Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c71cb760-16f7-3c9a-9daf-975299e40e71.roa
File: c71cb760-16f7-3c9a-9daf-975299e40e71.roa (raw, json)
Hash identifier: Vs9mg1aTOB+ONbYAToNw8E/dXKFuH7XovpgaWhPlHiw=
Subject key identifier: 0E:EF:48:8A:AA:82:C5:10:C1:35:9E:32:14:80:CD:86:9A:E3:AE:4C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841856A288782759536528C37F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c71cb760-16f7-3c9a-9daf-975299e40e71.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Mon 14 Jul 2025 04:00:00 +0000
asID: 136923
IP address blocks: 107.164.212.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:85:6a:28:87:82:75:95:36:52:8c:37:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 14 04:00:00 2025 GMT
Subject: CN=50fb297d-f5e9-4182-843f-d14ad33b34ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:2f:bb:d3:2c:bb:d6:3c:e7:62:b4:9d:73:
1f:c4:36:8f:65:ec:44:a0:8e:6d:99:0a:29:f3:21:
93:d3:8e:ed:03:f7:32:1a:62:7d:2b:d6:61:8b:4e:
11:58:93:0a:2e:2d:f3:84:25:46:f6:16:7e:16:22:
c8:27:dd:4a:92:6b:db:9a:cd:9a:37:75:29:e2:d3:
ba:65:ce:14:22:ec:51:73:a0:68:c6:cb:36:a6:32:
21:f9:0b:f3:24:94:18:c8:c2:21:38:8e:8e:de:68:
5f:fc:e2:72:3e:c0:90:06:4d:61:c5:2c:ac:58:55:
04:a4:79:50:b1:c5:c6:8c:17:87:63:d4:ba:e9:09:
e5:21:66:34:75:5c:1a:bf:08:53:67:51:f5:a8:af:
da:e1:f0:80:4e:9e:d9:ec:17:55:53:9f:3a:ee:1c:
3f:2c:94:77:4b:aa:60:df:93:74:5e:c7:31:ab:b8:
41:e0:94:de:db:4d:d4:da:77:75:04:ff:65:09:f4:
55:58:71:76:e0:98:44:7a:2e:17:99:c1:74:d9:55:
b4:82:37:2a:e0:68:d7:77:2f:bd:41:f4:7e:d9:75:
42:ad:39:a2:8c:89:8e:00:66:e7:7c:22:92:f5:9c:
f5:bc:39:c7:e1:eb:ec:16:78:81:2d:fc:52:1e:79:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:48:8A:AA:82:C5:10:C1:35:9E:32:14:80:CD:86:9A:E3:AE:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c71cb760-16f7-3c9a-9daf-975299e40e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
107.164.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:24:c6:32:99:89:e3:56:fa:e2:0f:39:6b:0d:b8:e6:9d:64:
91:26:19:88:66:0f:a5:0b:b0:88:d5:01:39:fe:da:8c:a8:3c:
63:5c:1e:e3:d4:a9:ec:83:e5:98:d9:20:74:a9:97:f8:83:1b:
c0:0f:e2:16:6e:b6:ca:00:39:8f:7b:74:1c:bc:60:12:11:3f:
2c:af:fe:6f:1f:9d:ed:e5:1c:c7:83:08:64:55:14:39:05:47:
cc:04:25:74:f4:95:b4:bc:85:3c:9f:92:e5:d1:a4:4a:68:56:
59:61:17:9b:8a:46:10:fd:03:3d:0f:c8:a4:a4:e3:b2:bb:71:
6f:e3:da:7b:55:44:3a:db:af:75:37:02:fc:36:80:48:e2:e6:
2d:02:54:0b:95:d0:a4:c1:a4:0b:00:66:1e:e2:32:ae:37:34:
5c:cd:51:50:2c:8d:70:37:8d:ad:bc:28:9e:6f:c4:c9:25:cd:
d2:ec:8b:ea:20:f2:ae:4a:bd:7c:f0:4a:6e:eb:9e:f0:24:be:
f2:2b:cb:78:14:5f:19:74:cd:d8:01:13:c9:d9:cf:ed:c1:76:
5f:3c:a7:a6:6d:2d:b8:04:23:14:0e:f2:22:5c:35:7d:ff:f2:
73:13:f0:88:05:10:18:4f:39:6e:15:ae:26:d8:48:24:5d:53:
20:35:67:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGFaiiHgnWVNlKMN/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDcxNDA0MDAwMFowLzEtMCsGA1UEAxMk
NTBmYjI5N2QtZjVlOS00MTgyLTg0M2YtZDE0YWQzM2IzNGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpkvu9Msu9Y852K0nXMfxDaPZexEoI5tmQop
8yGT047tA/cyGmJ9K9Zhi04RWJMKLi3zhCVG9hZ+FiLIJ91Kkmvbms2aN3Up4tO6
Zc4UIuxRc6Boxss2pjIh+QvzJJQYyMIhOI6O3mhf/OJyPsCQBk1hxSysWFUEpHlQ
scXGjBeHY9S66QnlIWY0dVwavwhTZ1H1qK/a4fCATp7Z7BdVU5867hw/LJR3S6pg
35N0Xscxq7hB4JTe203U2nd1BP9lCfRVWHF24JhEei4XmcF02VW0gjcq4GjXdy+9
QfR+2XVCrTmijImOAGbnfCKS9Zz1vDnH4evsFniBLfxSHnlxxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7vSIqqgsUQwTWeMhSAzYaa465MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzcxY2I3NjAtMTZmNy0z
YzlhLTlkYWYtOTc1Mjk5ZTQwZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6TUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEkxjKZieNW+uIPOWsNuOadZJEmGYhmD6ULsIjVATn+2oyoPGNcHuPU
qeyD5ZjZIHSpl/iDG8AP4hZutsoAOY97dBy8YBIRPyyv/m8fne3lHMeDCGRVFDkF
R8wEJXT0lbS8hTyfkuXRpEpoVllhF5uKRhD9Az0PyKSk47K7cW/j2ntVRDrbr3U3
Avw2gEji5i0CVAuV0KTBpAsAZh7iMq43NFzNUVAsjXA3ja28KJ5vxMklzdLsi+og
8q5KvXzwSm7rnvAkvvIry3gUXxl0zdgBE8nZz+3Bdl88p6ZtLbgEIxQO8iJcNX3/
8nMT8IgFEBhPOW4VribYSCRdUyA1Zzs=
-----END CERTIFICATE-----
Generated at Sun May 11 04:32:12 2025 by rpki-client