Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7e081718-70d8-32eb-9d93-963e7fe81fb5.roa
File: 7e081718-70d8-32eb-9d93-963e7fe81fb5.roa (raw, json)
Hash identifier: 8jwNHR8X+MNf1y3iks4XwrO1QP2sNqiIOWWgeHPuOj8=
Subject key identifier: 7A:D2:55:7F:A5:AC:99:74:C1:4D:48:C5:81:5E:87:00:A1:87:CE:3D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858456C5324CA53A2E08E93977300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7e081718-70d8-32eb-9d93-963e7fe81fb5.roa
Signing time: Wed 03 Apr 2024 13:00:37 +0000
ROA not before: Wed 03 Apr 2024 13:00:37 +0000
ROA not after: Tue 02 Jul 2024 13:00:37 +0000
asID: 212238
IP address blocks: 142.111.168.0/24 maxlen: 24
192.177.48.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:6c:53:24:ca:53:a2:e0:8e:93:97:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 3 13:00:37 2024 GMT
Not After : Jul 2 13:00:37 2024 GMT
Subject: CN=93a1face-b136-4879-aaf1-05ab7944ecb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:a7:95:b9:c2:55:fe:b4:ba:6b:99:75:aa:
21:fb:43:84:28:79:1f:85:ac:83:5a:ad:71:26:26:
7e:c8:6c:a3:a9:c2:d3:59:37:10:e4:6d:8d:25:d7:
a0:fc:64:35:7c:79:21:59:57:f2:13:14:c0:c0:56:
99:54:c2:3c:b9:db:3f:17:3e:7b:f5:11:b2:80:c7:
56:52:68:2d:24:28:9f:c7:fb:17:61:9d:d9:31:57:
01:e4:a6:c9:cc:c7:57:d5:60:a8:6a:bf:ff:b9:6f:
9c:e5:e4:72:b2:70:40:8f:b6:18:a9:d1:1c:18:b4:
79:dd:8f:43:76:ad:fc:25:79:df:1d:a1:65:9e:4b:
d3:80:53:22:bb:d8:fa:ef:64:cd:09:b5:e9:7e:49:
f3:33:21:a3:18:d4:96:3e:af:52:8a:d5:a0:c2:89:
54:62:0a:9a:00:1c:9f:21:d6:18:16:a0:25:6d:a6:
fa:40:e9:a4:e6:25:cd:eb:1d:a9:99:5f:06:d2:9c:
bf:d6:01:9f:f8:39:62:d8:58:1a:f7:1d:83:95:9c:
e1:d0:97:8e:e5:ab:af:50:2d:42:b4:d1:fc:09:91:
1f:4c:1f:d5:eb:c4:d3:94:83:91:e9:f2:ff:34:30:
d0:74:81:9e:29:65:46:d9:7b:7e:81:f8:ea:40:7c:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:55:7F:A5:AC:99:74:C1:4D:48:C5:81:5E:87:00:A1:87:CE:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7e081718-70d8-32eb-9d93-963e7fe81fb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.168.0/24
192.177.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:65:3e:06:1b:2e:e4:9f:08:61:3a:e4:8b:f5:ce:39:9c:95:
18:4c:55:99:39:e3:40:3a:aa:fd:6d:e6:16:85:e4:fa:cd:b5:
68:2a:bf:cd:18:82:d2:85:bb:0c:f1:a1:6a:21:32:4e:23:f2:
20:24:5f:f8:d9:26:78:6a:40:aa:aa:26:d3:97:cb:de:c6:24:
51:2e:a6:f7:64:2f:a5:be:2f:25:23:b5:8c:a3:cc:34:7f:49:
21:9f:00:20:04:56:68:76:f9:3a:f4:33:dc:cf:75:d4:ca:e9:
e4:a3:84:18:72:19:8e:d5:48:88:d2:69:11:7d:85:7b:a7:e9:
38:77:1b:e7:b3:a0:96:97:a3:4f:e9:05:2a:45:5f:d3:4b:7a:
dc:4b:c2:b8:50:47:22:ee:7a:a9:95:ce:11:44:36:d1:57:d8:
6a:56:ba:2c:28:fc:bc:9f:bd:11:83:0d:74:38:b0:a8:a0:b5:
ab:00:44:7b:fa:0f:75:90:6b:14:24:fa:35:be:38:42:71:ee:
6b:8f:4d:28:58:7d:87:2f:53:e8:bc:b2:0c:29:54:0d:63:1c:
df:c5:b2:38:65:84:10:a4:56:91:2e:56:02:dd:d1:47:28:85:
ff:38:4d:a1:5b:fa:9a:9f:bc:35:e6:28:5e:cb:59:d5:11:c1:
c6:ab:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org