Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/445bc2d1-b2b2-308b-86dc-b95678f65eb6.roa
File: 445bc2d1-b2b2-308b-86dc-b95678f65eb6.roa (raw, json)
Hash identifier: KT0qlilSjRDSSZBbEDSj44KY8RhBZN3JqlE0XLFl2PI=
Subject key identifier: 92:5B:EB:DB:B1:95:69:5F:3D:0A:A2:14:70:C5:B3:CD:19:8C:12:B9
Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial: 010D0C9F432858477EC10454AC3DF70F09CA9F80
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/445bc2d1-b2b2-308b-86dc-b95678f65eb6.roa
Signing time: Thu 10 Oct 2024 13:00:41 +0000
ROA not before: Thu 10 Oct 2024 13:00:41 +0000
ROA not after: Wed 08 Jan 2025 14:00:41 +0000
asID: 270172
IP address blocks: 64.130.32.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7e:c1:04:54:ac:3d:f7:0f:09:ca:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Validity
Not Before: Oct 10 13:00:41 2024 GMT
Not After : Jan 8 14:00:41 2025 GMT
Subject: CN=3fefa3a6-30aa-4b16-97e7-7f0cdbfdfc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:81:f9:f4:4c:a4:8a:1f:76:53:76:7e:2c:
7b:e7:f0:5c:7b:10:7d:5c:e5:ed:8a:99:2b:88:98:
ce:15:5a:fc:86:ff:f8:e2:e9:3d:22:7f:2a:5b:2b:
84:75:7e:ac:77:d3:fc:94:96:a7:4c:bc:73:eb:79:
a6:e5:48:8c:9b:3f:e2:8f:fd:c9:00:45:55:21:67:
f8:06:2f:bc:f3:26:e0:a8:56:e0:43:34:ac:21:3b:
c0:d2:7f:e1:3f:f0:25:d5:81:38:54:6a:53:aa:de:
f6:da:57:4c:e4:b1:3c:99:ee:cd:72:86:3d:77:4b:
71:9d:ca:34:e4:76:95:16:1f:62:34:c2:6a:70:b3:
96:32:f3:e1:8d:9c:14:e9:bb:5b:e1:36:11:e7:67:
ab:9f:11:1a:b5:0d:6b:8a:72:5e:8e:a3:40:5c:28:
8a:d6:51:e3:57:52:68:f1:44:05:56:92:4a:c9:f9:
15:65:6d:02:c9:19:c9:0a:66:8a:eb:e5:99:76:b2:
f5:67:84:5b:a8:4c:aa:08:1c:ea:3e:36:f4:c3:da:
14:3f:44:8a:c3:e5:4f:58:e6:f4:7c:41:6f:da:55:
b0:a1:f4:c4:17:7c:19:68:91:6a:2c:67:cb:d8:05:
5d:64:90:d7:a0:43:3f:d5:07:73:7a:a4:1e:46:fb:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:EB:DB:B1:95:69:5F:3D:0A:A2:14:70:C5:B3:CD:19:8C:12:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/445bc2d1-b2b2-308b-86dc-b95678f65eb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
X509v3 Authority Key Identifier:
keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
sbgp-ipAddrBlock: critical
IPv4:
64.130.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a2:e5:1a:67:cb:87:ca:da:9f:5a:0e:4a:90:98:64:c2:44:
9d:3c:35:8f:9e:be:14:58:32:be:1a:5e:de:99:5f:69:11:b9:
3b:85:a5:d8:d2:5d:13:12:3d:7a:05:7a:13:2e:d0:97:67:9d:
fc:90:02:56:88:73:c3:a9:1b:0c:fe:8d:68:12:86:49:f8:39:
c1:a7:1d:2a:f4:05:9f:3e:57:cd:9b:60:a9:a4:72:89:d1:43:
8d:06:5f:26:4d:34:43:2f:b4:b2:aa:d6:fd:61:3a:1b:46:ee:
38:99:eb:9a:cb:30:66:27:42:74:77:96:34:33:15:a5:0b:c3:
b9:a1:7b:c6:e9:17:82:a7:c7:75:f1:24:c8:ef:07:b6:51:c1:
20:33:e6:59:64:cc:23:d0:d0:45:70:b8:7c:d8:bb:38:24:1b:
04:a2:e4:37:f6:0e:eb:19:bf:3e:b5:07:f2:66:3b:46:c7:d4:
f2:fb:95:18:4e:34:ff:8c:91:84:d4:34:b2:cd:95:62:44:29:
33:e7:b9:db:88:b1:c7:c9:bb:3a:78:17:88:00:d5:89:71:76:
4b:37:a8:a7:36:29:23:d6:49:85:65:4f:b2:cf:52:53:a6:bd:
cb:ba:be:89:5e:d9:9e:c9:d9:f3:d4:46:d7:20:8f:57:8f:24:
b7:8d:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:40 2025 by rpki-client