Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/00ed92f6-0bb2-36f1-9f9b-0f394602f532.roa
File: 00ed92f6-0bb2-36f1-9f9b-0f394602f532.roa (raw, json)
Hash identifier: hsgLIs/G6OdDEQyE0Z2CZ+6u49qAz8OF9YP3Pqo2h6E=
Subject key identifier: 11:7A:BD:8E:81:9C:76:70:EE:85:84:10:27:22:1F:DD:0A:55:8B:F5
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858488B5B52C28DF001662ED8FEF0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/00ed92f6-0bb2-36f1-9f9b-0f394602f532.roa
Signing time: Tue 14 Jan 2025 18:08:15 +0000
ROA not before: Tue 14 Jan 2025 18:08:15 +0000
ROA not after: Mon 14 Apr 2025 17:08:15 +0000
asID: 8100
IP address blocks: 155.94.216.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:5b:52:c2:8d:f0:01:66:2e:d8:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 14 18:08:15 2025 GMT
Not After : Apr 14 17:08:15 2025 GMT
Subject: CN=b085cec0-47c1-4329-b4b3-7c7da7d23372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:df:05:f2:09:bf:9f:59:58:cf:ad:4c:7d:
36:a5:93:c0:74:98:d8:6d:98:d3:84:37:75:6c:fe:
e0:6d:74:4f:9c:1a:bb:6c:ca:19:18:ee:ad:2d:2c:
f0:f6:84:ca:58:f8:68:be:bf:ee:a4:e6:8d:2f:79:
2a:d3:37:10:01:b0:b7:39:4f:76:a0:04:2d:fd:d8:
fd:ee:08:da:f4:1f:56:05:8b:f1:91:2b:97:92:e5:
18:fd:d8:3e:10:1f:66:6a:39:b5:b2:89:d4:bf:9f:
51:19:72:30:42:b2:13:5a:5a:4e:49:4a:ea:ad:a0:
17:e9:0b:46:f1:72:e0:ce:79:ce:0d:38:ab:a5:5c:
1d:eb:72:ef:6a:d5:67:c4:fb:ee:74:ad:09:6c:ba:
bf:35:56:6a:8c:44:eb:2a:4c:10:27:1f:b1:3e:5d:
27:a0:f6:9e:a6:01:e0:aa:ca:14:a9:4c:1a:99:f0:
84:13:70:04:9b:f6:c4:0b:50:c7:2a:ce:e2:cf:22:
0d:4d:92:28:42:af:53:a8:49:9c:b5:b4:da:04:1e:
5a:97:2d:f3:07:1e:7d:ff:c0:a2:8b:40:16:9d:7a:
3d:14:b7:38:fc:ac:69:ea:25:de:eb:04:f7:65:38:
da:16:28:78:51:47:81:08:83:18:ee:5c:fb:fc:2a:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:BD:8E:81:9C:76:70:EE:85:84:10:27:22:1F:DD:0A:55:8B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/00ed92f6-0bb2-36f1-9f9b-0f394602f532.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:db:d9:0c:56:e8:e0:16:e6:91:dc:45:e1:43:a4:46:cd:f5:
62:65:41:9a:19:82:6d:56:7c:ae:98:b1:a6:8b:f3:1d:07:98:
a9:ad:56:1a:91:ff:02:5c:ce:56:23:89:2d:f2:3e:23:68:9a:
7d:6b:ef:cb:72:62:b8:6a:72:19:58:fe:bc:51:59:8a:61:cd:
03:81:b3:ad:18:79:ed:02:82:66:34:b5:bc:c8:5d:0d:c0:09:
9a:be:e2:74:0d:7f:aa:0d:af:ea:76:12:2c:80:2c:70:57:c2:
c7:24:7b:3c:1a:d8:a5:f1:47:f7:89:ca:ef:03:ea:b2:e0:61:
70:64:36:14:35:d3:68:3a:f6:69:67:50:38:5e:fd:90:94:5d:
a9:52:fe:0f:30:7f:ae:8c:7c:ab:d2:aa:02:b7:45:50:05:03:
66:8a:8b:c5:ad:4e:62:e7:06:64:17:8e:24:09:45:23:19:1a:
3d:69:16:77:69:35:ab:85:99:ac:95:f8:15:61:94:5b:21:f8:
14:3c:ca:17:d7:c2:d5:1e:04:98:a8:da:9c:7d:82:bd:9a:d3:
65:78:15:07:43:aa:c6:c3:72:9f:75:31:42:1d:8b:d1:55:17:
1e:ae:5d:a2:44:0c:e7:a7:e0:d6:9a:0d:08:74:1f:43:a3:3a:
8e:bd:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:00:32 2025 by rpki-client