Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/48a3e361-56da-39dd-ad11-f7cdbbe33edd.roa
File: 48a3e361-56da-39dd-ad11-f7cdbbe33edd.roa (raw, json)
Hash identifier: 2dCg9vWnsYMeLT3vHyjA14umT6GAH6zeR3u2kIoDFLw=
Subject key identifier: B7:25:D7:21:22:16:BE:9D:60:CE:C4:8A:9E:6E:5B:21:A2:35:E7:B6
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858480EA5049C313FBA704BB27600
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/48a3e361-56da-39dd-ad11-f7cdbbe33edd.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 8100
IP address blocks: 198.55.116.0/22 maxlen: 24
198.55.124.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:04:9c:31:3f:ba:70:4b:b2:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=32caae7e-f544-416b-946a-42afe3cd11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:e0:f5:7f:d8:59:68:be:3f:78:16:e2:17:
80:c6:2f:57:88:e3:a2:70:c3:af:5c:dc:74:0c:5e:
f4:b9:22:87:e6:a9:0b:29:54:54:e1:10:82:2a:fa:
27:d1:d0:f6:f7:ad:0c:c5:f9:d1:98:83:d7:ee:b2:
8f:c1:00:3c:a4:58:1a:0d:4a:e4:e6:83:fb:70:53:
fe:8b:76:d0:d3:3d:b4:21:d8:19:af:73:47:dc:ec:
c9:37:e9:3d:02:33:c8:68:bb:d8:69:48:ca:1b:0e:
16:7f:b5:7a:0b:64:09:c4:9e:3c:e2:da:05:0f:ac:
59:63:63:03:4e:95:2b:e2:86:60:4f:7c:5e:72:63:
51:df:4b:f6:dc:39:3d:15:b5:69:42:b8:0a:b9:41:
47:9b:75:f5:fb:b9:d6:5f:62:45:d2:bc:e0:dd:1a:
22:fe:bd:68:fe:34:9c:dd:44:28:5e:c7:24:82:d6:
59:c6:1c:40:3f:65:b5:15:1e:c6:d3:5c:53:22:86:
b8:46:6b:06:88:16:6b:68:87:6b:43:48:2f:1a:61:
ba:1e:ad:43:f5:2d:82:d9:43:b5:07:42:d6:4c:a4:
ac:89:bf:fc:f4:c7:d5:fc:55:ac:2d:54:4c:38:73:
b3:46:12:23:05:da:e3:0e:0d:4f:0e:25:5c:54:73:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:D7:21:22:16:BE:9D:60:CE:C4:8A:9E:6E:5B:21:A2:35:E7:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/48a3e361-56da-39dd-ad11-f7cdbbe33edd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.55.116.0/22
198.55.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:5f:f5:d1:31:dd:e7:e3:35:50:64:72:75:e0:b2:aa:9b:6f:
66:fa:4d:d9:f9:13:e6:b0:04:5f:cb:8e:08:f0:aa:c9:25:e0:
f6:fd:f2:1c:b3:ab:ea:1c:9a:6c:11:ad:d1:8a:09:93:9f:50:
a4:cc:98:1d:fc:f1:b6:83:ea:46:25:f2:11:7a:d4:c4:e0:d9:
b0:50:d2:74:5a:4f:a9:b5:41:72:10:a7:d1:e8:50:06:73:a2:
8c:67:d1:7e:dd:e1:af:ab:b1:7b:29:53:aa:d5:e0:dd:e4:16:
df:20:53:03:3c:e2:a6:01:ae:76:d6:20:bc:64:ea:29:c0:c0:
70:98:f4:46:a2:8e:e2:8c:3c:f3:e1:bf:ac:aa:8e:80:eb:77:
00:a7:80:a4:93:c5:69:7d:1b:d2:b8:b1:77:ea:f8:b6:72:b2:
ee:9c:54:fd:86:39:0c:23:33:f4:55:d0:c6:83:cf:0a:51:eb:
c4:6b:9e:28:42:a0:2b:7f:1f:d9:ad:4f:0d:6e:97:47:1c:d5:
2c:c7:51:89:81:c2:50:33:5f:4d:4d:7e:da:d9:1f:b1:f5:0d:
d7:b9:69:ed:40:ed:46:77:73:6d:9b:be:65:32:e8:d0:04:7e:
3c:f1:7f:5b:42:15:51:8f:62:3f:da:6b:4f:aa:ea:ab:70:d9:
61:7d:60:9c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgOpQScMT+6cEuydgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
MzJjYWFlN2UtZjU0NC00MTZiLTk0NmEtNDJhZmUzY2QxMWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgzg9X/YWWi+P3gW4heAxi9XiOOicMOvXNx0
DF70uSKH5qkLKVRU4RCCKvon0dD2960MxfnRmIPX7rKPwQA8pFgaDUrk5oP7cFP+
i3bQ0z20IdgZr3NH3OzJN+k9AjPIaLvYaUjKGw4Wf7V6C2QJxJ484toFD6xZY2MD
TpUr4oZgT3xecmNR30v23Dk9FbVpQrgKuUFHm3X1+7nWX2JF0rzg3Roi/r1o/jSc
3UQoXsckgtZZxhxAP2W1FR7G01xTIoa4RmsGiBZraIdrQ0gvGmG6Hq1D9S2C2UO1
B0LWTKSsib/89MfV/FWsLVRMOHOzRhIjBdrjDg1PDiVcVHO8qwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLcl1yEiFr6dYM7Eip5uWyGiNee2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvNDhhM2UzNjEtNTZkYS0z
OWRkLWFkMTEtZjdjZGJiZTMzZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCxjd0AwQC
xjd8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGBf9dEx3efjNVBkcnXgsqqbb2b6Tdn5E+awBF/Ljgjwqskl
4Pb98hyzq+ocmmwRrdGKCZOfUKTMmB388baD6kYl8hF61MTg2bBQ0nRaT6m1QXIQ
p9HoUAZzooxn0X7d4a+rsXspU6rV4N3kFt8gUwM84qYBrnbWILxk6inAwHCY9Eai
juKMPPPhv6yqjoDrdwCngKSTxWl9G9K4sXfq+LZysu6cVP2GOQwjM/RV0MaDzwpR
68RrnihCoCt/H9mtTw1ul0cc1SzHUYmBwlAzX01NftrZH7H1Dde5ae1A7UZ3c22b
vmUy6NAEfjzxf1tCFVGPYj/aa0+q6qtw2WF9YJw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:42:24 2025 by rpki-client