Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/3c90ac7a-97c2-3e5e-9bd3-10152989b17c.roa
File: 3c90ac7a-97c2-3e5e-9bd3-10152989b17c.roa (raw, json)
Hash identifier: yDBE+69V1kBb/5kAIWZnUfIsdJijbUFgTpC9k15Wh2g=
Subject key identifier: 55:7B:AA:11:57:3F:65:20:D0:37:06:5A:F6:97:34:D9:FD:A0:DE:90
Certificate issuer: /CN=274c26e3-a417-425b-8d4b-316c68f35e06
Certificate serial: 010D0C9F4328583E83A1146BE186BDE85CB67C80
Authority key identifier: 3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/3c90ac7a-97c2-3e5e-9bd3-10152989b17c.roa
Signing time: Tue 21 Jun 2022 13:50:44 +0000
ROA not before: Tue 21 Jun 2022 13:50:44 +0000
ROA not after: Mon 23 Sep 2024 04:00:00 +0000
asID: 16509
IP address blocks: 208.100.192.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:83:a1:14:6b:e1:86:bd:e8:5c:b6:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274c26e3-a417-425b-8d4b-316c68f35e06
Validity
Not Before: Jun 21 13:50:44 2022 GMT
Not After : Sep 23 04:00:00 2024 GMT
Subject: CN=9d3ac06d-a30e-493a-b4ca-b0baff54a233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:c7:65:72:2d:59:ce:3a:b2:18:16:44:5d:
2c:63:1a:2c:dc:7e:0b:8a:25:70:31:b9:0f:48:e4:
1e:d0:7e:7d:14:c5:59:e1:ac:b2:b7:44:0c:9e:13:
6c:80:d6:c4:5f:86:a9:4d:73:83:c2:78:4e:ff:89:
80:ca:fa:e8:d8:d3:7b:5d:88:97:c4:03:30:7d:41:
12:5f:63:49:68:5a:05:72:06:49:94:74:ee:f4:2e:
f7:9f:8e:bf:40:64:7b:9b:bd:b1:03:5e:79:a4:08:
22:2a:d1:fd:ee:03:37:5a:34:63:b9:ee:3e:22:90:
81:6b:ee:7d:70:90:4d:6a:a7:bb:3c:95:05:48:63:
2a:ba:5a:8c:ac:35:73:a4:ba:6d:03:29:75:4d:e0:
bc:94:35:3b:ee:d7:11:cf:8b:21:b3:ab:e1:7f:b4:
ec:a0:d1:8e:f6:61:4f:21:85:fc:5b:43:06:01:cb:
a6:28:70:32:01:e9:60:1c:90:6d:e5:b8:a7:18:3f:
a9:52:db:d5:eb:74:ac:ce:e3:83:b4:c0:a3:b4:a2:
34:47:cf:cb:cf:38:96:c6:89:bd:b5:db:08:52:54:
be:d5:50:51:6d:38:4b:dc:33:24:b9:b8:97:12:bf:
6f:a8:c8:b8:8d:0d:62:fd:48:e5:c5:ce:40:45:34:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:AA:11:57:3F:65:20:D0:37:06:5A:F6:97:34:D9:FD:A0:DE:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/3c90ac7a-97c2-3e5e-9bd3-10152989b17c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.crl
X509v3 Authority Key Identifier:
keyid:3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
sbgp-ipAddrBlock: critical
IPv4:
208.100.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:be:07:8c:c8:30:c2:e3:e9:7b:a1:af:40:c8:d4:1b:e5:33:
