Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/e3bb501f-ec79-3f53-880f-c2a6cc295c2c.roa
File: e3bb501f-ec79-3f53-880f-c2a6cc295c2c.roa (raw, json)
Hash identifier: wAWB9gx5QglryUejSI6V98RlhOtnxTC1bEMFcwqBe1M=
Subject key identifier: E7:1D:DF:00:3B:87:27:6F:E8:B0:A4:EC:19:5D:BF:BB:A2:9C:FE:09
Certificate issuer: /CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Certificate serial: 010D0C9F4328583E5950EE00F59982FE6FD951C0
Authority key identifier: 5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/e3bb501f-ec79-3f53-880f-c2a6cc295c2c.roa
Signing time: Thu 23 Jun 2022 12:00:00 +0000
ROA not before: Thu 23 Jun 2022 12:00:00 +0000
ROA not after: Wed 23 Jun 2027 04:00:00 +0000
asID: 16509
IP address blocks: 216.9.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:59:50:ee:00:f5:99:82:fe:6f:d9:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ca66ad-657f-42b1-9ec3-ab39b361fadd
Validity
Not Before: Jun 23 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2027 GMT
Subject: CN=02ed97be-bb37-4232-8026-8b816eddc41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:bc:66:64:75:ab:d7:e1:3c:33:6a:31:b0:
00:44:02:8b:3c:e5:39:52:7c:2b:d0:4e:d0:e3:94:
57:c1:0a:61:91:0f:c7:1f:fd:fd:9d:8d:be:ad:bf:
c1:18:36:a8:92:a5:f1:44:42:52:a1:5a:09:95:34:
8f:fb:59:f8:92:08:f3:31:1d:5b:09:43:38:24:5c:
f8:7a:a8:c0:32:c3:24:d3:34:63:c9:99:ef:f6:d4:
63:0e:79:ca:04:6f:4f:65:5b:5e:e1:85:1d:be:69:
19:44:76:dd:8d:e8:79:ac:91:83:e1:45:b2:f3:9a:
80:bf:ab:1e:6c:1c:7d:f2:eb:66:8a:5c:ae:03:47:
6d:6e:23:3c:80:45:c7:73:81:39:70:b2:3c:71:c3:
52:29:9d:6b:86:96:ed:9b:de:5c:78:6e:d1:22:90:
07:6c:30:a1:bb:ff:02:1b:9f:4a:3c:2c:aa:ea:df:
46:c8:2d:04:2d:d2:86:7f:f6:1f:79:35:a0:6f:59:
13:85:7f:f7:94:72:52:db:6a:70:b8:a3:5a:9b:4e:
f2:e9:53:cf:3e:63:1b:64:da:b8:bc:f1:c6:30:9b:
61:3c:94:15:3f:90:d0:9e:bf:3e:dc:b6:85:60:c8:
31:35:7a:41:95:b6:6e:67:dd:8e:9b:bd:b6:6a:b7:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:DF:00:3B:87:27:6F:E8:B0:A4:EC:19:5D:BF:BB:A2:9C:FE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/e3bb501f-ec79-3f53-880f-c2a6cc295c2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd/13ca66ad-657f-42b1-9ec3-ab39b361fadd.crl
X509v3 Authority Key Identifier:
keyid:5A:51:E9:57:92:52:CB:6E:79:77:7B:1C:28:F0:F2:F0:60:7B:1E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13ca66ad-657f-42b1-9ec3-ab39b361fadd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:93:93:16:ff:af:e2:b2:2b:bf:3c:a3:b3:2e:90:41:a7:ff:
fb:4f:7c:53:fa:1c:94:3f:ea:c0:01:4f:e3:f5:dc:eb:00:7b:
19:bb:33:cd:10:08:08:a6:86:54:e1:60:dd:c2:6b:28:48:d1:
c4:c2:60:6e:fa:91:34:a7:55:62:06:0e:32:19:2e:c5:86:77:
15:4a:f6:c2:9e:a9:a0:26:bc:b6:33:b3:94:be:24:3a:2f:aa:
3e:fc:2a:22:1a:70:64:e2:e2:72:16:c5:2c:e7:40:09:8e:20:
dd:84:2d:44:11:90:8c:17:bb:50:c3:15:97:66:ed:6a:05:81:
8c:4e:f4:b8:0c:8e:5d:c8:f6:90:57:d5:c2:68:b9:8c:6b:9b:
a6:74:25:aa:93:ce:30:bc:57:22:7f:71:3c:19:9a:aa:47:9b:
ec:21:ae:a4:86:43:3c:f1:5a:9c:df:63:71:00:7c:e2:82:c0:
e5:4b:96:a6:28:1f:65:86:50:f0:1d:36:d5:57:c9:85:72:3d:
37:6a:dc:08:76:56:30:c8:ff:03:63:80:1f:ba:ca:17:fa:b8:
f6:51:ed:36:4c:c8:92:84:8c:4b:45:54:67:08:73:81:6d:83:
73:93:cf:b0:20:62:3a:e6:90:ca:ba:87:f6:cc:3c:f6:90:1c:
31:ad:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:11 2025 by rpki-client