Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/6667cc47-2849-391e-9b8a-e43899053670.roa
File: 6667cc47-2849-391e-9b8a-e43899053670.roa (raw, json)
Hash identifier: fcEzb5PdffqIJU4Zpcfef3DETnrnb1+Ofo/TzWVjCNo=
Subject key identifier: 9E:35:04:55:A6:6B:BF:C7:95:82:9E:42:8E:29:E2:46:34:A0:53:45
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F432858486D9047DCB845F929DEB172C0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/6667cc47-2849-391e-9b8a-e43899053670.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 32780
IP address blocks: 45.56.196.0/24 maxlen: 24
45.56.197.0/24 maxlen: 24
45.56.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:47:dc:b8:45:f9:29:de:b1:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=404dfd1c-4c2e-4433-88d3-fcf47718969f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:19:5d:d3:6b:fc:b1:66:c6:b7:2b:3b:81:
a6:5c:cd:8c:55:5e:59:be:2a:46:82:01:45:89:74:
c6:ea:3f:c3:2f:d9:d0:5e:6d:c3:25:c3:3b:8e:98:
ab:32:bd:70:ea:2c:2e:76:57:d8:72:07:ef:ec:4e:
09:26:6f:08:a8:dd:1b:67:06:b9:e1:cb:33:cc:9d:
6f:ed:e9:15:db:94:a0:06:5f:19:8c:76:4b:18:a9:
c3:84:30:dd:ef:92:30:8f:a0:fc:12:5c:b4:9a:74:
58:07:07:24:6f:4f:16:0b:85:a3:9b:12:69:24:8c:
4c:71:48:db:df:0c:56:b1:e3:0a:64:57:90:30:5e:
62:f9:c0:c1:06:0a:8e:87:31:36:29:c1:94:b6:f0:
1d:37:1f:69:77:79:d5:00:10:1f:cc:29:70:a7:cb:
c3:4b:2e:b1:78:2c:14:07:7d:35:c3:a9:59:74:23:
21:38:83:56:05:14:d3:1d:46:e6:75:01:b1:2d:86:
95:35:ac:45:a3:30:7f:b6:72:70:97:a9:ae:45:1a:
a6:77:3a:2e:4c:b4:57:bc:dc:e7:e1:f4:72:2c:da:
19:87:ac:e4:35:de:37:0d:54:2e:92:22:5c:60:63:
ac:33:b4:1f:34:8b:b4:52:eb:73:76:3f:c3:9a:de:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:04:55:A6:6B:BF:C7:95:82:9E:42:8E:29:E2:46:34:A0:53:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/6667cc47-2849-391e-9b8a-e43899053670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
45.56.196.0-45.56.198.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:1b:ec:b9:7c:b8:d6:81:4b:29:5c:9a:bb:d1:1c:ed:b3:14:
0a:57:8d:db:1e:a6:d1:d8:d5:db:6d:50:fc:79:1d:ee:df:71:
ba:0c:89:fd:07:c5:cc:ea:19:c9:0c:b5:a6:22:fa:88:8e:80:
87:79:3f:69:4e:7c:31:eb:af:20:fe:90:88:08:49:c4:66:48:
b3:5d:53:68:16:0d:0f:2a:89:a9:90:e6:90:04:63:70:5f:da:
32:6f:4c:65:77:44:5f:18:a1:f8:0a:58:d9:d4:b2:05:93:29:
bf:72:57:6b:af:fb:6d:4c:95:9e:38:4f:17:3f:01:88:7b:cc:
e5:44:86:76:6f:2a:38:e0:3c:bf:a1:41:45:7f:9e:62:5c:a1:
0e:61:b1:d4:6e:d2:1d:05:78:fc:16:31:da:6e:92:c9:3f:4b:
f3:33:7d:0c:11:18:5c:eb:43:fa:cf:60:63:4d:a4:72:39:25:
55:1e:55:ea:7f:66:0a:3f:f5:16:46:3f:5d:78:92:57:15:06:
ee:05:56:e1:21:e5:f7:96:4e:25:ec:ea:9f:cd:72:a9:f0:1a:
9c:1f:5a:8b:c1:89:c8:cd:1b:51:91:dd:7d:29:ea:36:92:fb:
74:68:eb:5c:a1:c5:aa:6f:c8:3d:a2:6d:87:43:99:a7:0a:48:
ca:5e:3b:5e
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhtkEfcuEX5Kd6xcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDA0ZGZkMWMtNGMyZS00NDMzLTg4ZDMtZmNmNDc3MTg5NjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5cZXdNr/LFmxrcrO4GmXM2MVV5ZvipGggFF
iXTG6j/DL9nQXm3DJcM7jpirMr1w6iwudlfYcgfv7E4JJm8IqN0bZwa54cszzJ1v
7ekV25SgBl8ZjHZLGKnDhDDd75Iwj6D8Ely0mnRYBwckb08WC4WjmxJpJIxMcUjb
3wxWseMKZFeQMF5i+cDBBgqOhzE2KcGUtvAdNx9pd3nVABAfzClwp8vDSy6xeCwU
B301w6lZdCMhOINWBRTTHUbmdQGxLYaVNaxFozB/tnJwl6muRRqmdzouTLRXvNzn
4fRyLNoZh6zkNd43DVQukiJcYGOsM7QfNIu0Uutzdj/Dmt6WEwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJ41BFWma7/HlYKeQo4p4kY0oFNFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNjY2N2NjNDctMjg0OS0z
OTFlLTliOGEtZTQzODk5MDUzNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItOMQD
BAAtOMYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAuBvsuXy41oFLKVyau9Ec7bMUCleN2x6m0djV221Q/Hkd
7t9xugyJ/QfFzOoZyQy1piL6iI6Ah3k/aU58MeuvIP6QiAhJxGZIs11TaBYNDyqJ
qZDmkARjcF/aMm9MZXdEXxih+ApY2dSyBZMpv3JXa6/7bUyVnjhPFz8BiHvM5USG
dm8qOOA8v6FBRX+eYlyhDmGx1G7SHQV4/BYx2m6SyT9L8zN9DBEYXOtD+s9gY02k
cjklVR5V6n9mCj/1FkY/XXiSVxUG7gVW4SHl95ZOJezqn81yqfAanB9ai8GJyM0b
UZHdfSnqNpL7dGjrXKHFqm/IPaJth0OZpwpIyl47Xg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:56 2025 by rpki-client