Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/26c04f57-e822-3c74-8951-0f3e2000c314.roa
File: 26c04f57-e822-3c74-8951-0f3e2000c314.roa (raw, json)
Hash identifier: +ZLAOLezl1gLA2V0XPiNyiAu4Vq84/+nTrghB2JP9G0=
Subject key identifier: BB:DA:E5:C4:47:AD:45:3A:F3:46:40:DC:7A:2C:83:F7:79:82:B8:58
Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Certificate serial: 010D0C9F4328583B9121A3046E06E6D462CF9780
Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/26c04f57-e822-3c74-8951-0f3e2000c314.roa
Signing time: Mon 20 Apr 2020 04:00:00 +0000
ROA not before: Mon 20 Apr 2020 04:00:00 +0000
ROA not after: Mon 15 Jan 2024 05:00:00 +0000
asID: 13911
IP address blocks: 66.51.96.0/20 maxlen: 20
198.161.206.0/24 maxlen: 24
216.194.64.0/20 maxlen: 20
216.234.160.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:91:21:a3:04:6e:06:e6:d4:62:cf:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Validity
Not Before: Apr 20 04:00:00 2020 GMT
Not After : Jan 15 05:00:00 2024 GMT
Subject: CN=20d6784c-3bbd-45ef-aff2-b5325ce6a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:46:72:90:d8:ab:21:a7:83:25:d8:bf:36:
66:a8:de:cf:06:ea:47:be:05:17:af:71:85:9f:ce:
bd:39:55:4b:ab:45:01:6c:c5:10:4d:9a:c6:e0:66:
14:74:33:cd:31:69:e7:d0:90:3e:ac:44:4e:4d:91:
eb:91:08:0a:51:77:6b:ed:aa:e0:33:fb:0f:d2:f4:
20:e0:be:95:3e:5b:55:b2:e3:4c:92:ab:a6:fe:06:
89:27:71:ef:3b:85:7f:a3:9c:56:25:26:0d:45:d4:
29:41:39:ad:b9:c8:14:42:77:ff:9f:7a:a6:1e:8c:
28:34:dd:a0:2c:1e:e2:9b:c7:60:d3:70:ef:5f:62:
a0:42:ca:77:21:df:2b:14:de:ba:4a:e2:e4:9b:5c:
f4:04:3f:c3:88:80:62:f5:33:4e:fe:fe:db:51:1a:
92:24:31:a5:91:f8:21:44:77:b1:ca:b1:4b:99:fa:
19:35:9a:ae:6c:ea:6e:27:27:fc:d3:ca:f7:c2:d1:
c6:04:66:ca:bd:a4:b8:92:33:0f:4f:a1:af:d7:a7:
fa:18:e9:db:35:c0:5d:87:97:2b:b1:c5:59:1d:e1:
4d:01:19:c5:93:fc:33:fc:38:88:32:0c:39:83:22:
aa:41:1e:e5:69:fb:07:d1:8e:74:c7:62:16:42:01:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:E5:C4:47:AD:45:3A:F3:46:40:DC:7A:2C:83:F7:79:82:B8:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/26c04f57-e822-3c74-8951-0f3e2000c314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl
X509v3 Authority Key Identifier:
keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.96.0/20
198.161.206.0/24
216.194.64.0/20
216.234.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:cd:ce:80:6c:b6:18:d7:31:14:59:1d:c9:1e:97:4a:66:75:
9c:49:e2:ae:95:0d:8c:c1:20:ba:e4:80:ba:6c:50:f7:12:bd:
22:27:6e:4f:e2:90:73:19:7c:42:b7:8e:2b:80:24:1e:2e:e8:
58:f9:cb:e4:73:c0:a2:4c:30:5e:b4:dc:f6:79:f5:7d:b5:9c:
42:ad:ca:54:09:5f:cc:a5:a7:6b:65:8e:40:29:35:fb:d2:5c:
f0:e8:7b:91:18:e7:43:32:30:72:84:21:3b:ef:a9:89:3c:a4:
d6:ba:58:0c:2d:cb:c6:99:9a:1a:49:fa:92:b7:92:6c:74:b0:
a7:5d:65:a7:72:1d:59:35:ac:71:25:4b:0c:90:0e:1c:68:b0:
09:53:7a:07:ab:3d:b4:69:e7:29:9a:75:c5:1f:8c:fe:5b:68:
6b:2b:5f:f5:b4:3a:3a:1e:e4:bd:86:9a:83:f7:51:c3:af:a3:
8c:75:1e:cb:ff:b0:c5:cd:ab:f3:89:af:8f:ce:7f:b6:99:b7:
16:95:c4:e5:38:72:dc:f5:f6:37:b5:81:d6:4b:71:b4:78:84:
8d:94:a6:54:e1:31:42:49:fe:c2:c8:08:70:08:78:8b:55:e3:
01:d3:69:48:b3:0d:19:f0:24:91:41:a2:6f:9f:41:1d:ea:b5:
43:07:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:32 2025 by rpki-client