Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/108b2269-7224-3f20-b1f8-e59bd86591da.roa
File: 108b2269-7224-3f20-b1f8-e59bd86591da.roa (raw, json)
Hash identifier: usS59N+Stfkpnjp0kXytvdIeNAFIX5z4NpwHIBBbFWM=
Subject key identifier: 7E:4A:2C:87:36:EF:71:4D:93:38:97:8E:3F:D2:A8:F0:68:B9:83:33
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858423A58736AC9DF22FEA4071700
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/108b2269-7224-3f20-b1f8-e59bd86591da.roa
Signing time: Thu 15 Jun 2023 13:00:18 +0000
ROA not before: Thu 15 Jun 2023 13:00:18 +0000
ROA not after: Wed 13 Sep 2023 13:00:18 +0000
asID: 7862
IP address blocks: 146.23.44.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:3a:58:73:6a:c9:df:22:fe:a4:07:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Jun 15 13:00:18 2023 GMT
Not After : Sep 13 13:00:18 2023 GMT
Subject: CN=7fa6271e-9794-46c1-aa55-de4ed69f4262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:b7:2d:4d:c3:b0:03:d1:8a:5d:ae:b4:3b:
ef:db:b8:a1:a7:fd:7a:c5:51:c5:6f:8b:3b:a9:f0:
55:27:c7:04:aa:2c:d1:05:8c:e2:5a:1e:47:1f:32:
04:5f:f1:78:90:0d:a8:5e:9b:b9:c9:fb:8d:ca:c6:
44:eb:0d:97:b8:04:8a:21:33:72:b5:80:43:75:06:
91:0c:00:1b:a5:81:0f:5d:ff:fb:d3:58:66:d4:af:
c7:28:1c:73:b9:0b:9a:e2:cd:8a:1f:e1:a6:6a:c5:
c9:23:95:3e:a7:df:b0:af:ad:67:0f:cd:2c:80:89:
4f:78:80:36:16:a4:e0:b1:60:b7:96:1e:06:4b:81:
3a:0f:d3:f7:58:6f:ac:4e:9c:65:70:4a:cb:f3:c4:
6a:6e:ab:00:c6:f6:12:9d:eb:ab:8f:2b:96:23:b9:
58:0e:5d:c9:bc:c8:7c:5c:4f:ff:8c:01:b1:dc:90:
b6:99:af:bb:11:65:db:cf:5f:50:5c:d9:27:98:13:
e4:50:f3:e1:69:a6:8b:4c:c8:ee:ab:0c:88:f0:e8:
57:37:64:18:8e:21:ce:1c:e2:08:a6:d2:83:7d:16:
d2:b9:97:e8:5c:a7:32:f6:5b:3f:6d:2d:98:ec:c2:
67:7e:77:9c:6b:4c:b5:e1:36:d7:c4:67:f2:0b:eb:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:2C:87:36:EF:71:4D:93:38:97:8E:3F:D2:A8:F0:68:B9:83:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/108b2269-7224-3f20-b1f8-e59bd86591da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f5:59:e4:e4:d9:88:73:50:e1:3e:b0:5d:d2:71:61:14:2c:
ec:23:40:38:fc:b3:37:60:a1:55:e1:6d:c8:56:37:3b:90:a9:
28:67:b2:db:cc:8f:04:20:03:48:6f:bb:4e:fd:57:fa:04:84:
e0:fe:b5:63:61:80:a8:8a:58:77:9e:85:aa:a6:89:a5:1b:c3:
64:ab:dd:b4:eb:b1:92:d7:86:26:e0:ae:54:f2:23:56:f7:55:
92:c2:11:e1:2c:e5:df:6a:29:a1:a7:3a:26:33:63:65:2c:72:
3d:48:18:54:bd:75:af:ad:cd:bc:b9:fa:3d:43:71:cc:53:73:
c1:b5:0e:e2:a4:b0:3f:04:c2:78:ef:cf:a1:53:5c:4d:17:e2:
77:c7:77:e8:98:89:1b:c8:44:b3:5c:f0:56:65:47:29:68:6b:
05:79:d2:da:3c:f4:6d:3e:74:f9:75:9d:e5:8b:27:15:2c:07:
33:d3:d7:0a:0c:2e:70:e7:63:28:52:a5:ac:ef:d4:c8:ae:c2:
1c:a6:3f:55:b5:1a:2d:e0:32:b1:ab:14:d4:1a:13:d1:af:9f:
52:77:79:bb:66:df:55:0f:8b:85:f0:68:0e:b7:0c:9d:c4:3c:
df:91:28:2b:78:72:03:8c:83:49:c7:1a:72:21:63:a2:8e:90:
c6:59:8d:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI6WHNqyd8i/qQHFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTIzMDYxNTEzMDAxOFoXDTIzMDkxMzEzMDAxOFowLzEtMCsGA1UEAxMk
N2ZhNjI3MWUtOTc5NC00NmMxLWFhNTUtZGU0ZWQ2OWY0MjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JO3LU3DsAPRil2utDvv27ihp/16xVHFb4s7
qfBVJ8cEqizRBYziWh5HHzIEX/F4kA2oXpu5yfuNysZE6w2XuASKITNytYBDdQaR
DAAbpYEPXf/701hm1K/HKBxzuQua4s2KH+GmasXJI5U+p9+wr61nD80sgIlPeIA2
FqTgsWC3lh4GS4E6D9P3WG+sTpxlcErL88RqbqsAxvYSneurjyuWI7lYDl3JvMh8
XE//jAGx3JC2ma+7EWXbz19QXNknmBPkUPPhaaaLTMjuqwyI8OhXN2QYjiHOHOII
ptKDfRbSuZfoXKcy9ls/bS2Y7MJnfneca0y14TbXxGfyC+tU+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5KLIc273FNkziXjj/SqPBouYMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMTA4YjIyNjktNzIyNC0z
ZjIwLWIxZjgtZTU5YmQ4NjU5MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJb1WeTk2YhzUOE+sF3ScWEULOwjQDj8szdgoVXhbchWNzuQqShnstvM
jwQgA0hvu079V/oEhOD+tWNhgKiKWHeehaqmiaUbw2Sr3bTrsZLXhibgrlTyI1b3
VZLCEeEs5d9qKaGnOiYzY2Uscj1IGFS9da+tzby5+j1DccxTc8G1DuKksD8Ewnjv
z6FTXE0X4nfHd+iYiRvIRLNc8FZlRyloawV50to89G0+dPl1neWLJxUsBzPT1woM
LnDnYyhSpazv1MiuwhymP1W1Gi3gMrGrFNQaE9Gvn1J3ebtm31UPi4XwaA63DJ3E
PN+RKCt4cgOMg0nHGnIhY6KOkMZZjeU=
-----END CERTIFICATE-----
Generated at Mon Aug 7 15:18:47 2023 by rpki-client on console-fra.rpki-client.org