Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/a1e7b7e4-879b-3f92-928c-276f8d650c46.roa
File: a1e7b7e4-879b-3f92-928c-276f8d650c46.roa (raw, json)
Hash identifier: ZcS65sgvnHoid10U//iiOqiG25tRIrY4P0AHdSb6Yx0=
Subject key identifier: C4:A5:D6:0B:EF:85:05:3F:8C:B9:BC:24:48:26:A7:7F:1F:19:06:C7
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583DA376E3B9EDD52A4C039E0100
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/a1e7b7e4-879b-3f92-928c-276f8d650c46.roa
Signing time: Fri 20 Mar 2020 17:21:25 +0000
ROA not before: Fri 20 Mar 2020 17:21:25 +0000
ROA not after: Tue 23 Jul 2024 04:00:00 +0000
asID: 16509
IP address blocks: 216.9.196.0/24 maxlen: 24
216.9.197.0/24 maxlen: 24
216.9.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a3:76:e3:b9:ed:d5:2a:4c:03:9e:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Mar 20 17:21:25 2020 GMT
Not After : Jul 23 04:00:00 2024 GMT
Subject: CN=d105fbfb-d30e-4119-8ef7-529647ece353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:21:4f:a4:ef:50:b1:6e:58:ff:fa:5e:0e:
7b:d2:fa:58:78:76:7a:1a:de:4e:d4:ee:e2:bb:15:
e5:99:ff:3f:4f:cb:4d:0b:f6:9f:07:2a:60:ed:9f:
0a:76:d0:8b:16:5c:19:55:cb:b8:12:6b:b3:c1:5f:
86:e0:82:fa:4f:ec:2f:2f:8a:f9:84:b9:2e:38:9e:
f4:60:60:b9:9c:52:04:6f:ef:b1:12:25:b3:f2:57:
f3:d8:22:63:3b:f8:04:95:7a:e4:a9:7d:b5:b6:52:
10:6e:e0:64:7a:d7:8d:ab:c4:82:ed:1d:7b:34:f3:
e2:13:fb:94:17:77:0c:ba:d3:2b:a8:ac:f7:fd:e3:
d0:4f:5f:a6:ed:1e:b7:41:f9:88:24:12:b8:11:b6:
4c:99:f8:a1:9e:ea:aa:8f:82:2e:48:c9:cc:83:6a:
bd:29:5a:31:8b:f5:ff:1a:d2:12:36:86:db:f6:07:
34:f8:85:08:8b:94:1a:f0:aa:be:f9:ed:6a:93:a7:
cc:e0:df:90:26:8d:93:b5:d6:6f:2f:56:c5:f8:ac:
e8:55:35:cb:0e:7f:bf:f7:78:c7:57:3d:88:b8:a3:
49:99:69:b8:41:bf:06:9d:87:5d:34:05:b4:80:11:
dc:c2:09:c9:81:c4:04:27:39:98:60:d1:83:92:01:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:D6:0B:EF:85:05:3F:8C:B9:BC:24:48:26:A7:7F:1F:19:06:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/a1e7b7e4-879b-3f92-928c-276f8d650c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.196.0-216.9.198.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:6c:20:86:8a:10:d8:f5:a4:e3:ee:7e:aa:71:5f:74:81:52:
37:68:3d:9a:5f:b4:d2:7a:24:1a:e6:18:0f:29:f9:5d:54:b2:
db:36:14:1b:76:dd:67:81:a0:8e:6f:e0:d8:7e:e2:e1:83:1a:
ce:ab:78:b2:b8:d8:ef:d0:3f:b2:04:7a:62:b9:fc:a0:3c:e6:
96:c3:9c:09:06:f4:2e:3f:7f:46:21:26:21:1f:6c:66:b6:3f:
82:e7:da:ff:fb:6d:ae:77:07:88:62:e2:6f:38:ba:a4:48:f1:
17:af:66:c9:11:33:d0:15:97:3c:31:4d:c4:14:ae:50:cd:f5:
3f:ae:d0:e1:6a:a8:f4:2e:da:f0:73:90:82:42:51:0a:9b:f0:
b6:34:b5:6a:af:0a:3b:29:d8:ee:02:ce:e2:8e:9b:c6:8a:98:
18:24:f4:a0:e5:26:5d:90:72:77:45:45:d7:da:73:a5:22:9e:
0b:31:42:5e:d1:20:82:99:9d:9c:e0:d0:c1:8b:f3:d1:0a:85:
ef:d6:2d:fe:ef:e7:4a:e9:70:27:05:83:06:d6:f1:c9:d5:91:
86:f0:f6:78:e6:ba:92:f5:f0:df:1b:cd:4b:c5:5a:70:05:04:
35:a2:47:53:93:a2:ec:0c:ed:5c:81:2e:68:a0:63:00:95:58:
f1:59:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:57 2025 by rpki-client