Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e3aaa309-4f0f-3988-b569-2627119596fd.roa
File: e3aaa309-4f0f-3988-b569-2627119596fd.roa (raw, json)
Hash identifier: uYlVPYW3hywHfYtokzkIM5n4LAUZtqGHZhjfviuKiqw=
Subject key identifier: 6A:00:DA:43:5E:3D:91:4C:6A:88:23:FF:8D:2E:85:E0:85:DC:A2:11
Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01
Certificate serial: 010D0C9F4328584250ADF2E4239891F10D150000
Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e3aaa309-4f0f-3988-b569-2627119596fd.roa
Signing time: Fri 23 Jun 2023 13:00:19 +0000
ROA not before: Fri 23 Jun 2023 13:00:19 +0000
ROA not after: Thu 21 Sep 2023 13:00:19 +0000
asID: 16509
IP address blocks: 216.120.134.0/24 maxlen: 24
216.120.161.0/24 maxlen: 24
216.120.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:ad:f2:e4:23:98:91:f1:0d:15:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01
Validity
Not Before: Jun 23 13:00:19 2023 GMT
Not After : Sep 21 13:00:19 2023 GMT
Subject: CN=634ebd1e-5bf7-4863-b366-a2f79f5c72be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:34:77:ae:db:a8:be:98:a5:1a:6c:fe:fd:
5a:f4:1d:e0:3d:ea:f6:ac:96:93:f7:2b:07:eb:62:
96:67:f1:45:a7:43:02:67:b1:36:2f:3a:d3:dc:99:
60:9f:88:ee:4c:d0:88:26:9a:71:d4:84:18:67:f3:
5b:47:e2:35:8d:4c:54:44:35:49:07:7c:f9:2a:11:
57:31:60:9f:c4:df:cd:1d:32:b6:0a:5b:9d:62:31:
cc:f6:03:3d:1d:b5:eb:e4:de:d0:fb:4d:ec:30:1f:
85:ea:82:7b:7f:4c:3a:9e:8f:c9:46:8f:89:a6:ec:
1d:3b:a9:06:ac:88:b9:6e:6d:f3:08:e6:23:f5:cc:
fc:9d:30:07:f2:31:b3:b2:01:36:99:a8:79:ce:3b:
8d:6b:99:5d:4e:20:6f:e8:9a:63:b7:50:ff:06:23:
a9:54:a7:62:60:41:34:fb:b5:6e:59:bc:02:c9:49:
1e:01:59:6a:84:17:19:0c:d0:3e:cc:4d:10:ac:57:
da:1f:1c:49:5d:03:79:5c:ff:73:01:0d:9e:58:ee:
8f:d9:32:d6:3b:8b:ed:50:50:f9:a1:04:d5:06:df:
ce:44:25:83:2e:ae:75:65:f1:30:38:a1:97:26:a6:
bb:ef:69:d4:2c:c5:a7:ee:5b:27:ae:da:7d:20:6f:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:00:DA:43:5E:3D:91:4C:6A:88:23:FF:8D:2E:85:E0:85:DC:A2:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e3aaa309-4f0f-3988-b569-2627119596fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl
X509v3 Authority Key Identifier:
keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.134.0/24
216.120.161.0/24
216.120.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cd:c7:48:9e:b9:cd:88:6f:28:e0:46:e3:2c:e8:e0:05:e4:
5e:48:d0:94:a7:51:57:50:4d:4c:65:44:13:f8:71:29:56:79:
df:64:56:4a:55:34:40:28:29:4d:86:3b:ab:f4:8c:4e:18:98:
1d:4a:16:10:e7:f2:b6:6c:ce:2e:4e:fe:39:0e:9d:09:91:ec:
cf:fb:aa:83:94:c2:82:43:0f:f2:18:da:60:99:47:9a:75:04:
b3:05:01:32:d5:75:9c:de:d0:ff:15:01:0b:71:1b:e0:19:36:
ee:8f:f4:8c:99:de:56:9b:1e:81:22:61:47:56:e1:a1:58:e9:
bb:d2:7d:04:5a:bc:c0:5c:8d:a3:61:7e:55:26:ce:cb:e2:1a:
04:9a:c2:97:5f:53:c8:ce:07:f7:c7:e8:b5:e5:54:a5:ed:09:
7c:3e:7e:a5:bc:10:02:1f:02:4b:bb:69:50:9d:29:c0:ca:e0:
a9:6f:21:a8:24:59:58:b1:31:ae:6b:51:0a:73:39:f4:b5:92:
0e:07:cd:3e:66:99:54:b2:09:f4:0f:4c:a0:68:9a:d0:92:cf:
a1:68:e4:b0:ba:34:21:aa:d2:ec:81:bb:f8:31:cc:3b:35:90:
ba:28:0b:98:d9:7c:1c:ac:ff:b5:07:7a:05:c5:7a:db:df:f8:
63:a8:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 11:46:56 2023 by rpki-client on console-fra.rpki-client.org