Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/69324153-b89b-3727-8b34-9cce663c91e6.roa
File: 69324153-b89b-3727-8b34-9cce663c91e6.roa (raw, json)
Hash identifier: 2WcfCqaETJ5cP5pyXTD2d0GXC0zzBNzEjy8IMiAtXi0=
Subject key identifier: 08:8E:A1:3B:46:95:42:8F:00:A4:B0:DE:8C:79:91:76:1E:40:5D:E1
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583DA0E2E349C9030D0E5BAB4400
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/69324153-b89b-3727-8b34-9cce663c91e6.roa
Signing time: Fri 20 Mar 2020 04:00:00 +0000
ROA not before: Fri 20 Mar 2020 04:00:00 +0000
ROA not after: Mon 22 Jul 2024 04:00:00 +0000
asID: 16509
IP address blocks: 216.9.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a0:e2:e3:49:c9:03:0d:0e:5b:ab:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Mar 20 04:00:00 2020 GMT
Not After : Jul 22 04:00:00 2024 GMT
Subject: CN=fa56aeab-5dc1-4682-962b-eb452b3cfb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:8d:e9:9b:19:5b:2c:d2:9d:41:ef:47:a8:
e2:ed:93:7d:ab:80:8f:2f:d4:b0:58:37:6e:c9:18:
f6:b9:48:50:58:5a:27:1c:21:80:12:5b:6b:e9:2a:
f3:6e:51:8c:0b:d0:13:91:db:9b:b0:06:46:ea:41:
7d:fc:bd:30:46:0b:03:33:02:e8:2e:da:3f:2d:48:
1a:1f:e2:f2:fb:48:0b:fa:07:db:c9:39:06:d8:78:
3d:02:d0:32:48:72:ef:6e:3a:09:57:6c:31:b9:ca:
2a:c0:4a:f0:d1:02:a6:36:db:eb:77:09:b0:91:b0:
78:14:8b:3d:70:ad:a3:0c:6b:e6:db:3c:23:c5:22:
48:2c:1b:1f:bd:59:22:04:68:9a:81:c2:9b:c1:b9:
d7:d2:01:6d:f6:89:b0:53:58:8f:bc:de:5b:37:96:
28:2c:50:e2:49:a2:2e:a0:e6:77:30:29:9f:5a:f2:
19:59:d5:88:ad:81:56:81:98:e1:13:59:92:01:30:
26:70:9e:b3:e2:d1:6e:26:a6:c6:2f:85:d5:41:ec:
c2:62:9d:42:58:05:93:5e:a3:ff:dd:fa:76:06:5d:
5f:bd:6c:a5:a4:1a:69:2e:b8:2f:d5:62:f1:2a:47:
90:ff:36:47:53:0c:81:30:79:7b:e3:c3:79:ab:0b:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:A1:3B:46:95:42:8F:00:A4:B0:DE:8C:79:91:76:1E:40:5D:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/69324153-b89b-3727-8b34-9cce663c91e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:45:50:f7:c3:cc:ee:e0:59:3a:aa:5c:f0:34:96:1a:9b:8e:
23:55:fb:a7:a7:12:f8:08:ac:60:64:c8:aa:e9:9d:ff:b5:be:
94:f6:8c:c4:e5:28:13:68:fb:95:a8:94:b1:08:01:78:e2:b6:
1a:e2:b2:c5:60:b7:07:6b:05:c9:91:59:3a:0c:a2:51:20:3c:
65:e8:96:ba:93:9b:f0:77:93:bf:3c:a7:4a:af:d6:44:7f:91:
b4:d1:f9:33:d7:7c:3b:1e:16:38:3c:60:d9:cf:6d:18:ac:7a:
96:b6:82:ae:00:d2:94:31:80:3c:d8:63:e8:6b:53:dd:fb:8c:
00:db:f2:a2:2b:1a:3b:bc:0c:bf:23:2f:b7:6b:74:48:90:ce:
b5:5a:7c:c2:3c:52:d0:f4:df:db:1b:cf:41:5b:31:23:6f:bd:
b6:07:bd:db:c6:b1:45:c6:2f:bd:97:22:1c:13:92:18:be:1e:
f8:c1:dd:f6:1c:f0:10:3a:42:fe:15:6d:7b:6c:ea:3a:c6:44:
0d:e1:20:13:4e:db:7e:f6:a4:6f:18:8b:3b:26:fa:7d:0b:35:
e4:41:6f:f0:17:10:95:87:a5:e3:c6:6b:7f:26:10:1e:2f:b0:
22:a1:af:f1:7f:d1:dd:2e:cd:c8:47:45:d3:07:13:b2:3d:25:
d7:25:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:47 2025 by rpki-client