Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/88903b49-8f6b-3d13-addb-3b1b0235bb53.roa
File: 88903b49-8f6b-3d13-addb-3b1b0235bb53.roa (raw, json)
Hash identifier: QHO7odmccZl5MW7hkqulzaoM3U4DXrZMrC2lDiORPNU=
Subject key identifier: 83:40:ED:56:85:67:1F:C0:2E:B6:58:85:52:7D:B5:FB:FE:44:EE:B5
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583C8F0408DA173678B206D98780
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/88903b49-8f6b-3d13-addb-3b1b0235bb53.roa
Signing time: Fri 20 Mar 2020 04:00:00 +0000
ROA not before: Fri 20 Mar 2020 04:00:00 +0000
ROA not after: Wed 01 Jan 2025 05:00:00 +0000
asID: 14618
IP address blocks: 64.207.199.0/24 maxlen: 24
64.207.196.0/24 maxlen: 24
64.207.197.0/24 maxlen: 24
64.207.198.0/24 maxlen: 24
64.207.204.0/24 maxlen: 24
64.207.205.0/24 maxlen: 24
64.207.222.0/24 maxlen: 24
67.222.248.0/24 maxlen: 24
67.222.249.0/24 maxlen: 24
67.222.250.0/24 maxlen: 24
67.222.253.0/24 maxlen: 24
67.222.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8f:04:08:da:17:36:78:b2:06:d9:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Mar 20 04:00:00 2020 GMT
Not After : Jan 1 05:00:00 2025 GMT
Subject: CN=758cf2ba-67fc-4ab2-965a-cf9e4fb90739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:09:8c:75:da:18:a4:37:7a:0e:6e:91:ac:
6a:ea:9b:c3:5e:28:55:66:ee:0a:e0:67:54:ec:d4:
06:a9:44:4a:36:d3:2b:c7:63:84:77:a0:cc:cb:09:
6a:cd:c4:3e:06:21:5c:2c:41:36:fc:a2:31:c9:54:
18:f6:37:01:82:dd:08:3c:5e:72:6b:11:44:b4:cd:
ee:51:17:ca:6e:8e:53:61:31:ec:09:20:01:b4:f0:
c0:86:cb:f9:f3:86:c8:da:32:65:96:5f:c7:75:d0:
45:fe:09:94:4d:bd:8d:d1:a6:ff:99:28:7d:ee:0c:
32:d5:c1:06:f6:56:2c:18:38:d3:9c:95:d8:bd:f1:
88:65:fd:61:d0:a3:e6:3c:e7:e1:f5:ad:3c:69:e7:
b0:21:be:db:39:67:73:36:4a:4c:2f:e5:be:b1:06:
76:cf:eb:ba:41:b3:26:04:9f:43:35:94:4b:59:43:
d1:c2:f6:ef:91:fa:cf:a4:1b:b4:34:74:c5:70:17:
4e:0e:c7:6b:a3:02:8b:b0:84:28:88:00:fd:16:d4:
bd:99:68:fb:f6:03:4a:4a:df:67:e0:f8:73:23:fe:
6a:7d:89:c2:a9:c9:87:df:8b:61:89:e3:6d:98:fa:
e2:1f:68:ab:e7:76:c5:0b:e2:8c:75:27:c8:c5:74:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:40:ED:56:85:67:1F:C0:2E:B6:58:85:52:7D:B5:FB:FE:44:EE:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/88903b49-8f6b-3d13-addb-3b1b0235bb53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.196.0/22
64.207.204.0/23
64.207.222.0/24
67.222.248.0-67.222.250.255
67.222.253.0-67.222.254.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:0a:c3:03:18:a4:7e:94:9d:62:88:b1:7f:62:1b:e8:2c:8f:
6c:63:34:1c:2a:64:41:fd:76:8b:cb:63:2d:0d:27:4a:84:03:
