Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9ab06e5f-8fa4-3b71-b2a8-971a08e4113e.roa
File: 9ab06e5f-8fa4-3b71-b2a8-971a08e4113e.roa (raw, json)
Hash identifier: ykPcSiyH2Edj2L0ZGUQgqwfugM4TZdeIJNe4NtXbDds=
Subject key identifier: BA:16:67:02:77:41:F5:35:4C:FE:B7:68:86:C6:71:9F:9C:8B:8E:79
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858480BDA5F7BED54505AC700BB4E
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9ab06e5f-8fa4-3b71-b2a8-971a08e4113e.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 8100
IP address blocks: 198.55.96.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:5f:7b:ed:54:50:5a:c7:00:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=eca9f591-055b-4cd5-a3c6-399b87da0ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:2e:a3:e0:67:94:cc:09:f6:a1:4a:fb:57:
66:da:79:b1:ce:6c:e1:66:94:e9:78:f2:cb:de:17:
54:3a:47:36:a5:1f:f6:c5:78:5c:75:26:71:56:78:
2b:e7:a5:5e:5c:e9:eb:cb:9c:35:97:ad:38:52:f4:
a5:1c:0d:5a:68:51:7e:56:f9:40:39:d8:af:cb:5c:
33:46:08:45:78:f9:0d:24:2f:d5:bb:3a:e2:2d:22:
a0:1c:55:ed:c9:24:e6:e1:f0:e6:91:fd:65:30:62:
f6:88:8e:04:d1:85:6a:9d:67:c2:d8:24:89:50:5d:
59:e5:85:dd:40:81:cc:4b:d0:2f:87:f8:26:63:a6:
18:03:b7:8d:64:3c:95:d1:59:72:87:c4:8f:e1:f1:
c6:82:50:1a:4d:8c:1c:48:ba:2e:0c:fa:b6:11:78:
0d:f0:16:50:f6:bb:df:a1:93:4a:4e:23:7a:f3:c6:
13:46:6d:fa:7e:ef:66:b0:63:6b:64:a6:1f:43:d3:
80:29:ab:ad:04:13:29:62:92:31:4f:1e:54:51:c9:
10:08:66:3c:5f:8c:ab:8b:cd:3d:21:cf:08:1e:49:
d2:14:9c:c2:66:28:31:d2:5f:28:23:ea:4e:4d:62:
bb:0b:d0:1b:03:39:b0:f6:ab:c5:f1:34:b0:6e:1b:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:67:02:77:41:F5:35:4C:FE:B7:68:86:C6:71:9F:9C:8B:8E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9ab06e5f-8fa4-3b71-b2a8-971a08e4113e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.55.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:89:e1:99:7e:09:c8:f9:ad:21:ef:0e:b2:ac:d0:a1:47:e8:
9a:86:31:1f:d6:49:e6:e3:3c:3f:91:64:60:66:a8:65:8a:43:
c9:73:b4:79:36:78:2a:57:7a:41:84:93:ef:8c:82:db:51:b7:
a9:ea:cc:6c:02:39:32:0f:8c:ea:12:d8:97:7d:c5:5a:69:4b:
bd:5b:13:42:9a:6c:e5:b8:04:4a:c3:76:63:d5:a9:67:96:7e:
e6:54:9c:70:b9:37:44:5d:f1:c2:5f:06:80:11:17:b9:2b:2e:
10:8c:b5:05:f2:dc:e2:45:18:a0:5e:47:30:0f:77:40:99:9a:
22:83:54:1a:7c:67:e9:e8:65:9a:c5:6f:1e:76:83:d6:63:7f:
b4:9b:89:72:6f:6e:04:c3:75:38:de:b2:5f:a4:43:55:e8:85:
65:e2:14:ba:8d:6d:ad:a2:e4:e2:ba:f1:cb:c5:92:0c:94:ea:
cc:84:07:7c:0a:f3:a8:15:60:a4:2e:59:7d:42:8e:2b:e4:a6:
6d:20:77:bc:13:cb:73:cc:3f:14:5b:e1:87:19:9f:9d:d4:44:
f7:87:d7:a2:d8:df:23:a2:91:8e:13:b4:6e:c3:9e:b3:6b:47:
6f:66:9a:43:f0:12:f3:77:bb:50:78:7f:3c:dc:46:44:dd:ba:
91:5e:8c:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2l977VRQWscAu04wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
ZWNhOWY1OTEtMDU1Yi00Y2Q1LWEzYzYtMzk5Yjg3ZGEwY2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnikuo+BnlMwJ9qFK+1dm2nmxzmzhZpTpePLL
3hdUOkc2pR/2xXhcdSZxVngr56VeXOnry5w1l604UvSlHA1aaFF+VvlAOdivy1wz
RghFePkNJC/VuzriLSKgHFXtySTm4fDmkf1lMGL2iI4E0YVqnWfC2CSJUF1Z5YXd
QIHMS9Avh/gmY6YYA7eNZDyV0Vlyh8SP4fHGglAaTYwcSLouDPq2EXgN8BZQ9rvf
oZNKTiN688YTRm36fu9msGNrZKYfQ9OAKautBBMpYpIxTx5UUckQCGY8X4yri809
Ic8IHknSFJzCZigx0l8oI+pOTWK7C9AbAzmw9qvF8TSwbhsCRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoWZwJ3QfU1TP63aIbGcZ+ci455MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvOWFiMDZlNWYtOGZhNC0z
YjcxLWIyYTgtOTcxYTA4ZTQxMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHeJ4Zl+Ccj5rSHvDrKs0KFH6JqGMR/WSebjPD+RZGBmqGWKQ8lztHk2
eCpXekGEk++MgttRt6nqzGwCOTIPjOoS2Jd9xVppS71bE0KabOW4BErDdmPVqWeW
fuZUnHC5N0Rd8cJfBoARF7krLhCMtQXy3OJFGKBeRzAPd0CZmiKDVBp8Z+noZZrF
bx52g9Zjf7SbiXJvbgTDdTjesl+kQ1XohWXiFLqNba2i5OK68cvFkgyU6syEB3wK
86gVYKQuWX1Cjivkpm0gd7wTy3PMPxRb4YcZn53URPeH16LY3yOikY4TtG7DnrNr
R29mmkPwEvN3u1B4fzzcRkTdupFejA0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:41 2025 by rpki-client