Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/065aa61f-4448-3fb9-9d87-9581d9e43b6c.roa
File: 065aa61f-4448-3fb9-9d87-9581d9e43b6c.roa (raw, json)
Hash identifier: oaUlGlb7/6JjK0U1CQHmAmYATw3PvjMqONZ8r39p4Jo=
Subject key identifier: AB:39:B3:D6:BB:C7:BF:ED:7E:B0:30:1E:F7:99:95:50:F2:0A:E7:C5
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285848A503840A29BD481A68472AE0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/065aa61f-4448-3fb9-9d87-9581d9e43b6c.roa
Signing time: Thu 23 Jan 2025 22:42:21 +0000
ROA not before: Thu 23 Jan 2025 22:42:21 +0000
ROA not after: Wed 23 Apr 2025 21:42:21 +0000
asID: 36352
IP address blocks: 69.12.67.0/24 maxlen: 24
69.12.70.0/24 maxlen: 24
69.12.74.0/24 maxlen: 24
69.12.79.0/24 maxlen: 24
69.12.85.0/24 maxlen: 24
69.12.89.0/24 maxlen: 24
69.12.92.0/24 maxlen: 24
72.11.130.0/24 maxlen: 24
72.11.133.0/24 maxlen: 24
72.11.134.0/24 maxlen: 24
72.11.140.0/24 maxlen: 24
72.11.141.0/24 maxlen: 24
96.44.140.0/24 maxlen: 24
96.44.141.0/24 maxlen: 24
96.44.149.0/24 maxlen: 24
96.44.153.0/24 maxlen: 24
96.44.156.0/24 maxlen: 24
96.44.157.0/24 maxlen: 24
96.44.158.0/24 maxlen: 24
96.44.160.0/24 maxlen: 24
96.44.164.0/24 maxlen: 24
96.44.165.0/24 maxlen: 24
96.44.172.0/24 maxlen: 24
96.44.173.0/24 maxlen: 24
96.44.177.0/24 maxlen: 24
96.44.178.0/24 maxlen: 24
96.44.179.0/24 maxlen: 24
96.44.182.0/24 maxlen: 24
96.44.184.0/24 maxlen: 24
96.47.229.0/24 maxlen: 24
98.143.144.0/24 maxlen: 24
98.143.158.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:03:84:0a:29:bd:48:1a:68:47:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 23 22:42:21 2025 GMT
Not After : Apr 23 21:42:21 2025 GMT
Subject: CN=094c21e9-24fe-4c5d-9fd9-bc5fa628eab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:58:49:34:10:48:02:90:73:42:8f:da:a3:
b5:91:be:ce:a7:f2:81:09:08:f2:41:7a:f3:a7:4b:
f2:18:71:e5:89:96:4f:cb:d7:b5:eb:02:6b:65:d0:
fe:25:24:8d:58:66:9a:11:44:4e:97:e6:a5:a3:1d:
c1:fe:bc:88:54:bf:43:1c:18:7c:d2:96:31:ac:1d:
48:46:a7:8b:90:65:cb:0b:28:93:0c:3b:2f:8a:51:
7e:4a:f8:2f:97:b4:03:ab:21:9b:16:e3:8a:3a:3a:
ea:bf:a9:00:00:4f:66:e7:2c:27:9e:76:96:5b:27:
48:9b:b9:5a:2b:94:5d:8c:34:7b:ca:67:4c:19:a9:
c1:95:aa:41:0d:df:43:cb:78:d4:b3:a3:1e:4a:17:
f9:47:2a:1b:cf:f2:b3:ff:08:96:37:c5:2a:1b:16:
07:4e:99:3f:39:de:16:48:1a:6e:2c:21:d7:04:42:
c4:f2:25:42:fc:3f:d0:b9:1f:a9:81:09:29:49:a8:
6b:9e:6a:81:15:75:e6:15:fe:4b:ba:15:57:90:a3:
cc:6f:07:47:9e:91:2a:77:a1:65:ee:ec:8a:c7:09:
13:4b:2c:0a:8d:d6:bc:90:7c:f8:00:a9:64:63:2d:
5e:fb:91:0d:be:57:56:22:7a:f7:e2:42:45:b8:3a:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:B3:D6:BB:C7:BF:ED:7E:B0:30:1E:F7:99:95:50:F2:0A:E7:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/065aa61f-4448-3fb9-9d87-9581d9e43b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
69.12.67.0/24
69.12.70.0/24
69.12.74.0/24
69.12.79.0/24
69.12.85.0/24
69.12.89.0/24
69.12.92.0/24
72.11.130.0/24
72.11.133.0-72.11.134.255
72.11.140.0/23
96.44.140.0/23
96.44.149.0/24
96.44.153.0/24
96.44.156.0-96.44.158.255
96.44.160.0/24
96.44.164.0/23
96.44.172.0/23
96.44.177.0-96.44.179.255
96.44.182.0/24
96.44.184.0/24
96.47.229.0/24
98.143.144.0/24
98.143.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:09:50:1c:49:03:b5:2e:bb:5f:3a:4b:ea:27:f1:e3:2e:ec:
57:e6:47:ad:5a:e1:1e:eb:cf:4b:78:ab:22:18:ca:f6:38:7f:
44:57:bc:89:a9:1e:ba:e3:19:5b:a1:71:70:d7:30:ec:fb:c3:
eb:be:03:2d:69:dd:5b:14:48:c9:fd:d7:59:35:2e:58:eb:60:
af:fd:4c:d3:b0:54:77:1b:4a:26:95:2c:88:91:4a:12:05:6f:
27:e7:93:e9:82:6c:12:07:99:d2:20:c9:cf:a5:0f:41:fc:11:
66:c5:8f:ad:0a:87:2e:52:ce:96:1c:0e:26:b2:65:d1:f8:0d:
bc:7e:5c:93:3a:eb:00:e4:89:11:e1:83:b2:04:11:01:cd:46:
0b:b5:f4:81:70:92:07:fc:92:66:56:f8:3d:fa:8a:bb:13:7a:
94:d5:00:af:08:39:85:fa:ba:4a:ca:4a:29:39:c5:3f:37:33:
14:02:04:71:49:1d:70:36:d9:c8:d0:ec:d8:13:10:17:68:f5:
8e:46:1c:d1:55:f9:fb:e0:95:29:e2:ed:29:a6:68:0a:ab:48:
4c:76:f4:a3:a1:b2:1b:7e:97:52:a3:f2:45:32:70:03:7b:3a:
5e:b2:0f:f4:93:55:a1:d7:2d:cd:0a:9e:d1:52:3c:42:0b:94:
29:2e:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:29 2025 by rpki-client