Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa
File: 9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa (raw, json)
Hash identifier: priemYDnMD5NYG96vC2xPwC/XMUbIu5RN98Z8L11s0Y=
Subject key identifier: 07:FA:7D:75:3E:15:64:C1:71:F4:CB:22:A6:7F:49:6B:8B:7E:47:73
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F43285848E9CBDF633E8D70E002D2D700
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 21659
IP address blocks: 96.126.70.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:df:63:3e:8d:70:e0:02:d2:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=c295fc7c-6376-41ee-8fd8-fa31a1ef1326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:46:b3:13:3b:97:57:af:e0:df:9c:de:0f:
94:e4:78:5f:9e:e7:d2:75:59:7f:8e:49:28:10:70:
f9:ae:ac:8b:d7:a1:60:f8:a8:af:15:13:fc:b5:d6:
1b:ee:24:9a:89:57:af:a9:e1:40:ea:67:a7:da:2b:
2d:ed:33:ef:d9:0d:f1:f2:ff:0d:47:a6:4f:c7:5b:
91:88:17:b0:0e:95:63:62:26:b6:4f:d9:61:73:92:
a3:05:43:b3:7c:cb:c2:bc:70:16:94:3c:5d:59:3f:
9b:35:9d:12:77:f1:6a:08:cb:d3:f0:e8:28:f0:b5:
80:c0:0d:44:61:54:26:58:a2:48:29:fd:59:5b:96:
b7:16:c3:cc:57:50:8a:86:40:65:95:0b:1d:6e:b6:
06:18:57:2d:0a:4d:13:97:23:1f:5d:84:4f:56:d4:
cc:05:32:93:19:55:54:32:9e:b0:a0:ec:e7:5b:01:
4d:b0:81:99:11:e1:99:29:59:6b:6c:27:86:dc:2d:
ea:10:e7:cc:cf:dc:0e:91:f8:9d:81:48:b2:65:df:
af:ff:69:87:0e:ca:ef:4b:c5:9b:52:40:12:b8:ca:
38:4a:d2:e3:e4:5e:db:de:67:81:48:f5:2c:c8:85:
0b:c0:93:74:d2:d0:33:a7:6d:0a:12:c2:4d:ca:d5:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:7D:75:3E:15:64:C1:71:F4:CB:22:A6:7F:49:6B:8B:7E:47:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
96.126.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:6f:de:26:94:b0:52:dd:3a:5c:67:2c:3e:84:a2:0a:35:b2:
69:c2:67:00:ed:ba:29:c7:fd:81:32:d3:c3:94:9b:5a:32:3c:
77:68:40:54:ac:47:49:c8:52:89:68:f4:dc:8d:a4:b2:ec:2d:
9f:65:c6:35:51:a8:a7:48:1a:c5:0c:dc:56:c2:40:82:d2:d0:
1d:ed:71:93:0b:c7:c4:0f:30:80:36:a1:4f:13:a8:3e:59:68:
bb:98:e7:51:ce:0e:27:3d:cd:7f:52:e0:5d:16:30:9f:3d:01:
3d:bb:37:b2:55:2c:3b:1b:ae:b9:53:f1:ac:07:ba:3f:ac:4d:
48:66:ad:c5:62:36:31:33:37:94:cf:c0:58:3d:28:90:d0:ba:
45:f0:13:c3:58:6a:4b:90:77:47:a0:52:7d:67:7d:11:6e:9a:
ff:0d:45:c8:ba:03:e5:52:78:04:67:0d:f1:5c:3c:68:49:42:
6d:b1:a8:bc:ca:6a:b2:ac:ea:4d:83:57:78:d7:33:c5:a1:95:
d2:fc:d5:93:e5:8a:38:83:d0:b3:c3:da:02:22:80:22:3e:1d:
87:f1:4b:d9:3c:af:a1:30:83:e6:5d:75:a8:d1:ab:53:f3:18:
23:35:7b:b6:a1:65:92:5c:c4:cf:3c:69:20:36:42:98:c8:1c:
9a:7d:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:46:40 2025 by rpki-client