Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ceb2d99-5c2c-322a-9557-07af6f337bbb.roa
File: 0ceb2d99-5c2c-322a-9557-07af6f337bbb.roa (raw, json)
Hash identifier: /wY2IVCmZ8fugMGKI/Z1jE0oogC/W3rRiMSGrhWY+uY=
Subject key identifier: 51:CB:53:68:9B:74:42:8C:CB:3D:42:3A:0F:3A:EF:2F:06:BF:08:7E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841856B59ED5D32E6C0D4E03600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ceb2d99-5c2c-322a-9557-07af6f337bbb.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Mon 14 Jul 2025 04:00:00 +0000
asID: 138687
IP address blocks: 142.111.173.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:85:6b:59:ed:5d:32:e6:c0:d4:e0:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 14 04:00:00 2025 GMT
Subject: CN=02300b1f-76ed-4821-a1f4-a5c7588b4022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:71:47:cd:8c:50:96:c3:53:b1:4e:eb:03:
cd:f4:2a:6c:ea:91:53:f4:91:26:22:f6:b1:07:96:
e4:c4:cf:aa:e6:e3:28:d8:2d:58:c0:d1:6b:82:42:
8f:5a:d0:74:75:78:bb:c2:a8:68:d0:6f:7f:fa:cf:
39:79:37:2f:8f:65:69:58:f6:f1:7a:76:06:b7:3e:
7d:36:86:a1:5e:bd:dd:e7:3c:aa:7c:2f:2e:fc:db:
4d:41:bd:d6:ba:f0:5d:5f:05:9b:26:9b:ca:ca:15:
6c:36:c0:d7:ff:7d:3b:34:22:cd:81:ce:fe:63:1f:
f7:42:93:b9:9e:be:05:8a:67:37:68:04:f7:ca:e7:
06:35:94:e3:e0:bb:41:cd:46:83:3a:c0:24:4e:18:
1e:38:f5:2b:35:e3:5e:b6:c1:20:d1:7e:ab:e9:31:
7c:1c:c5:40:d8:74:4c:80:f0:a3:2c:9c:62:d2:8b:
3d:ae:2f:fa:2e:8f:10:54:ea:24:a8:d6:8b:3a:0e:
bc:80:88:a0:86:de:46:e0:74:36:a4:6d:7f:dd:54:
81:a0:2b:a8:02:0f:d4:f0:1e:2a:3f:f7:1a:b1:4b:
81:2c:c0:2a:ff:14:5f:6f:7c:2e:c5:3d:23:75:9c:
2d:c1:0d:f0:1c:8b:48:5b:38:4e:8d:eb:70:d4:9b:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:53:68:9B:74:42:8C:CB:3D:42:3A:0F:3A:EF:2F:06:BF:08:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ceb2d99-5c2c-322a-9557-07af6f337bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:49:04:e4:aa:78:ec:d5:3b:fe:4f:b3:e3:05:59:44:24:a1:
09:42:1d:e4:ac:f7:ba:3e:12:14:9e:9f:06:7d:92:ee:04:3b:
cb:9f:82:2c:ae:0a:96:78:07:b1:94:6f:a3:af:fe:14:02:3f:
ec:71:73:e4:e9:bc:e2:6e:b6:0a:fd:cb:52:fa:35:83:a4:58:
e6:c3:f3:64:37:7e:50:10:a6:8b:27:29:21:7d:b4:45:34:39:
53:fc:bd:c9:1f:39:bd:fb:4c:ae:02:66:54:a7:93:3b:97:64:
9c:42:eb:d3:bf:21:81:8e:3a:a0:59:be:08:f4:b0:0d:ec:82:
6b:9e:b0:3d:e5:85:80:40:e2:ed:08:99:6c:0f:e6:bf:bb:c0:
55:ca:18:88:bd:7b:21:84:34:df:9d:73:8c:16:9d:10:b7:cc:
04:42:88:98:fa:9b:52:95:0d:82:a4:c0:0a:07:12:79:22:da:
8a:81:87:a4:08:a9:d9:a8:a3:20:17:d4:5e:b5:d8:4d:c5:67:
bc:19:46:f3:c4:3c:9c:58:9e:4d:12:0c:f0:8a:4c:ea:f4:8f:
fe:f8:ac:ec:41:59:ec:e4:9e:27:95:d5:ad:82:d0:25:2f:24:
49:c7:a5:a1:ed:94:f3:b0:d3:9c:1d:60:37:90:30:35:0f:a3:
c1:a5:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:00:46 2025 by rpki-client