Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71469a7c-cce9-3c67-8781-e9643f01b110.roa
File: 71469a7c-cce9-3c67-8781-e9643f01b110.roa (raw, json)
Hash identifier: J2+TWTBeAYlq2GfWS/+232pTS/0SpbkoImrIddyx/GI=
Subject key identifier: 33:3D:EE:8A:BC:11:C9:95:F1:6B:53:EA:C5:39:D1:3B:D1:07:ED:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F57571E9008A9BCEF76E780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71469a7c-cce9-3c67-8781-e9643f01b110.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 198.207.193.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:57:57:1e:90:08:a9:bc:ef:76:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=bc1405c5-fa9b-401e-9c64-0e3d0c4d937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:d9:7c:7f:c0:f5:03:00:e0:72:00:b7:99:
00:09:2f:d3:c3:cb:45:ca:6c:01:52:fd:4f:69:77:
de:23:40:6b:14:c5:09:57:91:b7:06:5d:26:e3:d7:
63:7f:a4:f3:72:c5:4b:20:41:ce:c0:d6:d4:4f:76:
03:76:07:ad:6e:d2:78:1e:53:af:1c:15:ff:80:da:
9e:f6:d4:e3:6a:b2:3b:18:38:c2:3a:f4:26:2c:e0:
a4:1b:7a:77:4a:90:b5:4a:71:33:0a:ee:4d:0f:cb:
49:7f:57:64:53:77:3a:9e:66:2a:10:dd:89:5e:38:
ec:0b:8c:ef:a7:6f:a5:34:ab:25:ef:04:dc:29:ed:
50:49:c2:76:34:36:68:4e:4e:98:94:5e:0e:71:ee:
86:7c:33:f2:37:e3:d9:ab:12:76:2b:d9:b6:55:31:
52:5d:f7:0d:69:12:8e:43:c2:57:7b:6c:74:95:33:
ba:ea:90:b1:4d:c6:92:b6:1c:1b:d7:1f:4a:47:91:
41:7b:96:ba:15:16:49:da:44:70:27:74:24:fe:11:
70:25:66:ef:b0:ab:4a:36:22:f8:38:15:9d:7b:fc:
2f:fc:78:53:0c:1c:5b:af:3d:19:13:13:eb:fb:f3:
7f:bc:ee:b4:20:63:79:75:de:38:e7:bf:94:40:9b:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:EE:8A:BC:11:C9:95:F1:6B:53:EA:C5:39:D1:3B:D1:07:ED:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71469a7c-cce9-3c67-8781-e9643f01b110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.207.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b9:70:34:f7:22:3e:51:4d:a3:11:00:58:87:5b:c2:90:fd:
69:f3:28:50:cf:52:43:84:d3:3f:b9:21:b0:fb:04:47:b4:cb:
e2:dd:b7:f9:e4:3a:fe:98:96:9f:e3:ad:ed:d0:05:1c:3a:16:
7b:ab:f3:5d:eb:64:c4:04:61:31:17:44:13:35:4c:e7:de:e7:
6a:e1:cf:5e:2e:69:cb:31:ff:44:9f:db:03:13:eb:08:2d:22:
b5:89:b1:b5:af:ab:3d:cf:06:5f:0e:f1:10:ad:30:06:79:e7:
0e:cb:3a:66:8a:7d:82:24:36:5d:92:82:11:6d:7f:07:27:07:
2e:bf:e0:80:c8:ab:9b:77:8a:58:ab:22:cb:0c:84:3c:98:ec:
1e:87:42:84:76:7c:df:b2:fe:ea:48:eb:31:7c:0b:7e:c8:84:
11:d4:54:0a:3e:b0:5c:4c:36:9f:17:25:4b:b5:a9:c6:09:5a:
e8:59:80:9e:4e:68:71:10:04:36:e0:ed:e1:ad:1c:b8:3a:db:
57:17:d3:f5:2a:7b:0f:d4:95:99:33:16:d2:fe:69:81:16:16:
40:38:1b:d4:76:67:b1:e8:7d:6c:83:5e:4c:82:39:7c:01:f2:
50:4f:cf:aa:7d:ea:bc:9f:46:b8:cd:6d:62:be:c3:00:55:84:
e1:ed:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:23:39 2025 by rpki-client