Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/7552055f-f697-3dd8-a131-9932dddd39b7.roa
File: 7552055f-f697-3dd8-a131-9932dddd39b7.roa (raw, json)
Hash identifier: cxiTi+34GdPyRBFlBQHG1tBNbpU7LakQXZVLUGJ63gg=
Subject key identifier: 6D:14:3C:32:A3:24:A1:DF:B8:F5:FB:35:76:FF:23:D3:A2:D6:AE:52
Certificate issuer: /CN=0df68c98-3079-4c70-b541-3876a7d543db
Certificate serial: 010D0C9F4328583A8FA720EDBC8234CE9047E080
Authority key identifier: 32:B3:E0:6E:B3:71:60:77:E7:D4:B4:D7:7C:E5:7B:92:A3:43:8D:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/7552055f-f697-3dd8-a131-9932dddd39b7.roa
Signing time: Fri 09 Jul 2021 04:00:00 +0000
ROA not before: Fri 09 Jul 2021 04:00:00 +0000
ROA not after: Sun 15 Oct 2023 04:00:00 +0000
asID: 6939
IP address blocks: 45.40.105.0/24 maxlen: 24
45.40.109.0/24 maxlen: 24
45.40.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:8f:a7:20:ed:bc:82:34:ce:90:47:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df68c98-3079-4c70-b541-3876a7d543db
Validity
Not Before: Jul 9 04:00:00 2021 GMT
Not After : Oct 15 04:00:00 2023 GMT
Subject: CN=fdf65e10-440e-47be-8aea-9cf7c02690fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:e2:95:43:73:65:3d:b1:e5:3b:20:df:bc:
5f:2a:3e:50:fe:6b:fe:ee:d6:7a:16:e4:dd:cb:dc:
65:b3:36:bd:e3:8c:7d:88:2a:0e:40:52:a1:bc:26:
f3:85:c0:48:cd:fd:20:f5:cf:af:11:a2:bd:2a:8e:
7d:3a:fb:b3:1d:00:7f:d4:69:12:f4:60:15:5a:e2:
ac:98:5b:ca:57:73:4a:51:34:53:1b:62:f9:5a:13:
d7:74:0d:4e:86:c4:4b:3e:75:e9:54:f2:6c:99:c4:
eb:0b:d1:cf:20:cd:43:52:73:97:7e:f2:88:54:ce:
1b:ab:66:fe:79:6f:ed:1a:91:b6:ab:ca:69:47:e8:
2a:7f:d7:7a:06:85:c4:7f:3d:26:42:d4:0c:ed:9b:
44:f1:5f:79:2e:3c:f1:c7:f8:59:d6:17:e6:f5:33:
15:7b:2e:0b:e1:e8:b2:74:a9:33:9f:26:61:2b:19:
49:d7:97:86:fe:bc:77:c6:e8:15:02:6c:9e:e0:2a:
34:07:e3:f1:f4:bf:3c:c2:b1:6f:37:07:01:f1:27:
2b:ea:c2:57:38:6a:51:3d:0e:fa:e3:71:2a:02:59:
65:15:c2:27:c4:b2:89:10:31:39:1b:b7:5a:7f:28:
b4:50:2e:30:84:0e:6e:d1:1c:ff:a6:85:e8:8a:db:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:14:3C:32:A3:24:A1:DF:B8:F5:FB:35:76:FF:23:D3:A2:D6:AE:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/7552055f-f697-3dd8-a131-9932dddd39b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db/0df68c98-3079-4c70-b541-3876a7d543db.crl
X509v3 Authority Key Identifier:
keyid:32:B3:E0:6E:B3:71:60:77:E7:D4:B4:D7:7C:E5:7B:92:A3:43:8D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0df68c98-3079-4c70-b541-3876a7d543db.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.105.0/24
45.40.109.0-45.40.110.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:2e:b9:e9:08:ea:05:69:b9:0d:81:33:cd:24:5d:6c:58:5a:
85:d1:ae:b6:74:d9:68:66:19:19:b7:8b:f7:6f:20:b3:67:42:
ab:36:29:79:e1:58:d0:46:ac:5f:b7:83:5e:92:2a:41:79:f3:
d6:70:77:20:04:44:a3:11:00:9f:67:f3:79:c9:a1:3e:f1:9e:
91:bc:f6:58:96:81:d4:81:48:f2:6b:5c:df:e8:d9:2f:65:6b:
36:8a:2e:81:3e:06:26:18:40:e8:fb:c8:dc:22:96:26:a2:2c:
ba:1d:17:21:de:3b:26:b9:cc:9d:62:b9:3e:45:bf:e0:30:2e:
57:83:6f:7a:c8:00:f7:58:af:5e:e5:de:e4:15:83:0c:fe:96:
c9:89:d0:b9:ee:bc:23:d0:79:3b:54:1a:f0:62:54:e3:07:96:
e4:39:37:f0:0c:cf:0e:c8:85:c5:d0:19:ee:35:3a:35:bc:b3:
ef:38:47:dc:d7:05:94:e3:9f:78:99:7a:01:68:f0:00:99:10:
57:04:b0:b0:7f:37:6e:ec:df:42:52:cc:bc:7e:be:b1:90:6f:
fe:3f:f8:d1:0c:ee:bc:60:51:ff:d6:f0:6f:95:6d:27:ad:69:
71:64:fd:05:70:e0:41:83:ac:2c:dd:1c:c9:0e:7c:73:f8:64:
2e:84:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:31 2023 by rpki-client on console-fra.rpki-client.org