Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9350aa09-cc69-3477-86ef-587b99ff48c9.roa
File: 9350aa09-cc69-3477-86ef-587b99ff48c9.roa (raw, json)
Hash identifier: 56SJJeJAxzCZyJk9mqgDDsu5MgUqd48NLOun2xZwlUM=
Subject key identifier: 62:2E:66:2F:E0:7F:92:20:25:71:1C:62:9D:F5:C3:60:75:63:BC:A6
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858487FEFAF897655B77258855F80
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9350aa09-cc69-3477-86ef-587b99ff48c9.roa
Signing time: Fri 10 Jan 2025 15:57:29 +0000
ROA not before: Fri 10 Jan 2025 15:57:29 +0000
ROA not after: Thu 10 Apr 2025 14:57:29 +0000
asID: 18779
IP address blocks: 23.226.136.0/24 maxlen: 24
23.226.137.0/24 maxlen: 24
72.11.154.0/24 maxlen: 24
155.94.195.0/24 maxlen: 24
173.254.217.0/24 maxlen: 24
173.254.220.0/24 maxlen: 24
204.44.76.0/24 maxlen: 24
204.44.104.0/24 maxlen: 24
204.44.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:ef:af:89:76:55:b7:72:58:85:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 10 15:57:29 2025 GMT
Not After : Apr 10 14:57:29 2025 GMT
Subject: CN=7d0bc405-50d3-4191-8667-5bd13cd60a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:be:d3:ef:07:e3:44:20:e7:11:a3:aa:9d:
fa:a7:2a:5d:46:6b:db:c2:76:e3:e2:bf:d0:55:f5:
af:ae:1b:a2:a5:41:9b:8a:cb:37:fc:d0:de:79:c8:
6a:e7:d7:cf:95:17:87:3b:ff:0d:da:cb:f4:78:8b:
d1:3e:76:fa:79:82:75:34:f1:93:f5:99:58:30:94:
4f:33:0c:87:26:cc:dd:28:e4:9c:ff:f8:5e:76:6c:
ea:1b:23:9e:d2:9a:70:73:24:85:ce:0a:c8:fb:a3:
18:e3:66:d5:22:e9:70:d6:8b:f3:78:81:c6:dd:1d:
74:6c:7a:ef:b0:89:46:0f:e3:88:1a:a6:c2:51:a9:
d2:3e:e4:68:5f:55:95:e8:90:b9:89:0d:8c:3b:90:
8a:2a:8f:71:95:19:5c:92:a2:b1:8b:27:eb:fb:d1:
c8:b0:d9:13:6d:3a:70:90:80:3a:54:77:b3:f0:44:
c6:9d:b7:b5:d3:9c:81:72:53:0d:91:3e:cf:c9:cf:
82:81:c1:99:01:b1:7f:d4:36:e1:91:ab:fd:e4:47:
c9:06:6a:79:cd:a0:ff:54:38:f5:82:ef:1b:cb:9a:
00:a0:fe:7d:20:40:61:c1:29:bd:fa:a4:a9:fd:90:
2b:09:10:95:89:03:2e:56:5a:2e:20:2b:54:0c:92:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:66:2F:E0:7F:92:20:25:71:1C:62:9D:F5:C3:60:75:63:BC:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9350aa09-cc69-3477-86ef-587b99ff48c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.136.0/23
72.11.154.0/24
155.94.195.0/24
173.254.217.0/24
173.254.220.0/24
204.44.76.0/24
204.44.104.0/24
204.44.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:8e:e2:63:39:46:d2:97:ac:61:99:2e:3b:65:7e:f9:cb:7e:
80:c9:34:5c:7b:84:24:0e:87:e6:4e:74:3a:0b:8c:6b:9a:02:
2c:bf:1e:82:2b:e0:61:10:38:ad:b2:86:15:3b:e0:67:55:5a:
42:fd:98:ee:a4:ec:33:be:63:78:69:08:27:f7:ac:e6:7a:d8:
39:64:a3:26:19:7e:96:81:bc:a3:fd:c4:b6:90:f2:f5:aa:9e:
c8:f9:14:9d:49:1c:e9:72:06:4c:0a:04:7f:b0:79:1c:c1:7a:
2d:ad:f1:f9:88:51:05:87:d9:94:b1:e6:a9:93:93:74:75:2e:
c3:c7:e6:1b:11:4d:40:69:01:21:fd:3e:a3:f2:fe:0c:5c:f7:
08:d3:1b:9c:65:d0:ce:51:27:58:2a:b1:07:60:79:a4:a7:85:
6e:a6:9d:a1:ff:02:18:0d:2a:79:dc:d8:19:f7:b3:70:96:39:
19:2d:7c:bb:52:27:2f:79:d6:bd:3d:3b:9e:0b:c2:b2:52:7b:
8e:9d:b1:cc:69:0a:cb:f4:4d:66:08:10:65:a2:0d:cb:bf:1c:
66:e3:ad:37:e6:da:d0:a0:fe:ac:14:e7:8d:14:49:d3:8a:8d:
d8:e2:c6:ae:5f:9a:94:91:92:66:0c:e5:25:fc:f0:cb:73:74:
17:56:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:28 2025 by rpki-client