Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bbfed676-88c1-3941-8f6b-adaae3f41d24.roa
File: bbfed676-88c1-3941-8f6b-adaae3f41d24.roa (raw, json)
Hash identifier: 3cIHJkJqnmkuq7XxTEdrPJ7o1/2X/MfYJZUh3KYPfr8=
Subject key identifier: 5D:F5:39:31:C9:64:BF:39:D8:82:F5:C9:84:35:21:5F:67:20:83:97
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F432858486D9047F515F77777581F7864
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bbfed676-88c1-3941-8f6b-adaae3f41d24.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 32780
IP address blocks: 209.126.88.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:47:f5:15:f7:77:77:58:1f:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=4bf1074f-2fe6-4075-ae0d-0404282352aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:96:38:85:13:40:c5:ce:20:5a:98:c6:ae:
7b:61:f6:f5:80:6c:5f:1c:87:f9:d0:ef:33:10:40:
74:37:d9:94:c7:be:46:67:11:88:df:63:38:f3:79:
45:5b:97:5e:5b:de:27:a9:2c:56:46:bb:b9:73:ac:
f6:56:ae:eb:96:5a:da:d4:66:01:bf:9c:5d:8a:79:
8c:d6:52:3d:4d:6d:d0:05:c3:7d:04:11:f8:a9:9a:
f9:55:02:3a:a9:d7:b1:61:72:75:87:84:a2:5e:4f:
5c:b6:30:05:49:ef:3b:62:f5:e1:38:54:21:dd:51:
57:51:49:53:b4:c4:15:eb:6c:ec:ed:f4:f6:cc:48:
55:0b:4e:7b:20:1f:0c:d4:f3:2f:d2:98:0d:f4:59:
dc:48:d4:94:7b:ab:88:e7:4c:d5:b7:09:f7:92:30:
dc:6b:8d:74:45:30:86:08:8d:96:86:cf:09:9e:33:
90:46:a4:92:8d:e4:f4:6f:ba:19:95:0d:3b:6a:3d:
e0:16:7b:50:74:bb:b4:a7:6a:4f:38:fa:aa:7c:79:
1c:67:45:e5:95:47:f1:a4:9b:e6:37:02:b2:6c:e9:
2c:b3:76:15:56:5e:fa:44:2d:09:cd:f6:76:ff:f8:
da:5e:9b:57:3e:d6:8b:63:c6:23:40:37:75:3b:e6:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:39:31:C9:64:BF:39:D8:82:F5:C9:84:35:21:5F:67:20:83:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bbfed676-88c1-3941-8f6b-adaae3f41d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.126.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:2e:3c:de:93:a9:75:2d:96:5b:bf:75:16:16:d0:e9:d2:9b:
20:1b:1e:b9:1c:79:36:89:88:b0:b9:3d:1d:64:3a:8d:8a:ae:
17:c4:31:9f:12:f0:19:65:81:01:4c:50:55:f7:3c:a8:7b:40:
64:3e:1a:1e:b0:74:61:65:01:ce:92:8c:bc:cf:a6:79:07:40:
87:35:1c:b8:14:b6:77:8f:4f:c2:1e:50:ce:88:c1:49:91:32:
fc:7a:c4:9e:ae:4c:e1:88:9b:d7:8b:e4:ec:1d:a8:e8:2d:d2:
26:37:43:cb:07:5a:5f:6b:8b:19:23:10:b7:4e:47:c2:e1:9b:
91:9b:27:9e:42:37:d2:b6:b1:4c:fa:b6:5c:50:07:54:dc:4a:
98:ea:2e:2f:3f:0a:15:8c:bb:3b:02:51:c1:c6:0c:a7:ef:0a:
99:b7:67:66:49:f4:ec:a2:df:e3:4d:04:1b:d2:17:f0:53:75:
82:21:92:de:af:88:78:cd:4f:d1:0d:28:23:24:45:e4:c4:7e:
4e:ba:fb:c5:be:77:16:ab:ee:96:e7:df:76:89:bf:63:c0:18:
1f:bb:c6:b6:d3:98:bb:8b:26:90:1b:04:21:82:d9:f1:6e:c9:
e3:f9:45:9f:5c:ba:72:52:88:7c:29:36:e2:2d:24:a2:e3:c4:
b6:fd:b9:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkEf1Ffd3d1gfeGQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGJmMTA3NGYtMmZlNi00MDc1LWFlMGQtMDQwNDI4MjM1MmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZGWOIUTQMXOIFqYxq57Yfb1gGxfHIf50O8z
EEB0N9mUx75GZxGI32M483lFW5deW94nqSxWRru5c6z2Vq7rllra1GYBv5xdinmM
1lI9TW3QBcN9BBH4qZr5VQI6qdexYXJ1h4SiXk9ctjAFSe87YvXhOFQh3VFXUUlT
tMQV62zs7fT2zEhVC057IB8M1PMv0pgN9FncSNSUe6uI50zVtwn3kjDca410RTCG
CI2Whs8JnjOQRqSSjeT0b7oZlQ07aj3gFntQdLu0p2pPOPqqfHkcZ0XllUfxpJvm
NwKybOkss3YVVl76RC0JzfZ2//jaXptXPtaLY8YjQDd1O+b0eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF31OTHJZL852IL1yYQ1IV9nIIOXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvYmJmZWQ2NzYtODhjMS0z
OTQxLThmNmItYWRhYWUzZjQxZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X5YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8uPN6TqXUtllu/dRYW0OnSmyAbHrkceTaJiLC5PR1kOo2KrhfEMZ8S
8BllgQFMUFX3PKh7QGQ+Gh6wdGFlAc6SjLzPpnkHQIc1HLgUtnePT8IeUM6IwUmR
Mvx6xJ6uTOGIm9eL5OwdqOgt0iY3Q8sHWl9rixkjELdOR8Lhm5GbJ55CN9K2sUz6
tlxQB1TcSpjqLi8/ChWMuzsCUcHGDKfvCpm3Z2ZJ9Oyi3+NNBBvSF/BTdYIhkt6v
iHjNT9ENKCMkReTEfk66+8W+dxar7pbn33aJv2PAGB+7xrbTmLuLJpAbBCGC2fFu
yeP5RZ9cunJSiHwpNuItJKLjxLb9uWM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:58 2025 by rpki-client