59:94:f1:7f:c2:50:b2:86:2d:c6:b6:e7:11:5a:53:68:f3:3f:
00:98:c0:27:4f:0d:09:85:2f:59:28:09:81:99:ad:3d:b0:de:
19:df:6a:3c:7c:c3:2c:98:a1:0d:15:e1:44:fb:53:94:a4:7e:
37:d1:99:66:f1:69:72:f1:71:1e:35:e4:4e:f2:c0:09:c6:dc:
57:e2:71:77:78:38:cf:70:85:9a:c0:59:f6:75:4c:6a:c0:3e:
a2:fe:33:76:b3:a0:39:8e:10:b4:7c:76:24:44:c8:38:21:e6:
4f:15:41:ef:61:43:08:09:6a:b5:35:af:04:47:d0:3f:6c:61:
f7:c9:bc:ac:f2:b6:8b:ef:1c:7e:df:ae:cf:e0:a2:d8:41:d8:
0a:cf:28:87:b0:8a:f7:56:48:bf:09:ce:fd:72:29:13:13:0a:
ad:77:f8:97:83:c2:16:fc:c8:8c:90:86:44:0e:87:3e:08:b0:
f9:fc:97:bd:92:6a:2b:32:9e:c2:25:d6:6b:e9:08:82:27:25:
0d:42:20:0f:7e:91:e4:9b:12:fb:b7:b4:dc:b4:8f:48:a9:35:
ee:84:23:64:28:71:38:e4:13:eb:2e:3f:ce:e4:43:46:3f:dc:
29:46:05:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6DoRRr4Ya96Fy2fIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc0YzI2ZTMtYTQxNy00MjViLThkNGItMzE2YzY4ZjM1
ZTA2MB4XDTIyMDYyMTEzNTA0NFoXDTI0MDkyMzA0MDAwMFowLzEtMCsGA1UEAxMk
OWQzYWMwNmQtYTMwZS00OTNhLWI0Y2EtYjBiYWZmNTRhMjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1zHZXItWc46shgWRF0sYxos3H4LiiVwMbkP
SOQe0H59FMVZ4ayyt0QMnhNsgNbEX4apTXODwnhO/4mAyvro2NN7XYiXxAMwfUES
X2NJaFoFcgZJlHTu9C73n46/QGR7m72xA155pAgiKtH97gM3WjRjue4+IpCBa+59
cJBNaqe7PJUFSGMqulqMrDVzpLptAyl1TeC8lDU77tcRz4shs6vhf7TsoNGO9mFP
IYX8W0MGAcumKHAyAelgHJBt5binGD+pUtvV63SszuODtMCjtKI0R8/LzziWxom9
tdsIUlS+1VBRbThL3DMkubiXEr9vqMi4jQ1i/Ujlxc5ARTQaSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFV7qhFXP2Ug0DcGWvaXNNn9oN6QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yNzRj
MjZlMy1hNDE3LTQyNWItOGQ0Yi0zMTZjNjhmMzVlMDYvM2M5MGFjN2EtOTdjMi0z
ZTVlLTliZDMtMTAxNTI5ODliMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjc0YzI2ZTMtYTQxNy00MjViLThk
NGItMzE2YzY4ZjM1ZTA2LzI3NGMyNmUzLWE0MTctNDI1Yi04ZDRiLTMxNmM2OGYz
NWUwNi5jcmwwHwYDVR0jBBgwFoAUPr7BT5aqfZ3RR3rP7CVYljNFtZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yNzRjMjZlMy1hNDE3LTQyNWItOGQ0Yi0zMTZj
NjhmMzVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6+B4zIMMLj6Xuhr0DI1BvlM1mU8X/CULKGLca25xFaU2jzPwCYwCdP
DQmFL1koCYGZrT2w3hnfajx8wyyYoQ0V4UT7U5SkfjfRmWbxaXLxcR415E7ywAnG
3FficXd4OM9whZrAWfZ1TGrAPqL+M3azoDmOELR8diREyDgh5k8VQe9hQwgJarU1
rwRH0D9sYffJvKzytovvHH7frs/gothB2ArPKIewivdWSL8Jzv1yKRMTCq13+JeD
whb8yIyQhkQOhz4IsPn8l72SaisynsIl1mvpCIInJQ1CIA9+keSbEvu3tNy0j0ip
Ne6EI2QocTjkE+suP87kQ0Y/3ClGBQo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org