5e:87:81:1c:54:86:00:dd:02:32:11:f8:32:aa:c9:0b:20:30:
3d:c1:13:22:32:77:a8:07:04:e8:ee:6b:3c:96:fa:d1:de:d8:
e7:ea:04:4e:aa:b6:11:63:1b:24:a9:f4:ad:90:80:f0:1f:af:
84:c3:99:dc:86:6e:39:ab:79:ee:dc:b9:c0:0a:99:98:69:34:
02:7f:ab:2a:36:08:d2:1a:d1:e0:74:69:32:e4:62:86:60:b0:
3f:fb:cc:e6:18:27:5c:82:8a:1b:f1:95:b1:0c:52:dd:e4:c6:
4b:17:f3:8a:ae:df:b3:09:d4:ce:c9:95:a1:00:19:7a:9f:ee:
e1:8d:c9:ef:0a:74:a5:c9:26:db:29:82:d4:2a:4c:fc:e2:c4:
c9:c4:e3:18:d2:a7:01:86:f5:4d:1e:57:10:f8:c8:73:75:3c:
dd:20:db:04:4a:50:6b:83:30:a6:a0:fc:0d:6f:54:6b:de:46:
fc:2b:8f:61:44:5f:54:9b:23:a4:b2:5d:88:d2:63:7c:7c:54:
9c:42:a8:98:e0:b7:85:a3:78:74:e6:13:34:0a:44:5f:85:00:
f7:b1:03:12
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWDyPBAjaFzZ4sgbZh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNjYTY2YWQtNjU3Zi00MmIxLTllYzMtYWIzOWIzNjFm
YWRkMB4XDTIwMDMyMDA0MDAwMFoXDTI1MDEwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NzU4Y2YyYmEtNjdmYy00YWIyLTk2NWEtY2Y5ZTRmYjkwNzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEAJjHXaGKQ3eg5ukaxq6pvDXihVZu4K4GdU
7NQGqURKNtMrx2OEd6DMywlqzcQ+BiFcLEE2/KIxyVQY9jcBgt0IPF5yaxFEtM3u
URfKbo5TYTHsCSABtPDAhsv584bI2jJlll/HddBF/gmUTb2N0ab/mSh97gwy1cEG
9lYsGDjTnJXYvfGIZf1h0KPmPOfh9a08aeewIb7bOWdzNkpML+W+sQZ2z+u6QbMm
BJ9DNZRLWUPRwvbvkfrPpBu0NHTFcBdODsdrowKLsIQoiAD9FtS9mWj79gNKSt9n
4PhzI/5qfYnCqcmH34thieNtmPriH2ir53bFC+KMdSfIxXTnWwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFINA7VaFZx/ALrZYhVJ9tfv+RO61MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Nh
NjZhZC02NTdmLTQyYjEtOWVjMy1hYjM5YjM2MWZhZGQvODg5MDNiNDktOGY2Yi0z
ZDEzLWFkZGItM2IxYjAyMzViYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNjYTY2YWQtNjU3Zi00MmIxLTll
YzMtYWIzOWIzNjFmYWRkLzEzY2E2NmFkLTY1N2YtNDJiMS05ZWMzLWFiMzliMzYx
ZmFkZC5jcmwwHwYDVR0jBBgwFoAUWlHpV5JSy255d3scKPDy8GB7HqkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2NhNjZhZC02NTdmLTQyYjEtOWVjMy1hYjM5
YjM2MWZhZGQuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCQM/EAwQB
QM/MAwQAQM/eMAwDBAND3vgDBABD3vowDAMEAEPe/QMEAEPe/jBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCb
CsMDGKR+lJ1iiLF/YhvoLI9sYzQcKmRB/XaLy2MtDSdKhANeh4EcVIYA3QIyEfgy
qskLIDA9wRMiMneoBwTo7ms8lvrR3tjn6gROqrYRYxskqfStkIDwH6+Ew5nchm45
q3nu3LnACpmYaTQCf6sqNgjSGtHgdGky5GKGYLA/+8zmGCdcgoob8ZWxDFLd5MZL
F/OKrt+zCdTOyZWhABl6n+7hjcnvCnSlySbbKYLUKkz84sTJxOMY0qcBhvVNHlcQ
+MhzdTzdINsESlBrgzCmoPwNb1Rr3kb8K49hRF9UmyOksl2I0mN8fFScQqiY4LeF
o3h05hM0CkRfhQD3sQMS
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:25 2025 by rpki-client