Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/47ffdb9b-ea2e-35a3-8a04-d0eae6afbf44.roa
File: 47ffdb9b-ea2e-35a3-8a04-d0eae6afbf44.roa (raw, json)
Hash identifier: 1ftnYTGjAdm3CFfa89BjrtaHTo91t4jdpKu7AerJb9k=
Subject key identifier: 28:6A:DB:D2:A6:C8:52:6F:88:EA:CD:C3:7F:32:85:A8:11:6B:ED:29
Certificate issuer: /CN=e245cff5-7032-45c2-9463-fce67888b2f7
Certificate serial: 010D0C9F43285845A46A06B591B669D84E39BC80
Authority key identifier: 88:A7:7F:D6:97:C2:9C:95:80:0B:12:A8:2F:F2:70:C5:D0:01:E7:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/47ffdb9b-ea2e-35a3-8a04-d0eae6afbf44.roa
Signing time: Tue 23 Apr 2024 15:12:16 +0000
ROA not before: Tue 23 Apr 2024 15:12:16 +0000
ROA not after: Mon 22 Jul 2024 15:12:16 +0000
asID: 64249
IP address blocks: 161.33.0.0/19 maxlen: 19
161.33.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a4:6a:06:b5:91:b6:69:d8:4e:39:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e245cff5-7032-45c2-9463-fce67888b2f7
Validity
Not Before: Apr 23 15:12:16 2024 GMT
Not After : Jul 22 15:12:16 2024 GMT
Subject: CN=575a336f-8ca3-4f99-90eb-146b029e1df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:18:78:9b:40:81:dc:cb:45:c8:94:68:5d:
bd:30:3c:8d:b4:82:30:d9:d6:6b:42:42:8f:ac:00:
5f:57:25:84:33:d8:e5:34:79:32:b4:73:df:de:a5:
a1:bc:ef:9f:45:6a:46:76:d3:c2:cf:29:08:e0:9f:
ed:bd:8c:a5:18:0a:e1:0a:b6:c2:d9:88:94:31:b7:
e8:21:35:3d:0e:3d:2b:c1:2a:dd:af:73:c6:e8:0a:
74:ec:bf:1e:4d:d8:2e:79:e5:eb:bc:37:57:fb:9b:
64:b7:a2:7a:d5:20:78:4b:5a:61:94:6d:8e:a7:70:
dc:9f:f6:dd:5f:c6:1d:a4:bb:d7:68:84:8c:61:42:
8f:a6:27:29:27:4a:b2:44:02:26:78:2b:7e:76:e5:
ed:b2:d2:0e:9c:85:8f:ea:49:d9:2f:1d:65:9c:5c:
92:5a:ac:5f:be:54:22:28:1e:cf:31:d9:33:27:3d:
ca:b1:30:40:89:00:e1:53:d7:58:d7:d8:4e:73:8b:
9a:03:b3:4c:4e:9c:4b:72:c4:5c:b3:6c:3b:3e:eb:
56:7a:6a:98:40:9f:15:18:8a:25:d9:dd:3e:a3:98:
d0:37:b2:ad:ba:57:9c:97:ea:bb:e1:b0:57:e4:38:
cc:e9:05:08:20:ef:e2:48:e7:b1:c6:4a:08:28:f0:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:DB:D2:A6:C8:52:6F:88:EA:CD:C3:7F:32:85:A8:11:6B:ED:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/47ffdb9b-ea2e-35a3-8a04-d0eae6afbf44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/e245cff5-7032-45c2-9463-fce67888b2f7.crl
X509v3 Authority Key Identifier:
keyid:88:A7:7F:D6:97:C2:9C:95:80:0B:12:A8:2F:F2:70:C5:D0:01:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:9d:40:99:d7:d8:ca:db:3e:85:9c:e2:3a:37:51:95:a0:19:
