Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/466e2e38-f8a9-3a95-9f33-fefc7aa4ab33.roa
File: 466e2e38-f8a9-3a95-9f33-fefc7aa4ab33.roa (raw, json)
Hash identifier: I5D9UgX41E4zGiBPQrwuU+I63866qOn1eRjTAxtPsG4=
Subject key identifier: EB:3B:F6:EE:A0:14:70:4E:48:25:49:F7:E1:53:58:C5:BA:DD:23:3B
Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Certificate serial: 010D0C9F4328583F2D1E76681E1D1C2F8D0555C0
Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/466e2e38-f8a9-3a95-9f33-fefc7aa4ab33.roa
Signing time: Mon 20 Apr 2020 10:59:58 +0000
ROA not before: Mon 20 Apr 2020 10:59:58 +0000
ROA not after: Wed 11 Dec 2024 05:00:00 +0000
asID: 13911
IP address blocks: 66.51.96.0/20 maxlen: 24
198.161.206.0/24 maxlen: 24
216.194.64.0/20 maxlen: 24
216.234.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2d:1e:76:68:1e:1d:1c:2f:8d:05:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Validity
Not Before: Apr 20 10:59:58 2020 GMT
Not After : Dec 11 05:00:00 2024 GMT
Subject: CN=1dfd5c74-0362-446c-bbd6-3dde23fbd93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:30:ce:b6:e6:8f:8e:96:d8:8d:89:8f:aa:
c9:77:b3:3c:2b:07:d1:96:bd:90:c5:90:2f:ab:dc:
cc:37:f1:9c:c3:2e:af:9d:bc:4c:80:c3:0d:9e:6b:
13:e5:04:3a:41:a1:eb:b7:7b:41:14:34:6d:5f:9b:
9c:16:55:a3:bc:cc:8e:36:bc:94:f4:eb:7f:9f:bc:
4a:45:b4:a2:54:a0:3f:f8:79:d4:03:16:8c:9b:32:
b4:7c:f2:76:aa:59:86:ec:12:a0:b7:4a:1d:a4:bf:
b3:67:2c:9c:f0:25:cd:77:48:07:86:19:36:15:88:
55:84:d2:09:7b:d9:a9:5d:41:c1:8c:ca:c9:f6:c1:
fa:fa:26:e1:87:cc:ae:14:d4:78:9b:ce:73:7e:0e:
94:b6:d2:3e:da:f9:b3:e7:d2:9e:20:9f:2d:39:67:
73:c8:9c:64:f2:c7:b6:bf:c1:42:5b:e4:b3:70:fa:
0a:16:4a:8b:10:91:af:12:56:c0:1e:28:2b:fb:66:
b3:af:3c:6d:c1:0f:e8:a0:ef:e4:ec:f4:7a:e4:05:
1c:61:83:dc:9c:64:3d:65:5f:60:e7:72:5b:1c:b8:
e4:56:f1:c5:38:9e:a7:e8:27:d0:c7:6f:29:5c:43:
57:a5:c9:db:23:21:7d:1e:6b:c7:b0:00:5d:0f:7d:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:F6:EE:A0:14:70:4E:48:25:49:F7:E1:53:58:C5:BA:DD:23:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/466e2e38-f8a9-3a95-9f33-fefc7aa4ab33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl
X509v3 Authority Key Identifier:
keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.96.0/20
198.161.206.0/24
216.194.64.0/20
216.234.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:6f:5a:51:8d:ce:ff:1b:2e:22:57:c8:11:05:4f:e2:2c:40:
90:b5:08:4e:be:5d:8d:d8:35:61:b4:25:96:cc:57:8a:c8:a0:
9f:1f:55:83:9c:be:04:36:6a:9b:93:b1:46:d8:9d:f7:87:82:
90:55:31:3e:a9:4d:23:3c:c1:bf:ae:14:c3:14:f2:53:b8:76:
23:47:bc:4f:d6:ae:d5:f4:53:4c:9b:ae:d8:ff:7d:d1:71:d8:
b6:c6:86:26:d7:8f:aa:cb:c4:a7:8c:89:0e:17:73:4d:8a:8f:
ab:c0:e6:32:27:9d:67:b9:3c:f2:ea:0c:5c:3e:fb:f5:fa:24:
a0:7d:f0:fb:bf:28:a9:f7:b3:4b:94:9e:c3:99:56:37:f2:c2:
b3:3c:cb:7f:71:75:39:4d:cb:c1:4c:ea:2b:df:55:7a:57:13:
f1:88:4a:cb:dd:bd:c2:11:34:4f:49:e5:c7:27:8b:3e:4a:45:
73:d3:48:ff:c0:2a:e3:83:4c:47:bc:43:14:6e:8b:b1:b3:ea:
cf:e7:dc:89:f5:58:ed:1e:47:12:56:18:fa:05:bd:0a:2d:e3:
fc:c7:1d:e0:da:6c:84:83:0b:c8:9b:95:41:30:9e:f7:36:b6:
af:69:65:59:a4:5e:dd:f0:de:4a:c3:e9:cb:75:08:1b:7c:ca:
64:c7:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:18 2025 by rpki-client