Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/00d78130-474b-311e-b61d-45a9acd49d14.roa
File: 00d78130-474b-311e-b61d-45a9acd49d14.roa (raw, json)
Hash identifier: Td3VsDqRjSroFZZM+InDn9KwgQmzOwmFQQQp6qky+4o=
Subject key identifier: 99:90:49:49:C7:64:CB:03:16:8E:9C:2A:14:9B:3D:1C:20:01:C7:19
Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e
Certificate serial: 010D0C9F4328583F2ABBF96DDFA08AAA46550600
Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/00d78130-474b-311e-b61d-45a9acd49d14.roa
Signing time: Tue 06 Sep 2022 13:36:43 +0000
ROA not before: Tue 06 Sep 2022 13:36:43 +0000
ROA not after: Mon 09 Dec 2024 05:00:00 +0000
asID: 33099
IP address blocks: 206.168.156.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2a:bb:f9:6d:df:a0:8a:aa:46:55:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e
Validity
Not Before: Sep 6 13:36:43 2022 GMT
Not After : Dec 9 05:00:00 2024 GMT
Subject: CN=20f94afe-ac2d-4cbb-8599-746df9822452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:72:5e:35:33:93:b1:68:53:7c:31:94:8c:
67:a8:3c:8c:e5:61:5c:88:27:9f:3d:23:29:a3:06:
08:8a:bf:3d:c8:9f:9a:34:2a:7e:e5:ff:3f:fb:ff:
8a:e2:18:8d:e9:c1:10:1b:f1:bf:8b:6a:2f:bb:03:
23:0b:2e:63:e3:f5:18:87:e1:53:50:5c:eb:df:0b:
35:0e:15:4d:54:54:19:18:51:8c:9f:66:aa:31:48:
c2:28:11:67:7b:d2:cf:9f:0e:8b:e0:83:fe:48:e7:
a5:ac:cc:b0:2b:3a:a2:a0:bf:69:ca:eb:d2:84:bb:
38:e2:e3:b4:29:53:bd:41:9a:65:e2:a3:42:e5:1c:
6c:eb:bb:b5:bb:a6:e5:07:40:40:ea:b9:bd:ba:4c:
3c:34:01:ca:e0:41:88:90:b2:23:26:58:36:55:5e:
1c:ff:75:5d:1e:0d:8a:9c:ce:0f:b9:97:cc:c5:ac:
7b:96:35:05:fd:6c:b6:84:8e:e2:ca:f9:aa:4b:bf:
b1:fe:41:27:87:93:bb:5b:30:99:a9:99:d0:8a:46:
1d:82:73:af:bf:d8:d5:31:dd:d6:2e:88:96:6c:06:
4e:19:9f:a3:64:a9:85:05:56:6a:3c:80:46:06:50:
57:8d:64:4a:de:3b:29:0e:6b:a4:b7:dc:21:89:b6:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:49:49:C7:64:CB:03:16:8E:9C:2A:14:9B:3D:1C:20:01:C7:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/00d78130-474b-311e-b61d-45a9acd49d14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl
X509v3 Authority Key Identifier:
keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f9:8c:10:05:6b:75:f4:84:db:e5:f6:5c:91:4b:02:83:ba:
f8:e7:6f:9c:24:3c:d6:fa:c3:f5:55:15:d0:df:1e:74:a8:a9:
7b:7c:ee:c6:7d:e0:28:27:a9:f0:f2:3c:74:15:3d:53:f6:e5:
2a:ef:0c:db:a0:88:5f:2c:18:70:ac:a2:22:a8:56:47:6d:bf:
07:60:49:aa:25:db:b3:13:49:51:38:10:c3:f7:94:8d:c2:30:
56:55:4c:fd:e9:98:cc:79:6f:5f:a2:5d:aa:32:ca:4e:6b:13:
8d:eb:ac:b8:4a:de:10:4a:ae:28:6c:b8:b1:19:3e:2f:b2:96:
57:fb:62:73:3e:1f:ee:bb:14:8d:3c:fa:31:4a:00:53:bc:a8:
f4:f9:9f:21:69:04:7a:23:f4:41:98:65:09:78:c6:4c:77:52:
90:e3:a5:38:8e:71:e2:7b:25:60:fe:5a:06:ec:6c:0a:f2:00:
06:63:83:d9:95:3a:fe:4a:4e:ef:00:31:4e:a3:e9:0b:6b:4c:
e4:c4:33:8b:d7:64:db:b2:f5:e1:9e:0f:d0:14:b4:be:0d:c2:
d4:df:51:3c:ee:76:6e:16:f2:14:ae:d9:19:02:82:11:53:79:
b4:81:4f:ab:39:e1:10:72:9e:6a:ec:55:ef:84:35:1a:a8:9b:
55:50:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-ams.rpki-client.org