Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/24c4ab67-7fd9-3608-85b2-37adc5cb31ad.roa
File: 24c4ab67-7fd9-3608-85b2-37adc5cb31ad.roa (raw, json)
Hash identifier: qVB/mScIOT/UyqM7jaiyJzTiPtjVrFKOGQVmDXGRxs8=
Subject key identifier: 2B:A4:0C:77:D4:D8:CB:30:AF:37:3A:C1:29:AD:8B:A3:CD:8B:65:80
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F432858425315251ECDEC09CC34686684
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/24c4ab67-7fd9-3608-85b2-37adc5cb31ad.roa
Signing time: Sat 24 Jun 2023 09:39:58 +0000
ROA not before: Sat 24 Jun 2023 09:39:58 +0000
ROA not after: Fri 22 Sep 2023 09:39:58 +0000
asID: 43260
IP address blocks: 64.186.133.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:53:15:25:1e:cd:ec:09:cc:34:68:66:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jun 24 09:39:58 2023 GMT
Not After : Sep 22 09:39:58 2023 GMT
Subject: CN=4889bf32-0403-49ba-81af-2a66544d2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:75:0e:c3:ce:a3:01:0e:d2:86:11:73:dc:95:
93:64:15:c8:91:6b:2f:ec:6b:f0:e0:bb:66:43:dd:
8c:fe:b4:dc:72:b5:7e:d0:14:5a:5b:4b:5f:67:17:
0f:70:60:7d:0c:ad:9f:43:71:df:a8:d2:3d:6e:7d:
0d:87:68:c8:2b:95:21:06:bd:c3:53:9a:29:82:b1:
5a:18:38:f4:8d:95:d9:be:e9:cc:1f:da:90:79:19:
5e:86:6b:80:86:ca:a4:a8:c3:cc:4c:b1:8f:5a:0d:
e9:66:20:b9:58:c2:e2:4c:06:18:b7:e5:76:ec:9e:
06:08:d0:b7:44:ce:b7:af:d2:7d:7d:60:20:42:4e:
77:ba:ea:5b:9b:95:69:a6:9f:1e:b8:b8:b5:3f:25:
8d:0c:24:28:55:fa:7b:75:e4:66:98:c2:b5:d4:e7:
03:f4:49:80:dd:38:43:6f:15:be:c5:dd:d6:63:a9:
cd:d0:87:9b:e0:bb:72:35:6b:d6:5e:29:2c:6c:7a:
4e:16:9a:6a:9a:a6:4c:3f:23:39:61:e1:4a:4c:5b:
61:04:26:53:0e:2e:fa:3f:bd:24:4f:86:41:04:5e:
b9:54:68:b6:ff:d7:6e:1f:e6:aa:2d:8c:a5:5a:65:
d9:da:b4:03:92:14:74:02:38:ce:cd:c0:47:0c:a0:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:0C:77:D4:D8:CB:30:AF:37:3A:C1:29:AD:8B:A3:CD:8B:65:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/24c4ab67-7fd9-3608-85b2-37adc5cb31ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:a8:2b:19:c5:73:bd:e5:a1:90:62:e9:25:2b:96:d4:76:3f:
2a:8f:cd:0b:2d:ed:85:60:f2:26:bb:af:f1:3d:ba:d5:1a:63:
90:88:de:1d:7b:c9:0a:7a:df:a0:54:a9:bf:c7:b5:fc:ff:30:
56:5f:2a:99:5f:99:ba:6b:e1:54:8e:0e:4b:b5:48:c6:e2:77:
52:4a:2e:f2:e8:9c:44:ed:59:4b:1d:20:92:4c:2b:71:2c:fe:
67:dd:e5:ac:1d:bc:7d:45:71:60:86:7b:12:ac:69:81:21:11:
a1:46:b5:69:b3:b6:cf:0d:10:04:86:a5:7a:bc:64:4b:26:aa:
a3:f3:a5:18:48:73:9e:64:ec:ad:5b:0d:46:86:59:22:80:e8:
62:d0:f5:a7:68:54:68:c5:4e:b7:f8:b6:9c:40:23:82:2b:2a:
3d:94:1e:2d:c3:c3:96:42:c5:90:e7:0b:41:0c:c0:3c:86:85:
85:13:15:57:07:34:39:46:e5:c6:24:3c:e3:d4:86:3e:1a:4c:
00:8f:74:02:e1:79:e3:79:ac:a4:a1:3d:94:5a:5b:89:18:39:
23:39:29:1d:22:ee:e4:ad:59:74:ce:a1:c6:9e:95:23:68:91:
27:f6:0a:18:2f:50:26:3c:69:48:09:32:0a:84:1b:43:fc:8c:
a0:1c:d4:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJTFSUezewJzDRoZoQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTIzMDYyNDA5Mzk1OFoXDTIzMDkyMjA5Mzk1OFowLzEtMCsGA1UEAxMk
NDg4OWJmMzItMDQwMy00OWJhLTgxYWYtMmE2NjU0NGQyMTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3UOw86jAQ7ShhFz3JWTZBXIkWsv7Gvw4Ltm
Q92M/rTccrV+0BRaW0tfZxcPcGB9DK2fQ3HfqNI9bn0Nh2jIK5UhBr3DU5opgrFa
GDj0jZXZvunMH9qQeRlehmuAhsqkqMPMTLGPWg3pZiC5WMLiTAYYt+V27J4GCNC3
RM63r9J9fWAgQk53uupbm5Vppp8euLi1PyWNDCQoVfp7deRmmMK11OcD9EmA3ThD
bxW+xd3WY6nN0Ieb4LtyNWvWXiksbHpOFppqmqZMPyM5YeFKTFthBCZTDi76P70k
T4ZBBF65VGi2/9duH+aqLYylWmXZ2rQDkhR0AjjOzcBHDKDQrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCukDHfU2Mswrzc6wSmti6PNi2WAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMjRjNGFiNjctN2ZkOS0z
NjA4LTg1YjItMzdhZGM1Y2IzMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLqFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOoKxnFc73loZBi6SUrltR2PyqPzQst7YVg8ia7r/E9utUaY5CI3h17
yQp636BUqb/Htfz/MFZfKplfmbpr4VSODku1SMbid1JKLvLonETtWUsdIJJMK3Es
/mfd5awdvH1FcWCGexKsaYEhEaFGtWmzts8NEASGpXq8ZEsmqqPzpRhIc55k7K1b
DUaGWSKA6GLQ9adoVGjFTrf4tpxAI4IrKj2UHi3Dw5ZCxZDnC0EMwDyGhYUTFVcH
NDlG5cYkPOPUhj4aTACPdALheeN5rKShPZRaW4kYOSM5KR0i7uStWXTOocaelSNo
kSf2ChgvUCY8aUgJMgqEG0P8jKAc1KQ=
-----END CERTIFICATE-----
Generated at Fri May 9 22:04:15 2025 by rpki-client