Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/67a4e318-180b-3aa3-9ef4-d22bca3dbf6b.roa
File: 67a4e318-180b-3aa3-9ef4-d22bca3dbf6b.roa (raw, json)
Hash identifier: TIF2kEJdRvYWAlm9TTO8QCoiyKCivF/LtNq1Issi1nY=
Subject key identifier: 7D:F4:68:D3:C6:08:F9:71:2F:94:29:BF:55:93:B4:DE:83:0C:5E:DE
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858423A58741E31BE41B4737CA520
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/67a4e318-180b-3aa3-9ef4-d22bca3dbf6b.roa
Signing time: Thu 15 Jun 2023 13:00:18 +0000
ROA not before: Thu 15 Jun 2023 13:00:18 +0000
ROA not after: Wed 13 Sep 2023 13:00:18 +0000
asID: 7862
IP address blocks: 146.23.4.0/22 maxlen: 24
146.23.12.0/22 maxlen: 24
146.23.24.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:3a:58:74:1e:31:be:41:b4:73:7c:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Jun 15 13:00:18 2023 GMT
Not After : Sep 13 13:00:18 2023 GMT
Subject: CN=457bd66a-3972-4de1-9338-881b84342e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:9e:c7:71:55:15:58:ec:21:70:28:38:15:
5e:94:d8:48:e9:c3:d9:99:ad:d3:7d:b7:b7:96:28:
ce:7c:f7:be:e7:8d:91:06:57:97:a7:3b:e4:d8:20:
25:d4:05:7f:cf:71:95:39:9b:6a:37:55:63:94:d2:
ce:29:1b:2d:87:ac:b7:98:4c:72:a8:03:ac:1e:7a:
c7:7b:49:ce:8f:31:7e:72:35:35:92:99:49:e5:11:
2f:c6:b7:d3:57:92:e6:6a:25:b1:ae:80:68:bd:df:
1b:a8:bc:69:b4:e5:6d:4e:0a:83:1e:ab:fe:70:21:
0f:cc:0d:0a:b1:70:ab:ac:4b:e2:e3:b1:34:f7:e0:
b5:fd:10:24:15:15:46:8d:b1:17:37:03:8d:84:b9:
37:9d:46:33:32:5d:68:35:d0:27:e2:c5:21:11:56:
46:8a:a8:5f:97:f0:f3:69:c2:50:63:33:82:11:6e:
72:fd:3c:57:0f:89:2e:83:8f:aa:69:38:77:ad:3b:
b2:1e:7e:37:7e:e3:5e:11:c1:cc:de:b9:ae:85:06:
ff:ae:92:bc:86:4a:97:57:d9:fe:97:5f:a2:c6:f5:
b3:09:46:81:e2:6d:d7:ce:c2:de:36:f0:bd:d5:35:
18:69:06:65:0b:21:9d:3c:3c:fb:3f:d6:a9:8d:91:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:68:D3:C6:08:F9:71:2F:94:29:BF:55:93:B4:DE:83:0C:5E:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/67a4e318-180b-3aa3-9ef4-d22bca3dbf6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.4.0/22
146.23.12.0/22
146.23.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:55:a4:12:04:4a:b6:ea:6b:24:bf:4d:2b:04:15:3c:75:7e:
4f:8c:5b:52:be:bf:3f:a8:8f:81:9a:9f:2c:24:7b:ae:1b:f2:
e9:48:5a:af:06:2a:d5:4b:6d:fe:fe:ba:5d:a5:11:8c:c9:1d:
9e:a0:59:0f:12:60:69:61:ac:1d:f0:68:e2:d6:fb:9e:97:4e:
b3:f8:67:0c:f1:84:cf:5c:a2:c4:c9:9b:1e:62:de:7f:b7:de:
0c:ad:7b:cc:83:23:05:16:78:63:b6:55:fa:6c:ae:ec:1b:b2:
96:48:ce:df:6f:b1:7c:e5:41:8b:17:59:b0:ea:df:fb:c5:93:
03:7d:fa:85:1b:9b:8d:95:9e:d7:2b:ad:17:da:17:00:a0:b4:
de:c8:84:e6:ab:8d:a1:a6:d0:91:1d:c7:c5:cb:0e:f4:80:3f:
1b:7c:db:cd:15:d6:05:bd:51:c8:74:03:0b:6d:02:cc:4b:03:
22:fd:e5:35:b0:ac:99:b4:d2:6f:6d:0f:af:f7:51:58:4a:07:
ba:c4:7a:02:95:a2:24:a5:f4:8a:e2:7f:e3:2a:a6:f3:59:cb:
6b:ed:1c:65:a7:7b:f7:25:8b:24:da:ef:a3:79:50:35:71:d2:
48:a1:b0:62:3b:7f:46:50:63:33:da:ec:20:c7:18:5d:18:77:
d4:20:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 15:18:47 2023 by rpki-client on console-fra.rpki-client.org