Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/53a67c5d-0e21-30dd-a2bd-5249fa99a223.roa
File: 53a67c5d-0e21-30dd-a2bd-5249fa99a223.roa (raw, json)
Hash identifier: FMhKuLCj6zPZYsNy0XvzL4n07X/GQEU/DI0JFIOotnA=
Subject key identifier: C1:98:E3:CF:52:AD:EA:1B:A9:80:78:EB:D4:32:4D:56:35:96:C7:D9
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858426868BD9146F4793D38026E80
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/53a67c5d-0e21-30dd-a2bd-5249fa99a223.roa
Signing time: Sun 02 Jul 2023 01:00:17 +0000
ROA not before: Sun 02 Jul 2023 01:00:17 +0000
ROA not after: Sat 30 Sep 2023 01:00:17 +0000
asID: 7862
IP address blocks: 146.23.28.0/22 maxlen: 24
146.23.62.0/23 maxlen: 24
146.23.234.0/23 maxlen: 24
144.5.224.0/21 maxlen: 24
146.23.8.0/22 maxlen: 24
146.23.16.0/22 maxlen: 24
146.23.20.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:68:68:bd:91:46:f4:79:3d:38:02:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Jul 2 01:00:17 2023 GMT
Not After : Sep 30 01:00:17 2023 GMT
Subject: CN=04a510ab-0002-4152-97cd-4dee5d2f496c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:6b:d2:0b:7a:f0:50:fa:69:7e:3c:2c:7d:
70:fd:5d:aa:3c:2b:6f:17:a6:87:91:d0:fe:3d:45:
4a:a4:e8:b5:f5:3a:bb:5f:18:f1:1c:1b:31:d4:64:
7b:02:97:fb:15:fe:c6:df:da:16:81:9e:1c:cf:04:
3b:a9:d4:57:50:be:26:c2:8a:dc:05:b7:18:37:b8:
49:65:e0:78:69:a7:4a:7f:78:03:22:cb:61:4d:1b:
64:de:aa:c8:26:20:14:02:5f:3c:86:41:b9:57:fc:
6f:26:dd:38:c5:44:7b:70:d0:df:ef:ca:9d:29:a5:
de:1c:96:a2:b8:cf:76:f4:78:ce:8a:38:51:b4:ed:
c4:f6:0f:bd:98:07:b8:3b:54:e2:1b:61:a1:ad:65:
2b:17:71:fb:c8:18:8a:a4:52:37:2f:97:f4:e8:a5:
2b:58:9c:91:a0:64:4b:41:0f:07:7c:a7:84:22:21:
d4:e9:7d:98:c0:c1:be:61:35:55:33:af:61:3d:14:
b4:e0:4b:2f:27:c7:28:30:db:b2:75:5e:c0:f2:f1:
ff:23:b5:22:06:b6:63:fa:5a:3b:ce:c7:13:93:ca:
96:7d:91:54:f4:9f:70:0c:00:25:fe:5f:9b:6b:e1:
51:95:4b:9b:78:2d:8d:40:6d:75:6a:49:3c:48:fa:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:E3:CF:52:AD:EA:1B:A9:80:78:EB:D4:32:4D:56:35:96:C7:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/53a67c5d-0e21-30dd-a2bd-5249fa99a223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
144.5.224.0/21
146.23.8.0/22
146.23.16.0/21
146.23.28.0/22
146.23.62.0/23
146.23.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c0:e3:2a:8f:f6:60:9f:ed:77:0d:2a:5a:80:61:0b:cf:35:
54:7b:f9:86:4c:89:84:da:03:9a:b6:89:c0:34:75:22:8b:1f:
e5:5d:27:a4:a2:21:cf:c9:86:e5:7a:c1:88:33:1b:14:9e:e6:
b0:6d:28:f0:19:c1:b8:9e:72:2a:d9:d7:24:bf:ef:df:de:bd:
af:0a:70:45:9c:9b:8e:fa:4e:e5:f6:cd:f7:30:f1:47:8f:c8:
7f:c5:fb:f6:d7:7d:44:a0:9b:2b:00:fc:3a:c3:24:6f:22:7a:
41:ef:12:8b:98:20:2e:88:68:c8:fd:67:f7:99:3b:a4:6f:c6:
37:3f:3d:ac:fb:91:b0:a5:5e:ca:58:85:ab:62:1f:16:d0:ac:
12:51:57:0c:e1:18:40:05:0f:8f:fa:ee:8f:5c:e6:96:91:0f:
9e:66:2c:1e:4d:1f:25:9c:1f:9f:df:a2:ef:c0:8b:9e:7b:a6:
b0:2a:d2:72:f4:5d:58:fb:b9:c6:22:cf:b8:f1:a1:84:7e:6f:
3a:26:c2:b1:20:d5:b6:8a:e3:46:d0:1a:d1:d9:bf:1b:c9:08:
37:2b:6d:e1:5c:d3:a2:8e:cf:5f:ce:6a:20:42:59:60:b2:7c:
d2:80:ac:10:5c:dc:75:6b:de:d2:62:09:60:0e:df:19:ed:71:
d4:dc:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 15:15:39 2023 by rpki-client on console-ams.rpki-client.org