Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/d618d70e-32f9-3f22-9c8d-9e1ed1a2ddd6.roa
File: d618d70e-32f9-3f22-9c8d-9e1ed1a2ddd6.roa (raw, json)
Hash identifier: stlxnT9cgbttHiADn/UJUB3lgMPvlfUWLMXED5qyvoQ=
Subject key identifier: 75:AE:26:A2:3B:78:55:6B:4A:32:5F:1F:0A:4B:69:42:8D:F4:BB:F1
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583DBA282038E5D0A973345D4D40
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/d618d70e-32f9-3f22-9c8d-9e1ed1a2ddd6.roa
Signing time: Wed 27 Apr 2022 12:00:00 +0000
ROA not before: Wed 27 Apr 2022 12:00:00 +0000
ROA not after: Sat 01 May 2027 04:00:00 +0000
asID: 16509
IP address blocks: 216.9.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ba:28:20:38:e5:d0:a9:73:34:5d:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Apr 27 12:00:00 2022 GMT
Not After : May 1 04:00:00 2027 GMT
Subject: CN=d8f5a0c5-ed68-40e5-a1b3-0f4478463421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:fd:00:2d:61:18:0b:3f:c5:42:e0:3b:21:
fe:c9:b4:3d:fc:96:a2:28:ab:f9:fb:50:a2:9c:84:
2b:62:29:a7:6a:36:68:f9:26:8c:bc:f1:d8:96:e2:
6f:fb:da:da:f7:81:54:2d:87:4d:76:36:c2:3d:c9:
d2:43:5b:2f:4b:f7:46:50:ae:df:c9:a6:97:96:c7:
95:1d:dd:f9:92:5b:53:09:45:46:06:50:32:19:7c:
7a:86:6e:ad:14:53:18:9a:c9:cc:dc:c7:e6:2d:8c:
49:ee:c7:7a:f6:7d:04:42:5f:01:50:cd:62:b9:1b:
ec:4e:84:81:12:33:ba:32:86:f5:dc:5f:7e:7d:4f:
94:dd:1a:fd:d2:7a:99:82:b8:3e:f6:31:00:51:24:
ae:1c:91:63:87:b9:8b:dc:6c:e4:a7:ea:23:57:74:
dc:17:c7:4c:17:f4:41:f7:73:85:dd:d9:1e:f3:63:
e3:a7:f8:55:c5:25:e9:48:60:0b:2c:b2:e1:15:e3:
79:69:68:e8:62:0a:86:72:08:52:f5:a2:5d:fb:e2:
88:ae:e4:24:88:97:f5:4d:3e:8f:f4:8c:65:c4:a9:
30:98:8e:91:31:b9:db:77:50:1a:bd:f6:0b:83:64:
87:82:86:df:c4:91:39:7b:77:64:3d:f4:d4:5a:48:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:26:A2:3B:78:55:6B:4A:32:5F:1F:0A:4B:69:42:8D:F4:BB:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/d618d70e-32f9-3f22-9c8d-9e1ed1a2ddd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:2d:13:db:16:3f:9a:0d:8b:e0:1e:70:35:cf:45:46:20:96:
fe:a9:cf:59:25:f4:8a:9d:16:d9:73:e9:67:ac:d1:64:92:d4:
8f:a6:8e:23:33:0b:6d:e6:d3:78:b5:85:77:15:5d:50:cf:a6:
93:e2:7a:fc:fc:f8:85:b6:37:4f:9f:63:56:d9:d2:bf:01:76:
87:56:52:23:63:de:65:a4:e2:c1:95:9e:2b:0e:cc:41:c6:0c:
98:03:14:39:d2:99:bd:93:78:8a:29:29:ab:c6:5b:41:51:bc:
bb:28:65:61:ba:eb:94:18:29:ce:3a:86:df:4f:54:05:44:14:
34:0b:60:c1:6f:6e:e1:a0:6e:a8:ea:7e:69:8f:2c:e1:05:cd:
b7:97:dd:4e:3e:74:74:57:72:ae:f1:f5:19:c0:4f:28:80:e7:
e3:e5:50:4b:1b:53:be:04:30:13:15:79:4e:33:d2:9d:0a:b0:
3f:8a:94:fd:ed:ad:88:f7:30:0d:6d:3c:71:3f:0e:26:47:a9:
2d:55:ad:1d:af:3f:bd:d0:1a:9d:ca:d4:ff:d3:03:dc:30:b1:
31:d7:3d:78:c1:32:da:01:99:c5:a6:54:fb:1d:36:69:50:65:
29:50:ae:c5:02:47:20:7d:cf:ee:c3:88:ff:74:f5:14:b9:c7:
b5:4d:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:53 2025 by rpki-client