:A5:F9:F2:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/a5b33767-711c-3b1e-8120-867b7b31861e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
X509v3 Authority Key Identifier:
keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
sbgp-ipAddrBlock: critical
IPv4:
64.74.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ed:28:b5:1c:97:59:bf:07:e1:05:d8:71:52:ed:39:82:f8:
06:d8:29:75:f3:fe:e0:e7:e8:b7:01:86:dd:96:7b:a6:a8:26:
1b:0d:d7:44:ad:0c:f9:44:06:fd:20:1c:f0:4e:25:6c:b2:87:
3b:f7:48:60:ec:55:d0:23:04:16:d2:be:27:74:3c:4a:e1:dd:
04:88:d8:b4:cd:8d:c6:a1:74:02:c0:57:ea:cb:c4:e8:ed:35:
06:42:61:98:0d:16:ad:64:14:8a:bd:45:46:26:25:6a:1a:4a:
82:e2:22:d4:ea:c7:3a:e7:c6:e2:8d:7d:fb:59:7f:da:a8:77:
da:50:30:a1:f4:5f:eb:99:07:dd:ea:2a:20:06:7c:d8:2f:d8:
22:39:83:6b:53:22:39:b4:f2:33:19:b2:ab:1e:43:81:1f:8d:
c3:2d:8c:cc:86:12:52:e4:e3:56:73:17:1f:3a:3a:1b:2f:3d:
4e:cb:f6:fb:57:4e:08:df:4b:c6:1a:88:66:0b:b3:32:7f:14:
b7:3d:f5:27:38:d2:6c:ef:77:d6:a2:63:a5:88:9d:d7:80:de:
26:df:d1:63:0b:2b:fc:cf:a6:fd:26:9b:59:17:5c:84:57:39:
38:b9:4a:16:8f:1a:b9:c6:e3:1a:ab:19:94:2c:2e:f0:96:a3:
7d:c2:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:00 2025 by rpki-client