Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/9d7d8b48-a533-3612-894b-e315307502a3.roa
File: 9d7d8b48-a533-3612-894b-e315307502a3.roa (raw, json)
Hash identifier: g2p1MUWAsRTdcJliIVyXvhGdD6terxEIg2ML9VHaXnc=
Subject key identifier: 3C:7D:D4:05:05:EE:B3:DB:76:82:29:8C:FE:3A:17:73:F4:88:B6:DB
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858498B42B56B256A05C4FC078580
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/9d7d8b48-a533-3612-894b-e315307502a3.roa
Signing time: Wed 16 Apr 2025 10:05:36 +0000
ROA not before: Wed 16 Apr 2025 10:05:36 +0000
ROA not after: Tue 15 Jul 2025 10:05:36 +0000
asID: 26548
IP address blocks: 103.65.230.0/24 maxlen: 24
115.42.46.0/24 maxlen: 24
163.53.213.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8b:42:b5:6b:25:6a:05:c4:fc:07:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Apr 16 10:05:36 2025 GMT
Not After : Jul 15 10:05:36 2025 GMT
Subject: CN=5b870109-e4ab-4e16-83ff-4c4f7d7359b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:ea:72:f5:34:80:4f:23:88:fe:02:e8:0f:
97:b4:3d:ea:a0:ea:5f:12:a3:51:6a:ea:c0:12:a5:
3a:36:ea:b3:3d:1c:a3:11:89:28:3b:07:28:3c:5b:
52:15:ec:b8:d4:c3:dc:f0:89:d5:da:f9:39:b4:c4:
3c:9d:4c:58:2b:4b:af:4c:69:66:c9:f4:62:3a:64:
ce:01:01:1c:6e:aa:19:25:d4:2e:6a:43:9b:f8:d1:
6a:71:c5:35:1c:01:d0:bd:8a:51:a2:e7:7e:b1:c4:
17:ce:7a:06:cc:25:80:94:f6:83:8a:3a:ab:98:86:
52:e2:28:c8:49:4c:d5:a7:d7:33:d7:61:7d:1c:3a:
46:d5:82:f0:2b:f1:44:5d:2f:0a:e5:ff:58:57:db:
7d:79:05:26:07:1e:30:cc:f0:b5:45:2e:9a:81:1e:
62:9b:74:6c:a5:e1:1a:a8:35:3c:c7:d2:d5:97:6a:
d0:69:86:80:72:0d:93:1f:14:e7:d1:da:78:2c:90:
00:26:34:ff:6c:24:bc:1b:73:96:13:30:72:e4:a1:
c6:59:22:18:9b:7f:ba:48:4f:ec:58:44:e7:78:08:
1f:71:82:9f:4d:ea:b4:37:1c:7e:7a:f7:80:4a:7c:
7c:31:49:1f:39:83:68:50:41:5a:03:82:26:aa:4b:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:D4:05:05:EE:B3:DB:76:82:29:8C:FE:3A:17:73:F4:88:B6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/9d7d8b48-a533-3612-894b-e315307502a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.65.230.0/24
115.42.46.0/24
163.53.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ff:b2:09:8d:38:18:5f:0a:24:41:ba:c1:13:52:df:37:bd:
f9:6a:b1:72:62:8b:3e:d5:14:6a:e2:37:79:9b:21:54:ed:0e:
d6:7e:bd:0b:98:9f:11:06:a7:4a:46:31:24:c6:8a:c0:68:84:
66:d1:ae:be:63:56:3b:6f:b0:84:a5:39:82:10:ef:29:67:2f:
f8:9f:a8:49:3b:11:0a:20:7f:f7:9d:c4:f8:16:43:17:13:67:
08:8d:ff:24:a1:d2:b4:82:87:2f:7a:50:6f:7f:45:84:a9:ea:
22:4d:dd:e3:d8:7e:0d:5a:1f:6e:e1:be:16:22:43:ef:9d:a7:
59:79:04:47:ef:fd:6a:b7:f3:23:b4:bf:56:80:79:84:ad:ca:
b8:39:b8:33:22:fd:ce:bb:7c:15:5f:0a:cc:fe:28:74:6c:67:
62:34:d9:15:80:a9:40:b8:52:b2:1e:ce:30:01:1f:90:dc:38:
8b:a2:1b:57:be:6a:b2:3a:67:c9:46:33:09:1f:f9:1f:96:10:
e9:aa:ba:3b:74:59:47:c9:84:43:cd:a5:46:89:56:5c:25:a7:
c2:00:91:5a:b0:7b:7d:df:e4:33:38:47:0a:02:cd:8c:34:e3:
4d:30:fc:ec:08:87:5d:d2:f9:3d:85:d2:57:5b:bf:20:51:fb:
35:d0:ce:0b
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmLQrVrJWoFxPwHhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTI1MDQxNjEwMDUzNloXDTI1MDcxNTEwMDUzNlowLzEtMCsGA1UEAxMk
NWI4NzAxMDktZTRhYi00ZTE2LTgzZmYtNGM0ZjdkNzM1OWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ/qcvU0gE8jiP4C6A+XtD3qoOpfEqNRaurA
EqU6NuqzPRyjEYkoOwcoPFtSFey41MPc8InV2vk5tMQ8nUxYK0uvTGlmyfRiOmTO
AQEcbqoZJdQuakOb+NFqccU1HAHQvYpRoud+scQXznoGzCWAlPaDijqrmIZS4ijI
SUzVp9cz12F9HDpG1YLwK/FEXS8K5f9YV9t9eQUmBx4wzPC1RS6agR5im3RspeEa
qDU8x9LVl2rQaYaAcg2THxTn0dp4LJAAJjT/bCS8G3OWEzBy5KHGWSIYm3+6SE/s
WETneAgfcYKfTeq0Nxx+eveASnx8MUkfOYNoUEFaA4ImqkuinQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFDx91AUF7rPbdoIpjP46F3P0iLbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvOWQ3ZDhiNDgtYTUzMy0z
NjEyLTg5NGItZTMxNTMwNzUwMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ0HmAwQA
cyouAwQAozXVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAHb/sgmNOBhfCiRBusETUt83vflqsXJiiz7VFGri
N3mbIVTtDtZ+vQuYnxEGp0pGMSTGisBohGbRrr5jVjtvsISlOYIQ7ylnL/ifqEk7
EQogf/edxPgWQxcTZwiN/ySh0rSChy96UG9/RYSp6iJN3ePYfg1aH27hvhYiQ++d
p1l5BEfv/Wq38yO0v1aAeYStyrg5uDMi/c67fBVfCsz+KHRsZ2I02RWAqUC4UrIe
zjABH5DcOIuiG1e+arI6Z8lGMwkf+R+WEOmqujt0WUfJhEPNpUaJVlwlp8IAkVqw
e33f5DM4RwoCzYw0400w/OwIh13S+T2F0ldbvyBR+zXQzgs=
-----END CERTIFICATE-----
Generated at Sat May 10 22:15:16 2025 by rpki-client