Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c51d104f-c624-3c49-be41-a1b1f96c255f.roa
File: c51d104f-c624-3c49-be41-a1b1f96c255f.roa (raw, json)
Hash identifier: DBvgvqELZvXha9Kcd8vtJOIN8NsW2MuQnVFKX1mQTaM=
Subject key identifier: 52:D1:4C:55:61:CE:CA:8E:93:3F:54:EA:17:6E:C8:44:A0:EF:69:1E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584185690A394AC14379F6AF1FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c51d104f-c624-3c49-be41-a1b1f96c255f.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Mon 14 Jul 2025 04:00:00 +0000
asID: 38337
IP address blocks: 136.0.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:85:69:0a:39:4a:c1:43:79:f6:af:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 14 04:00:00 2025 GMT
Subject: CN=81806129-3d2f-4faa-8d71-01c9504db472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:eb:ea:c0:bb:72:cd:e1:fa:18:4e:c5:9b:ed:
9e:a9:53:ab:90:ef:ec:78:59:9b:c2:47:79:df:e5:
05:4a:9d:da:f0:c4:19:19:8f:e6:c0:dd:c7:66:10:
86:ff:0b:eb:f6:6f:b0:bd:58:39:a0:b6:45:bf:b2:
dd:37:46:1e:ce:a6:e8:1c:56:24:d5:33:9a:5c:5c:
9b:4d:02:6b:73:58:47:3b:cd:ed:99:be:57:f8:da:
80:20:9d:34:ea:94:3f:18:e6:36:47:0a:fd:89:d3:
d4:61:1f:5a:65:9e:15:de:46:66:5f:50:5f:dc:a9:
41:28:a9:c2:a8:10:b6:29:bc:13:fc:99:3e:35:fe:
0a:b1:43:6e:b7:a8:39:b7:22:2b:87:d9:93:c4:78:
5b:16:68:a0:79:48:71:16:64:e9:26:74:12:17:aa:
d9:bd:db:b4:b3:5f:7d:55:5f:fa:05:3e:87:b4:7a:
18:16:3a:6c:12:96:6c:22:9f:47:8a:36:f7:b7:d6:
82:5d:2d:bc:54:e9:b5:6c:56:7b:82:57:26:13:48:
63:1e:9e:d5:4a:58:f3:bf:98:e3:ad:1e:68:f0:5f:
92:de:73:f9:9d:a3:9a:d9:6c:75:f2:63:18:40:98:
28:2e:4d:f0:01:50:a9:eb:d8:a3:51:45:ea:40:d4:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:4C:55:61:CE:CA:8E:93:3F:54:EA:17:6E:C8:44:A0:EF:69:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c51d104f-c624-3c49-be41-a1b1f96c255f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:9e:7c:30:62:ab:9f:e8:36:5d:4a:4f:6a:b6:07:e1:8c:2d:
40:90:0b:35:6d:6c:37:fe:8f:27:19:19:73:3d:20:18:bf:98:
44:8b:42:cf:b3:6e:87:69:f1:6a:d1:fb:12:5e:8f:98:0a:03:
cd:4e:cd:b2:1f:45:d2:62:82:2e:55:75:21:96:f5:db:ea:6b:
17:04:77:35:f1:6c:a8:d7:93:83:a1:ae:39:07:a5:3d:67:9b:
34:72:9a:ff:5d:f7:03:61:fd:92:2b:46:11:fb:9d:fd:8c:f3:
4c:d1:57:7f:15:23:b4:44:02:ee:de:83:42:64:ae:61:95:d9:
4a:ae:48:78:59:b6:2b:93:a8:a0:d6:78:56:72:f3:2e:25:83:
d3:cc:63:50:c8:5a:9a:6c:97:2c:97:fb:37:e7:ff:b6:c8:5f:
c0:cf:eb:90:c3:83:4f:ae:50:3c:ce:69:33:c2:4d:a0:4b:0d:
c3:03:94:c9:50:71:e3:d6:64:ce:db:13:32:70:56:08:9f:49:
13:9f:bf:79:30:17:45:a4:5c:d2:1c:9b:62:ee:ea:16:6b:2c:
e9:51:61:2e:aa:40:f2:b3:6f:21:5b:a7:4c:1b:3f:7b:23:15:
a0:6c:3e:1d:84:ad:4e:45:cd:62:fb:f3:a0:36:a1:e1:57:58:
b6:6f:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:47:26 2025 by rpki-client