Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/b43dea31-1988-3729-b631-547df2a51c1f.roa
File: b43dea31-1988-3729-b631-547df2a51c1f.roa (raw, json)
Hash identifier: 7kN4aLu61IbrhfQ3U8tcebhP+DmM5Vjp8SrXcwG20gY=
Subject key identifier: DC:C7:04:9D:DC:0D:A1:A8:37:80:17:3C:74:1F:91:4C:F1:5E:5B:A8
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583DB127FE677B495BAC6F800E00
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/b43dea31-1988-3729-b631-547df2a51c1f.roa
Signing time: Sun 24 Apr 2022 12:00:00 +0000
ROA not before: Sun 24 Apr 2022 12:00:00 +0000
ROA not after: Sat 24 Apr 2027 04:00:00 +0000
asID: 16509
IP address blocks: 216.9.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b1:27:fe:67:7b:49:5b:ac:6f:80:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Apr 24 12:00:00 2022 GMT
Not After : Apr 24 04:00:00 2027 GMT
Subject: CN=b8ff3a07-23fb-4727-b5f4-2484e29acf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:36:f9:fe:ae:37:23:c3:64:62:d7:9e:1d:
0d:63:e6:bd:d8:3b:37:0c:c4:55:01:ef:4a:60:96:
0f:58:20:a2:aa:c2:c5:4f:07:dd:3d:c0:40:80:0f:
7d:54:b7:99:17:d1:fe:9b:a6:f7:50:a2:c7:41:8b:
c3:d8:79:e0:03:7f:a7:76:94:f0:a2:c1:0c:eb:97:
18:c5:19:2a:3b:9d:e2:b5:de:91:b8:b7:ba:be:df:
87:d3:7e:cc:81:e8:27:26:cb:48:4d:4f:38:e8:3b:
c5:0d:5c:02:10:bf:5f:02:62:ae:23:07:21:06:95:
5f:97:43:fb:57:56:8d:d1:9f:fd:9a:c0:8c:69:4d:
3e:e2:2b:7e:6a:91:28:8b:90:0b:ed:97:87:eb:ce:
db:c3:3b:6e:62:86:00:55:23:8c:7e:ec:2e:92:90:
34:39:7c:90:bb:6b:97:d9:0f:4e:b5:37:02:03:fb:
f1:ec:28:70:2f:f5:f8:2d:2b:e8:15:cb:39:3c:fd:
64:94:ad:2a:50:a8:a1:fc:f6:93:93:6d:c3:df:53:
e1:27:bc:6b:20:1c:a1:30:8e:4b:2c:80:d8:26:54:
01:6f:20:c0:62:e5:ae:24:ac:21:10:8c:c2:00:70:
af:cf:77:0d:cc:fe:fe:67:2c:f0:20:1c:d9:69:50:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:04:9D:DC:0D:A1:A8:37:80:17:3C:74:1F:91:4C:F1:5E:5B:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/b43dea31-1988-3729-b631-547df2a51c1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:cb:8e:04:fd:a0:51:87:72:25:dd:34:77:cb:56:2c:ac:51:
4c:1c:1a:aa:8d:de:cb:df:08:31:12:3f:77:36:05:e6:40:54:
29:4a:76:cb:d6:0b:1e:d2:63:44:9e:9c:90:84:32:64:81:0a:
13:ac:2d:e8:04:ca:5d:2b:c3:c0:85:6e:05:fb:ec:b7:17:cc:
ec:19:bf:47:76:53:3d:79:73:b2:68:33:07:b2:f0:95:1b:d2:
3f:6c:a0:d8:44:5d:0b:a5:31:fb:3d:6b:48:67:d6:46:f7:11:
ba:0d:fc:54:04:f5:e5:db:c2:eb:b0:56:45:3e:d1:ac:04:12:
8a:cc:70:2e:07:0e:56:37:dd:5a:09:10:eb:40:b0:0e:22:27:
ce:c7:57:46:99:5a:79:3b:f4:fa:60:68:29:e0:3a:a5:52:02:
ff:19:26:f4:59:a5:9f:af:d6:3c:29:38:0f:c2:a6:79:70:c9:
19:63:c3:3b:50:cb:75:25:e5:28:98:04:23:0a:f5:5c:7f:e9:
83:8b:49:c1:39:6f:0a:9c:15:e2:bd:40:b5:91:18:8a:c2:e7:
5d:8f:7a:2f:7b:f6:14:3d:01:d5:14:0e:5d:68:cf:b2:82:48:
84:96:ed:28:09:f3:52:12:bb:7f:3a:a5:20:ca:41:6b:7f:cc:
fd:fb:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:45 2025 by rpki-client