93:52:b1:bd:b2:72:a9:75:10:f8:62:03:bd:4b:8a:a9:9c:e3:
55:56:a9:7c:f5:f6:b7:21:2b:53:44:b8:3e:c8:d3:ef:6d:a5:
50:3d:02:29:81:9f:f0:e1:5b:60:70:f6:c1:3b:67:84:16:2f:
f0:38:32:79:5b:a0:09:ae:8e:df:63:bf:e8:d7:b3:0c:87:74:
d9:62:9f:56:46:8b:cb:6c:30:1a:80:a9:24:ba:73:d9:8b:8c:
15:ec:30:f9:54:8b:7b:87:30:0f:c8:52:c5:5a:86:b1:7c:df:
ce:79:67:b5:9c:f4:be:f1:f3:f8:31:1e:61:e4:75:b0:4f:ce:
1b:af:8a:f3:cb:68:75:69:61:84:1a:32:c7:36:1a:ca:35:3b:
07:4e:20:c5:8e:61:95:9a:58:0c:63:4e:94:75:69:2c:6b:c7:
bc:9b:f6:e2:02:f8:fb:ae:85:e9:fd:24:31:d4:17:b7:df:31:
1a:9d:d5:0f:c7:8a:c6:c3:91:2a:e7:be:a2:b2:14:e9:4b:47:
02:00:e2:27:0e:67:75:5e:ff:5d:e9:24:81:15:b3:58:03:ed:
e5:58:3b:c3:c2:f3:ae:aa:5f:e8:3d:35:bd:ee:a5:d1:f5:c4:
89:5c:f0:3d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWkaga1kbZp2E45vIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI0NWNmZjUtNzAzMi00NWMyLTk0NjMtZmNlNjc4ODhi
MmY3MB4XDTI0MDQyMzE1MTIxNloXDTI0MDcyMjE1MTIxNlowLzEtMCsGA1UEAxMk
NTc1YTMzNmYtOGNhMy00Zjk5LTkwZWItMTQ2YjAyOWUxZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtucYeJtAgdzLRciUaF29MDyNtIIw2dZrQkKP
rABfVyWEM9jlNHkytHPf3qWhvO+fRWpGdtPCzykI4J/tvYylGArhCrbC2YiUMbfo
ITU9Dj0rwSrdr3PG6Ap07L8eTdgueeXrvDdX+5tkt6J61SB4S1phlG2Op3Dcn/bd
X8YdpLvXaISMYUKPpicpJ0qyRAImeCt+duXtstIOnIWP6knZLx1lnFySWqxfvlQi
KB7PMdkzJz3KsTBAiQDhU9dY19hOc4uaA7NMTpxLcsRcs2w7PutWemqYQJ8VGIol
2d0+o5jQN7Ktulecl+q74bBX5DjM6QUIIO/iSOexxkoIKPCcFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFChq29KmyFJviOrNw38yhagRa+0pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjQ1
Y2ZmNS03MDMyLTQ1YzItOTQ2My1mY2U2Nzg4OGIyZjcvNDdmZmRiOWItZWEyZS0z
NWEzLThhMDQtZDBlYWU2YWZiZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTI0NWNmZjUtNzAzMi00NWMyLTk0
NjMtZmNlNjc4ODhiMmY3L2UyNDVjZmY1LTcwMzItNDVjMi05NDYzLWZjZTY3ODg4
YjJmNy5jcmwwHwYDVR0jBBgwFoAUiKd/1pfCnJWACxKoL/JwxdAB5+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjQ1Y2ZmNS03MDMyLTQ1YzItOTQ2My1mY2U2
Nzg4OGIyZjcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoSEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgJ1AmdfYyts+hZziOjdRlaAZk1KxvbJyqXUQ+GIDvUuKqZzjVVapfPX2
tyErU0S4PsjT722lUD0CKYGf8OFbYHD2wTtnhBYv8DgyeVugCa6O32O/6NezDId0
2WKfVkaLy2wwGoCpJLpz2YuMFeww+VSLe4cwD8hSxVqGsXzfznlntZz0vvHz+DEe
YeR1sE/OG6+K88todWlhhBoyxzYayjU7B04gxY5hlZpYDGNOlHVpLGvHvJv24gL4
+66F6f0kMdQXt98xGp3VD8eKxsORKue+orIU6UtHAgDiJw5ndV7/XekkgRWzWAPt
5Vg7w8Lzrqpf6D01ve6l0fXEiVzwPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org