Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/660919b0-2d6e-3c4c-8b4e-26f116226474.roa
File: 660919b0-2d6e-3c4c-8b4e-26f116226474.roa (raw, json)
Hash identifier: s9ZohBLeHE5MUUsTOwNZvGAtorR9hwJgNmWGDxPUFLE=
Subject key identifier: A4:8A:31:DB:13:3C:AF:F4:5F:B5:B4:EB:3F:7B:36:DC:49:54:7F:14
Certificate issuer: /CN=274c26e3-a417-425b-8d4b-316c68f35e06
Certificate serial: 010D0C9F4328583E9C98D3026563CCC69CF34634
Authority key identifier: 3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/660919b0-2d6e-3c4c-8b4e-26f116226474.roa
Signing time: Tue 21 Jun 2022 13:50:44 +0000
ROA not before: Tue 21 Jun 2022 13:50:44 +0000
ROA not after: Mon 23 Sep 2024 04:00:00 +0000
asID: 14618
IP address blocks: 208.100.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9c:98:d3:02:65:63:cc:c6:9c:f3:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274c26e3-a417-425b-8d4b-316c68f35e06
Validity
Not Before: Jun 21 13:50:44 2022 GMT
Not After : Sep 23 04:00:00 2024 GMT
Subject: CN=2105a0f7-c43e-41bc-a7bc-1d475ead6760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:50:fb:5f:57:cf:82:b8:2a:c9:3c:90:bb:
2e:28:06:2c:6b:00:9d:84:c7:6f:95:e0:67:c5:83:
27:5c:55:db:3c:ed:3a:7f:7d:3e:1f:ed:22:f6:74:
90:b3:4e:3d:b0:75:95:43:d5:df:49:bf:1b:e7:04:
4b:ed:77:17:2a:b2:d1:58:5b:7b:5c:9d:e7:ad:97:
34:cb:21:63:fc:7c:2a:38:7a:19:fa:8b:ee:7c:77:
7d:37:36:04:9a:ec:cd:a7:26:4a:bc:86:f4:cc:b7:
22:62:86:f2:cd:b5:28:5d:30:14:a1:81:29:4d:41:
3c:2f:a4:65:92:42:18:68:1c:e0:de:f5:dc:68:fa:
df:c5:0a:f7:06:57:ba:6f:de:85:29:71:c9:3e:62:
0c:f1:4f:de:e0:6d:dd:08:ae:f2:a7:ff:11:2c:ac:
16:7c:9e:68:13:f4:a2:3e:f0:86:3d:f0:70:26:89:
39:48:8f:da:32:6a:3e:38:5d:f5:9b:7b:a4:5f:ef:
c4:bd:dd:06:8c:79:61:d5:a5:d6:00:75:4f:4f:d8:
40:96:22:a8:f6:ce:26:23:db:e8:6c:ab:98:5a:05:
be:50:14:55:b3:63:29:d6:53:09:79:9d:10:5c:af:
47:b1:b5:da:74:7a:87:8c:c5:00:79:23:08:23:2c:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:31:DB:13:3C:AF:F4:5F:B5:B4:EB:3F:7B:36:DC:49:54:7F:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/660919b0-2d6e-3c4c-8b4e-26f116226474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.crl
X509v3 Authority Key Identifier:
keyid:3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
sbgp-ipAddrBlock: critical
IPv4:
208.100.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:79:fa:9a:15:1c:7e:0e:04:b9:01:24:a5:33:09:c6:5f:60:
a1:c7:1a:9a:91:53:a3:07:ff:1f:66:f6:2d:bb:ca:d6:c7:b7:
bd:89:6e:36:29:bf:b5:6c:d1:72:5e:be:20:93:15:fd:2a:cb:
ff:96:2b:c0:80:2d:7d:8a:52:61:b9:58:1a:57:35:1c:29:e2:
aa:73:d8:d6:86:04:0b:3f:2c:0d:5e:2c:59:da:f8:b5:ec:f0:
d3:09:b4:98:dd:3a:12:b1:32:87:d7:d5:9c:b2:d8:51:4c:98:
f3:1c:b6:b5:3b:b5:e2:d3:77:b7:2f:47:b1:28:e9:db:ac:73:
95:1b:2a:a5:04:92:9f:d5:0f:a1:60:05:eb:5c:37:47:5e:6a:
ee:a2:5f:00:86:4e:3b:eb:8d:0c:24:6e:86:7a:d4:78:8d:08:
17:3b:f6:92:d8:14:59:eb:74:2f:60:e1:5b:3e:95:f6:29:9b:
0c:f0:d1:f4:1d:73:1c:1f:5f:a2:f0:4e:2e:fd:68:f9:bc:55:
f4:93:dd:83:c6:c2:36:67:14:5e:ff:65:fb:bf:33:5c:01:0b:
ce:93:be:b7:b5:27:f5:ce:d2:3a:92:49:a4:d5:9f:1c:ad:8a:
79:b2:75:81:fb:97:86:69:38:4e:6a:51:c5:fc:a0:08:5d:ca:
be:30:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:46 2024 by rpki-client on console-ams.rpki-client.org