Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/c6f89637-cd0e-357e-9102-7a3838327696.roa
File: c6f89637-cd0e-357e-9102-7a3838327696.roa (raw, json)
Hash identifier: SvMEOvVnIqt99l75RphkoATvJks1AwPzWn3R37IYucw=
Subject key identifier: CD:C2:63:2A:69:C4:54:2E:03:68:94:68:EE:CC:62:F5:F1:DF:6E:02
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583DB127FE620DE110E07EAF5400
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/c6f89637-cd0e-357e-9102-7a3838327696.roa
Signing time: Sun 24 Apr 2022 12:00:00 +0000
ROA not before: Sun 24 Apr 2022 12:00:00 +0000
ROA not after: Sat 24 Apr 2027 04:00:00 +0000
asID: 14618
IP address blocks: 216.9.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b1:27:fe:62:0d:e1:10:e0:7e:af:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Apr 24 12:00:00 2022 GMT
Not After : Apr 24 04:00:00 2027 GMT
Subject: CN=c7e0e614-a17d-4ac6-aacf-941a87efb5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:6f:fb:77:dc:91:0e:1a:ff:d1:dc:25:59:
80:9d:81:b6:cd:73:ae:1f:47:17:f0:7b:9d:e7:f4:
70:b8:1d:77:eb:a0:d7:77:54:2a:17:c1:b6:cd:f0:
cd:09:68:17:ea:42:8d:9d:49:41:70:a2:4d:33:6d:
39:31:82:8d:1f:69:c8:f3:91:3a:d1:13:d4:60:f0:
25:0d:9d:75:26:98:94:a2:86:1b:94:38:57:db:4d:
03:45:d2:9c:3a:05:b5:ff:99:c5:cd:de:8a:d9:70:
40:ab:17:c9:ba:20:97:cb:8b:d6:d8:53:2e:b1:e5:
94:fa:2c:b5:22:37:9b:03:3f:2f:bb:f0:56:50:c2:
a7:a3:18:f0:dd:fc:8b:a8:78:be:5a:8a:19:ac:33:
fe:a7:57:f2:9b:3a:37:a7:39:c2:76:58:83:69:16:
70:08:e0:ad:02:bc:52:8e:89:1c:f4:7a:f2:5f:da:
34:41:24:b4:5e:66:7b:50:75:0e:2e:f2:8b:1b:ff:
9f:5a:8a:a0:bd:0f:54:89:2e:9f:09:5a:65:c4:2d:
f1:37:57:b2:15:70:0c:33:d7:b5:94:7d:5c:cd:e3:
f6:f0:7f:48:2c:e4:91:40:45:ca:ba:2d:3c:0d:bf:
e9:9c:5c:f8:64:fc:2a:2b:2d:02:72:18:2b:b4:be:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:63:2A:69:C4:54:2E:03:68:94:68:EE:CC:62:F5:F1:DF:6E:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/c6f89637-cd0e-357e-9102-7a3838327696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:cf:34:54:17:33:f3:14:f2:eb:7e:ec:23:60:90:92:5d:37:
14:fe:6f:d8:83:b0:48:5f:7d:50:6a:f5:43:80:8f:66:e1:85:
5b:f1:ea:f7:47:c3:41:b9:9c:b2:20:35:f9:14:07:c6:46:56:
69:77:37:81:9f:d7:b5:62:85:9d:3e:05:8d:18:96:45:c2:0f:
43:07:a2:96:a7:3e:59:42:77:ef:6c:82:aa:1d:d4:9a:b5:79:
15:81:12:73:1e:7f:68:a9:f1:ab:76:09:7a:95:da:28:7a:da:
32:c3:e1:a3:3a:37:c9:21:b6:4a:c8:ec:b5:69:9c:00:25:a7:
fb:62:36:b6:ca:34:9b:cb:59:7c:b6:cb:23:0b:7c:9b:c1:54:
bf:da:df:77:58:40:a8:b6:09:34:1b:74:9c:22:3a:9e:a5:01:
73:9f:76:a6:ca:0f:78:08:e3:0f:a0:3e:f8:d0:23:0b:fc:39:
c8:59:d5:96:02:59:bd:e5:86:ea:58:bc:b6:87:6b:d3:b8:67:
9b:bb:54:d8:f1:da:99:79:3b:21:2a:02:42:0a:b5:e9:0e:ef:
33:4f:d0:55:65:8f:6c:b6:d2:26:4e:8c:9b:70:f6:73:be:31:
7c:63:ba:62:b1:a5:8f:64:34:bc:55:ef:23:84:de:fa:b8:54:
4e:d1:5e:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2xJ/5iDeEQ4H6vVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNjYTY2YWQtNjU3Zi00MmIxLTllYzMtYWIzOWIzNjFm
YWRkMB4XDTIyMDQyNDEyMDAwMFoXDTI3MDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YzdlMGU2MTQtYTE3ZC00YWM2LWFhY2YtOTQxYTg3ZWZiNWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArulv+3fckQ4a/9HcJVmAnYG2zXOuH0cX8Hud
5/RwuB1366DXd1QqF8G2zfDNCWgX6kKNnUlBcKJNM205MYKNH2nI85E60RPUYPAl
DZ11JpiUooYblDhX200DRdKcOgW1/5nFzd6K2XBAqxfJuiCXy4vW2FMuseWU+iy1
IjebAz8vu/BWUMKnoxjw3fyLqHi+WooZrDP+p1fymzo3pznCdliDaRZwCOCtArxS
jokc9HryX9o0QSS0XmZ7UHUOLvKLG/+fWoqgvQ9UiS6fCVplxC3xN1eyFXAMM9e1
lH1czeP28H9ILOSRQEXKui08Db/pnFz4ZPwqKy0CchgrtL78RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3CYyppxFQuA2iUaO7MYvXx324CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Nh
NjZhZC02NTdmLTQyYjEtOWVjMy1hYjM5YjM2MWZhZGQvYzZmODk2MzctY2QwZS0z
NTdlLTkxMDItN2EzODM4MzI3Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNjYTY2YWQtNjU3Zi00MmIxLTll
YzMtYWIzOWIzNjFmYWRkLzEzY2E2NmFkLTY1N2YtNDJiMS05ZWMzLWFiMzliMzYx
ZmFkZC5jcmwwHwYDVR0jBBgwFoAUWlHpV5JSy255d3scKPDy8GB7HqkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2NhNjZhZC02NTdmLTQyYjEtOWVjMy1hYjM5
YjM2MWZhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AnGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLPNFQXM/MU8ut+7CNgkJJdNxT+b9iDsEhffVBq9UOAj2bhhVvx6vdH
w0G5nLIgNfkUB8ZGVml3N4Gf17VihZ0+BY0YlkXCD0MHopanPllCd+9sgqod1Jq1
eRWBEnMef2ip8at2CXqV2ih62jLD4aM6N8khtkrI7LVpnAAlp/tiNrbKNJvLWXy2
yyMLfJvBVL/a33dYQKi2CTQbdJwiOp6lAXOfdqbKD3gI4w+gPvjQIwv8OchZ1ZYC
Wb3lhupYvLaHa9O4Z5u7VNjx2pl5OyEqAkIKtekO7zNP0FVlj2y20iZOjJtw9nO+
MXxjumKxpY9kNLxV7yOE3vq4VE7RXsw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:19:33 2025 by rpki-client