Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/81dc060f-06a2-335a-afe9-73041dd4fabe.roa
File: 81dc060f-06a2-335a-afe9-73041dd4fabe.roa (raw, json)
Hash identifier: GQpYl2Pir+ymoZH+pbv/O6ciVldgmS548i04l1A47zA=
Subject key identifier: 1F:16:AF:BB:90:74:94:82:0F:39:15:98:51:90:E3:D9:6E:72:9C:A6
Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial: 010D0C9F4328584656D47696198F7B5BE0E72B80
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/81dc060f-06a2-335a-afe9-73041dd4fabe.roa
Signing time: Wed 26 Jun 2024 13:00:35 +0000
ROA not before: Wed 26 Jun 2024 13:00:35 +0000
ROA not after: Tue 24 Sep 2024 13:00:35 +0000
asID: 63037
IP address blocks: 185.111.200.0/22 maxlen: 24
2605:bb80:d34d::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:56:d4:76:96:19:8f:7b:5b:e0:e7:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Validity
Not Before: Jun 26 13:00:35 2024 GMT
Not After : Sep 24 13:00:35 2024 GMT
Subject: CN=228d8925-1145-4376-ba14-d0b513f40592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:6f:48:c7:23:5f:b8:6a:52:02:02:9e:82:
16:87:5c:36:54:98:dc:f0:28:34:e4:3a:d7:f1:d1:
e8:0b:c6:22:cc:91:00:cb:23:26:4b:b7:e9:56:05:
12:f6:16:70:8d:ac:80:1f:04:de:c2:84:5f:fc:af:
74:99:71:d9:cd:31:85:07:4c:2c:0d:ac:27:c4:d6:
7f:fd:94:87:49:1e:93:af:a1:24:36:1b:2a:52:d3:
6a:c1:44:b2:72:df:cc:53:57:da:df:65:be:bc:05:
75:b4:c0:5b:ec:f7:a2:83:28:ed:20:5f:05:fa:4f:
b9:7c:b7:d5:bf:50:2f:95:30:aa:21:06:69:59:1d:
4d:e4:ff:17:50:57:18:c6:03:aa:bb:c0:d5:1d:01:
33:14:f6:8b:5d:b6:c1:5f:0b:39:60:53:e2:e3:b3:
38:b1:a0:82:ac:ef:36:4c:ef:f8:3e:f6:3d:61:a9:
b7:84:83:b3:1d:c2:57:98:45:80:4a:f0:c8:c1:ae:
b7:9f:59:31:b9:a0:31:e9:8b:10:a2:cd:b0:85:c2:
82:03:8b:48:ca:5d:a4:70:4b:7a:98:f1:ce:83:db:
60:91:81:0a:b1:69:4a:d0:97:e4:af:ac:02:08:85:
6f:57:44:b8:b4:ea:b9:b3:2e:5d:7e:77:1c:52:af:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:AF:BB:90:74:94:82:0F:39:15:98:51:90:E3:D9:6E:72:9C:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/81dc060f-06a2-335a-afe9-73041dd4fabe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl
X509v3 Authority Key Identifier:
keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
sbgp-ipAddrBlock: critical
IPv4:
185.111.200.0/22
IPv6:
2605:bb80:d34d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:11:4d:31:4f:95:a3:ef:1f:cd:28:eb:5b:5e:2a:20:f4:08:
63:6a:ce:e9:23:c8:9d:64:b1:4f:c0:e9:9b:07:ee:32:e7:a9:
a7:e3:c5:99:3e:16:a5:4b:f6:7c:a7:f7:c2:f4:d2:3a:e0:dc:
b1:e9:71:b1:73:ea:4a:91:73:d7:1b:cd:f9:d4:23:43:aa:6c:
7b:20:05:96:dd:04:41:66:61:1b:fa:a1:29:1b:5b:78:92:56:
bf:5c:75:7a:09:8d:b1:ad:0e:53:df:e0:84:9f:9c:1b:4b:76:
87:a8:b1:94:48:af:17:63:d5:fa:05:b5:be:15:d0:41:20:cf:
c1:c0:61:25:eb:b3:6b:bb:e0:91:3d:96:06:40:f8:73:1d:82:
83:c8:27:df:4b:85:b1:9b:54:25:1d:a4:b2:07:6c:a6:3f:03:
93:6c:f5:22:7e:5d:70:c1:c3:60:5e:bc:ab:70:74:68:a6:d4:
b2:bd:ad:83:02:b4:d9:a6:f2:2b:5f:42:54:cc:0c:68:4c:2e:
64:e1:95:30:1d:f9:72:e5:a1:b1:36:cd:a9:2e:67:e5:43:41:
68:1a:3f:7f:ce:bf:ec:eb:ef:a5:ef:ef:98:86:d9:17:b8:70:
49:8d:a1:ff:cd:ae:ba:50:f3:5f:54:cd:6a:93:22:25:f4:65:
d7:5b:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:04 2025 by rpki-client