Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa
File: 5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa (raw, json)
Hash identifier: UqcIChHKHbaDzaCAeclPD/G8N+mI7oxHzdykxXRET+0=
Subject key identifier: AB:3E:A9:48:EF:4F:E8:D9:0D:72:2A:3F:16:EF:AE:83:19:85:C1:2B
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285848AAFB50218762377FCD3D1F00
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 5650
IP address blocks: 96.44.150.0/24 maxlen: 24
104.223.114.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:50:21:87:62:37:7f:cd:3d:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=589806c3-6cd2-4e50-9628-0c356df4fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:68:de:c3:17:6a:fd:97:5f:a2:62:5b:1a:
66:61:86:d5:ec:5a:bc:40:35:9f:02:30:2a:f9:20:
43:dd:1b:a3:0b:d2:af:ef:f6:18:82:11:42:1c:c0:
47:33:8c:c8:47:bd:74:29:1c:b2:53:63:40:99:ae:
d9:e0:9a:f6:2e:8e:d1:c0:e5:c7:42:28:07:0f:c2:
bd:b9:a1:c7:64:4e:ee:44:29:81:eb:25:60:81:2b:
3f:19:f3:56:f6:0b:62:9a:4c:66:9f:f8:13:a3:03:
7e:e5:4d:4b:52:03:7b:16:dd:cf:44:d8:2b:6d:81:
ae:c2:1e:dd:e9:74:b9:d6:d5:2a:26:d0:0d:0c:47:
ea:65:11:e3:0c:7e:55:99:a7:3d:86:92:9e:1e:55:
2d:64:55:14:36:9c:d5:9b:75:bc:7b:69:c4:a0:18:
34:13:a3:82:12:f9:f5:53:83:21:a5:f6:ad:9a:4f:
8f:00:99:cb:44:71:83:0c:54:22:ff:a7:03:0c:79:
d9:8f:2c:3e:f8:57:27:30:9e:cb:49:55:2a:e2:15:
90:95:37:88:4f:d7:a5:d7:79:f2:17:05:43:1b:29:
d2:c5:90:5d:46:93:95:b6:63:78:07:db:a9:ef:d6:
39:71:96:ce:83:dd:27:fc:65:e2:7e:c2:30:58:4a:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:A9:48:EF:4F:E8:D9:0D:72:2A:3F:16:EF:AE:83:19:85:C1:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/5bea5e50-cbd5-36f0-b6c5-469f7ab50a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
96.44.150.0/24
104.223.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e6:c6:ea:2e:52:ce:3e:1e:d2:3b:9e:f7:84:b7:56:bc:6c:
23:c1:31:f4:61:1b:da:e0:0a:f0:d9:ea:e1:d5:37:80:52:f2:
1a:7e:d3:4e:cc:94:00:3b:37:f4:c9:ac:47:85:16:70:8f:27:
5e:e9:a8:37:5c:22:62:5a:95:6f:72:2c:6a:d9:55:48:4b:49:
84:41:24:60:bd:c9:8c:96:be:d2:f1:38:a9:c0:28:f6:bf:f9:
db:50:3d:99:78:22:3e:86:31:3c:f8:00:d1:55:04:34:e6:8d:
05:6e:c2:e6:ae:93:5b:45:7a:65:d7:c9:02:13:2f:96:29:75:
04:a5:79:ee:a0:48:42:0f:c5:4a:50:ca:4c:41:28:50:99:40:
63:41:e0:e4:b7:83:b3:00:8c:c4:69:88:89:36:ab:b0:16:7e:
a7:48:14:5c:bb:1b:ff:7c:dc:33:95:b7:40:f4:dd:66:6a:85:
83:86:91:0d:08:dd:04:5c:01:4e:56:43:42:4c:32:49:2f:48:
86:5e:48:cf:bb:d6:25:9e:4b:7c:04:05:99:25:0d:17:3b:86:
e3:68:a4:4a:38:72:6e:db:3e:57:19:39:1b:52:b4:56:91:ab:
be:3b:62:3c:4c:38:76:0c:d6:c7:e7:ce:56:9f:9c:b7:89:2b:
dd:23:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:33:56 2025 by rpki-client