Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/9cdf3815-d91f-392e-98f6-19578230c8ee.roa
File: 9cdf3815-d91f-392e-98f6-19578230c8ee.roa (raw, json)
Hash identifier: uEqf70SHKhG4hvjZcOXCAc1o8j2bv+GM2xZp+L70Zak=
Subject key identifier: 5E:51:87:FD:09:E4:41:4E:48:52:CC:9E:63:C8:CC:80:8C:61:68:7F
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F432858433C94C9D2885421D18F058680
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/9cdf3815-d91f-392e-98f6-19578230c8ee.roa
Signing time: Sat 16 Sep 2023 01:00:22 +0000
ROA not before: Sat 16 Sep 2023 01:00:22 +0000
ROA not after: Fri 15 Dec 2023 02:00:22 +0000
asID: 14618
IP address blocks: 207.223.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:3c:94:c9:d2:88:54:21:d1:8f:05:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Sep 16 01:00:22 2023 GMT
Not After : Dec 15 02:00:22 2023 GMT
Subject: CN=4c07380f-3bdf-4c97-8f32-ddc0a22ca3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:1b:2c:49:b1:7b:ae:10:58:ab:15:f2:c0:
4d:00:02:9c:fe:71:d1:6f:0a:d7:1e:4f:1b:03:a7:
84:52:92:6f:c1:89:f6:44:6e:0a:b1:94:7b:36:05:
fe:73:40:55:d0:82:7a:27:b2:27:9f:23:6c:15:c3:
2e:95:56:14:a1:9c:1d:94:4a:3b:81:ef:59:75:00:
ca:e7:e3:b1:7c:26:58:42:a5:d9:6f:52:72:fc:15:
ba:75:b2:ef:7c:7e:97:f9:91:42:c1:62:da:47:73:
44:0f:ef:65:a2:eb:14:04:08:8d:cf:4d:0c:1e:de:
ea:46:b6:32:97:7b:dd:a9:9d:6f:aa:24:00:2a:63:
ad:51:32:4a:d6:8b:92:50:40:ea:4d:01:d0:f5:fa:
5d:a9:82:af:9a:f1:f1:21:9d:6a:dc:51:00:f1:24:
ed:d4:1c:bb:9a:2e:6b:6a:e6:5f:55:70:4b:09:5a:
a9:45:13:ae:02:0c:aa:e0:e2:55:06:67:1b:f7:65:
75:ac:aa:9f:0a:f0:24:ce:1b:c1:5e:97:eb:1e:cd:
ae:dc:57:80:1e:41:81:10:df:f3:be:f1:26:f0:b4:
80:08:0d:b9:ec:35:9c:f5:24:2b:11:e6:e6:0a:b7:
19:80:2a:88:42:ce:0b:e7:91:0f:19:80:53:60:6e:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:87:FD:09:E4:41:4E:48:52:CC:9E:63:C8:CC:80:8C:61:68:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/9cdf3815-d91f-392e-98f6-19578230c8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
207.223.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:bb:0c:aa:9d:38:be:28:d4:0f:93:7c:27:f2:d7:1a:fa:e8:
2b:e6:98:f3:f5:99:40:7c:63:22:26:46:08:34:b7:77:c2:72:
12:35:3f:1b:9e:44:37:d7:b0:b3:ee:44:a1:9b:b7:82:12:f9:
ae:c8:19:0f:97:87:dd:6d:4d:41:3a:00:23:11:f5:fe:ac:16:
c0:0e:d0:98:ca:87:b0:53:2a:61:88:2b:02:b9:c2:06:6a:62:
fb:01:21:3c:f2:7f:2d:88:52:11:a2:78:bd:5c:70:10:df:e8:
29:bc:b6:3d:5c:42:f8:ce:7b:9b:f6:99:a2:74:9a:31:5a:87:
bc:97:7c:a7:2e:6a:49:23:1f:5a:64:c2:59:00:7b:b5:e8:db:
91:0a:8d:3e:eb:1c:1c:c7:4e:8e:6e:97:06:2d:7d:a1:02:69:
b0:58:ff:af:78:38:ef:15:91:bb:49:20:ab:e0:5f:da:17:f4:
37:f3:8c:d9:16:30:b5:e5:48:5f:a3:47:78:8f:92:65:00:84:
c1:af:a5:e1:d1:89:5c:59:f7:2f:c5:db:d5:6b:ff:3f:d1:d5:
73:81:48:37:ed:9c:30:63:e0:2f:ec:e7:1c:67:42:41:86:8d:
e2:74:4b:81:ab:de:6e:44:65:45:01:e7:9c:3f:25:cf:3f:47:
a3:4a:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 11:36:17 2023 by rpki-client on console-fra.rpki-client.org