Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/7a310731-0fb6-3a32-a823-1dc46ab0c1a7.roa
File: 7a310731-0fb6-3a32-a823-1dc46ab0c1a7.roa (raw, json)
Hash identifier: kBOA6T+OOG5zPDunE5CelVVOsCPdPxsY3U7r9HEEZzg=
Subject key identifier: 0A:41:1C:6E:0C:38:DA:D5:9E:9C:FE:AC:EA:78:80:61:73:98:1C:39
Certificate issuer: /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Certificate serial: 010D0C9F4328584309EB2600302C387548BB23C0
Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/7a310731-0fb6-3a32-a823-1dc46ab0c1a7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 136.112.0.0/12 maxlen: 12
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:26:00:30:2c:38:75:48:bb:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f296c8b6-2949-4a8e-8beb-78d5eef5c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:cd:76:9a:a4:25:32:04:6a:d5:c7:2e:e9:
b9:2c:bc:17:f5:30:81:24:40:46:ab:41:9c:36:64:
3c:8a:36:bd:be:d8:01:44:5e:eb:fc:89:a9:0c:db:
6e:c3:01:b7:c5:1b:45:2a:a7:39:91:07:db:85:fb:
cf:3e:39:05:50:8b:e8:52:87:9c:82:af:f0:55:15:
1a:bf:78:0e:c3:32:db:8d:de:17:38:d4:f9:0a:e8:
11:4b:e0:b8:a2:3b:6e:30:75:29:eb:6c:a3:d4:16:
58:8b:88:2a:42:1e:2a:e9:4c:4c:b0:b7:79:02:0f:
69:89:f1:73:62:b4:4f:d6:f5:b3:dc:be:48:8e:6b:
6b:66:3d:8c:05:1b:6a:ae:5b:5f:cd:c3:73:5f:73:
e1:94:ec:4f:24:ae:5f:f4:3f:5d:3c:41:49:92:7c:
db:1d:1a:58:71:02:fd:13:20:24:9f:16:5e:fb:3b:
1e:6c:74:f3:38:ed:87:db:f0:68:bd:eb:8a:35:70:
7f:c2:fd:2b:95:08:25:3a:05:bb:31:64:c7:d9:a8:
b4:48:51:8e:bb:8c:70:23:c8:f5:e2:8e:9f:94:06:
6b:56:80:0c:c4:36:93:e9:5d:44:0e:af:0d:96:45:
29:43:98:a6:28:d8:32:75:b0:1b:66:2f:eb:5d:0b:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:1C:6E:0C:38:DA:D5:9E:9C:FE:AC:EA:78:80:61:73:98:1C:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/7a310731-0fb6-3a32-a823-1dc46ab0c1a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl
X509v3 Authority Key Identifier:
keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:34:f3:48:00:d5:b3:f0:84:e7:1a:a8:95:c1:55:87:54:20:
2e:dd:bc:ad:fa:df:be:83:44:0a:cd:c2:08:07:09:ef:fa:b7:
ab:96:d5:6b:56:13:51:62:2f:d1:45:4a:90:c9:26:6f:a4:3f:
1b:a4:c3:51:dd:ee:54:59:f7:06:1a:34:4d:35:68:53:0b:8e:
cc:c7:9d:b9:ac:8d:d7:03:ce:ea:67:a8:45:9b:4d:1e:be:d0:
1b:53:23:f7:9b:cb:3f:a8:ac:f9:08:19:41:0e:9d:e2:ab:d3:
c3:09:1e:bb:d4:65:4b:c2:5d:9f:2a:12:7b:f1:7e:e2:83:1a:
82:39:6e:e6:74:52:9a:61:d9:61:38:47:81:48:19:7f:6a:1e:
15:b1:f1:ed:d0:3a:73:b9:ae:03:4b:3e:41:53:a2:be:cc:a6:
16:30:b7:12:17:b0:55:5a:dc:d9:b7:7d:50:5a:82:a6:af:19:
48:88:19:8e:7e:42:47:9b:21:d2:35:76:90:98:83:3f:b6:e9:
1a:b3:79:8f:8d:77:20:31:8e:80:72:c8:4f:4b:ac:bc:91:df:
9e:d4:78:8c:83:e5:cb:bc:ef:c1:06:04:99:b8:3f:d0:2b:20:
8a:36:0a:7c:b2:6d:a6:ef:33:e4:3d:1d:da:79:7e:36:fa:c4:
d9:f3:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:38:52 2024 by rpki-client on console-fra.rpki-client.org