Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/28f25892-51a6-3f63-92fc-b32b3c8570ad.roa
File: 28f25892-51a6-3f63-92fc-b32b3c8570ad.roa (raw, json)
Hash identifier: Z7PZgExNQXdXwphTyQsr6ra55XxVeEGhVNCTtYoYYyU=
Subject key identifier: D3:81:54:BD:97:4C:77:80:F6:F6:D5:D7:F1:C0:CD:93:27:8D:D2:FE
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F4328584871C07213074D7B1A4E9F1D80
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/28f25892-51a6-3f63-92fc-b32b3c8570ad.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 20068
IP address blocks: 104.223.44.0/24 maxlen: 24
155.94.253.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:72:13:07:4d:7b:1a:4e:9f:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=30374774-f1c5-492f-8cc6-510f118bca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:0f:92:48:5e:96:bf:9b:53:51:58:3f:5b:
cc:4e:7b:8a:b3:2f:60:d1:60:6c:b1:f9:cf:81:7c:
93:c6:3f:20:19:c0:8d:39:4e:ab:a7:fc:de:07:fb:
d8:f9:66:a9:47:fd:28:28:c3:b6:9a:d4:1d:b5:8a:
59:cb:b4:83:12:34:d9:f4:e6:8d:8d:2d:ab:eb:01:
63:9a:a8:86:8f:24:52:de:18:31:a2:42:36:c7:e2:
b4:13:00:13:4f:ff:c8:34:61:30:71:a3:17:5b:09:
0d:1f:2f:2b:72:d7:46:c3:eb:60:c8:39:43:c3:eb:
31:b5:5e:64:44:78:cf:63:70:28:e4:81:07:f9:21:
9c:dd:b3:09:2c:ad:b2:56:f5:24:99:fd:c1:c2:f3:
94:f3:14:09:c9:4f:63:fb:2d:f6:cc:05:c4:1f:83:
1b:a9:17:16:40:82:1a:1c:54:5b:9b:46:94:8a:8d:
f1:fe:21:6f:ee:ac:10:f7:e1:28:d6:9b:cd:16:47:
aa:98:20:54:9a:2a:f0:b9:25:47:67:b7:cf:41:2a:
2f:0b:85:93:e5:26:2d:f3:7c:bb:93:8f:20:f4:7b:
bf:69:95:06:ed:56:ce:3e:ad:96:43:fa:db:88:c4:
c7:65:ce:2c:72:48:0c:56:e4:f1:3d:8b:3d:1e:43:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:54:BD:97:4C:77:80:F6:F6:D5:D7:F1:C0:CD:93:27:8D:D2:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/28f25892-51a6-3f63-92fc-b32b3c8570ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.223.44.0/24
155.94.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:11:a5:6c:69:d5:93:23:f7:50:55:e3:f2:a4:c9:95:23:ff:
48:ea:03:44:9d:09:46:92:12:a5:ef:b6:30:cb:5b:a9:45:11:
7f:ba:90:94:b3:32:4e:11:33:3c:a2:4e:7a:ee:51:c3:43:69:
21:68:4c:df:75:af:5d:4c:03:fe:88:3b:9c:33:70:82:66:7d:
7a:8e:e8:a0:c8:e2:9b:84:81:3a:f3:d3:54:11:cf:0d:fc:9b:
56:ed:e0:b7:fc:c5:ee:e9:e1:34:ed:0a:34:c4:06:69:b8:b6:
7f:a4:f5:db:71:96:fb:f4:7e:79:76:0b:8b:20:92:20:be:b7:
91:1b:6a:05:50:a9:c8:ab:e1:3e:0e:c8:6b:db:fa:bc:ef:e2:
f0:4f:79:60:0e:9f:b7:00:37:d6:de:95:bb:41:db:b0:03:42:
67:84:fb:80:f2:e2:e0:eb:06:b4:fb:dd:67:a0:ee:47:38:08:
c8:e7:e0:a5:97:63:f8:34:7a:09:d7:87:6a:0f:1a:44:41:57:
01:29:cd:f4:8a:60:f4:6a:26:dc:41:da:7f:a3:a3:a1:da:32:
db:36:2f:eb:bc:37:48:3c:7b:55:a8:42:eb:33:cc:c5:2d:5e:
7d:9e:d8:32:bf:c7:ec:2b:64:f8:e9:26:7b:8a:b2:5e:51:df:
05:e9:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:51:42 2025 by rpki-client