Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cedbde89-6a15-38e3-bf7f-d36f0224f462.roa
File: cedbde89-6a15-38e3-bf7f-d36f0224f462.roa (raw, json)
Hash identifier: tG010ByZnB4hEu6g+0YyLIOGBkanVzg2Reli9wRQVB0=
Subject key identifier: D2:04:C8:33:A9:FE:1F:EA:77:79:D3:54:53:46:BD:87:73:FB:D2:E7
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F432858482D5A9251A9172C1D7AB57C5C
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cedbde89-6a15-38e3-bf7f-d36f0224f462.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 215817
IP address blocks: 96.126.71.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:92:51:a9:17:2c:1d:7a:b5:7c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=d83d098f-919e-40dd-a229-b328ed5fafbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:64:23:cd:7f:24:ac:f6:31:79:7a:2c:37:
97:d8:30:4a:cb:76:9b:7b:b5:01:a9:18:55:38:47:
32:32:ed:4e:31:ea:44:1f:90:89:ba:90:cd:d9:ad:
82:78:9a:75:d6:8d:d4:c9:3e:4c:cf:d4:cb:87:00:
c1:a7:06:03:48:74:5a:95:90:06:f1:af:7a:72:08:
e8:39:40:9e:ed:fe:00:3c:5d:07:49:e6:34:e4:a7:
11:6e:5c:57:85:ba:86:d6:98:bf:9f:8a:6f:35:16:
54:9f:ae:af:93:92:73:38:de:b2:52:c1:eb:3f:99:
54:7b:4d:86:3d:dc:4f:85:66:39:1e:09:a3:df:6b:
2e:ee:d4:96:ee:96:ed:7f:46:28:97:09:c4:6f:b9:
fc:a5:fa:6b:e2:bd:b6:48:da:8e:a4:b5:f8:7b:40:
d5:38:a1:ad:69:1b:19:f3:af:be:ea:50:54:5e:2c:
9e:d7:7d:9b:25:75:a3:dd:84:16:54:cd:fe:9f:11:
01:fc:0c:96:68:22:ca:64:e1:d0:52:15:d9:e7:3d:
5c:18:50:ea:df:c5:a6:aa:4d:71:74:3b:fa:c9:99:
9e:ad:29:fb:66:be:2b:6f:83:dd:4c:34:23:ee:1c:
15:22:1c:c5:ec:a9:e6:2f:43:c8:fc:fa:b6:f1:5a:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:C8:33:A9:FE:1F:EA:77:79:D3:54:53:46:BD:87:73:FB:D2:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cedbde89-6a15-38e3-bf7f-d36f0224f462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
96.126.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:02:69:54:19:87:bf:06:87:c8:5b:c2:96:e3:d8:a6:dc:c4:
ef:6b:fe:a6:a3:5a:02:36:c6:53:8f:0d:bb:6a:a7:2d:b3:3a:
a7:88:5b:8e:06:87:d1:fd:99:1b:fb:69:dd:ea:8e:40:b8:2d:
a4:a3:35:f7:7d:8b:78:b4:7d:38:86:20:43:ee:23:10:cc:24:
bf:76:75:80:54:00:17:80:49:63:43:98:bb:0d:c7:38:27:15:
d8:20:72:95:21:57:4b:26:c2:0a:63:06:eb:d7:83:dc:6a:13:
af:ac:0d:6c:d2:50:d9:94:2e:19:55:94:3c:3b:47:c6:4f:ab:
7a:f6:1d:c2:a6:46:1e:90:0d:3d:48:2a:49:bf:2e:6e:8b:56:
2e:6d:6f:27:c6:38:d1:89:ca:95:2e:10:05:ea:14:c7:89:a4:
72:fd:07:0e:36:c7:63:55:43:8a:f1:f0:0d:64:54:0c:e9:5c:
68:d1:f8:f4:ae:0a:3c:b3:a2:f3:06:da:2b:44:a7:92:48:99:
d1:35:a8:8b:08:2f:f7:34:0f:88:bb:0e:95:9b:a5:e3:97:c9:
cf:ef:24:55:23:5c:f8:cd:c6:69:26:e6:16:aa:0d:09:99:e8:
4d:36:be:da:db:65:40:18:78:05:88:13:52:e2:11:bc:b4:52:
c8:c0:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:24:36 2025 by rpki-client