Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/1801bcef-8b84-32a1-a6f3-43b79da43f27.roa
File: 1801bcef-8b84-32a1-a6f3-43b79da43f27.roa (raw, json)
Hash identifier: 29jPiY+FV1EudSIGXIoN/4euHK1DjA6D/0Wr4H6qLTY=
Subject key identifier: 03:3A:E7:9E:D7:59:6F:86:E7:26:48:E4:99:8B:BA:D8:92:95:4D:2B
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583DA0C5F0CE803B9A1779FF3300
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/1801bcef-8b84-32a1-a6f3-43b79da43f27.roa
Signing time: Fri 20 Mar 2020 04:00:00 +0000
ROA not before: Fri 20 Mar 2020 04:00:00 +0000
ROA not after: Mon 22 Jul 2024 04:00:00 +0000
asID: 14618
IP address blocks: 216.9.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a0:c5:f0:ce:80:3b:9a:17:79:ff:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Mar 20 04:00:00 2020 GMT
Not After : Jul 22 04:00:00 2024 GMT
Subject: CN=be1c2639-c165-4c95-8285-055ef3ea8861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:14:e4:03:28:38:a0:2e:54:ab:28:27:eb:
7f:d9:3c:6e:20:d0:3f:ed:f4:a0:40:06:9f:48:f4:
c3:66:6e:5c:e0:48:62:66:d0:c8:8f:2d:d6:84:37:
2d:49:9a:e9:d1:b6:87:fa:52:cb:48:23:46:86:cf:
f9:40:fe:dc:b8:5e:27:9b:4d:c6:12:48:33:5b:f8:
1a:8d:bf:69:d7:08:86:dc:e1:7c:f6:c9:97:e8:27:
f3:45:f9:d8:26:35:b6:78:4c:82:ab:3e:ef:22:d6:
ef:3a:e6:e7:86:e2:e7:d0:9f:4a:24:1b:ff:99:f8:
46:0f:75:10:97:44:42:af:cd:f5:35:9c:17:db:65:
f6:cc:37:dd:56:08:3e:d4:59:a6:b0:2f:37:5f:f0:
97:e6:54:d2:b2:1a:fc:36:01:7f:a6:e3:c8:31:9b:
49:3b:a1:72:83:4b:c7:75:7a:8e:01:55:25:44:05:
3a:6b:d4:83:52:d9:c1:6d:d3:d3:b8:26:c8:77:f5:
7d:3f:36:95:ec:da:ba:80:04:1d:0e:76:02:d0:86:
0d:dc:01:d3:00:fd:ef:77:da:ad:0d:09:43:24:b7:
9a:1e:61:f1:b8:49:5b:88:16:11:33:fa:b7:e2:5b:
89:c1:0a:fd:ee:3a:71:ec:01:72:a0:f6:a6:62:2e:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:E7:9E:D7:59:6F:86:E7:26:48:E4:99:8B:BA:D8:92:95:4D:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/1801bcef-8b84-32a1-a6f3-43b79da43f27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ea:47:c6:a7:7e:65:bb:d3:d5:9a:c9:ca:c6:6b:3d:3e:b7:
da:e7:67:e0:43:d8:ab:4a:5e:40:b1:58:55:f7:a8:2c:61:06:
f2:a1:80:5c:31:b0:d9:2b:bd:42:af:7b:91:3d:75:4a:0c:d7:
c7:c5:4d:7d:85:f4:29:3e:ad:4d:ff:28:bf:01:a5:d9:9f:a2:
b6:b7:88:f0:d9:fd:7d:53:cd:c3:f0:c7:96:bf:e5:43:c8:9a:
fe:47:6e:ef:d7:5e:9e:23:3a:3f:bd:95:fd:d9:11:5c:56:02:
7f:7f:fe:37:13:93:06:f6:8c:27:79:52:c1:3f:8c:0b:02:84:
67:c8:fb:3c:a5:8f:7a:55:b1:5a:af:ea:ac:e8:27:4c:52:0b:
1e:ef:54:3f:d9:b3:8c:07:26:3e:6a:61:54:27:a5:9c:c6:fb:
c0:cf:6b:69:4e:77:74:3e:90:8c:c0:a1:30:03:a6:0f:16:3d:
be:8a:33:48:e2:1d:fc:9d:bf:cd:b4:86:79:5d:63:d2:e9:6b:
1f:6e:41:44:9f:e4:36:19:a9:6f:81:14:f7:20:92:b5:24:f4:
de:52:15:c0:b5:78:4d:e8:c5:78:48:8d:f0:b3:22:97:0b:68:
7a:39:e5:24:07:b1:24:be:e0:56:96:9c:28:4b:8c:88:4b:f6:
fb:43:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:48 2025 by rpki-client