Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/724c80f1-e3f4-3c47-83b6-b891e551090b.roa
File: 724c80f1-e3f4-3c47-83b6-b891e551090b.roa (raw, json)
Hash identifier: 4jG/WxWpTjt1XsH61cpt2JWxusXRWachVGto3nX89d0=
Subject key identifier: 48:16:7C:7F:7B:B1:C5:E4:5B:AF:2E:74:61:F5:E4:BC:26:18:9B:1C
Certificate issuer: /CN=274c26e3-a417-425b-8d4b-316c68f35e06
Certificate serial: 010D0C9F4328583E9C97CC30192DAFA60DB78D00
Authority key identifier: 3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/724c80f1-e3f4-3c47-83b6-b891e551090b.roa
Signing time: Tue 21 Jun 2022 13:50:44 +0000
ROA not before: Tue 21 Jun 2022 13:50:44 +0000
ROA not after: Mon 23 Sep 2024 04:00:00 +0000
asID: 16509
IP address blocks: 208.100.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9c:97:cc:30:19:2d:af:a6:0d:b7:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274c26e3-a417-425b-8d4b-316c68f35e06
Validity
Not Before: Jun 21 13:50:44 2022 GMT
Not After : Sep 23 04:00:00 2024 GMT
Subject: CN=52945a1d-dd0e-4282-846b-4f36f5bca155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:85:78:22:3b:c8:f8:8a:66:26:3c:48:ed:
7c:bc:ea:c2:ae:f1:c7:bd:ca:6f:03:db:9c:dc:81:
73:7f:37:a6:43:b6:ac:f2:9e:de:34:7f:a0:ce:92:
e0:e7:bb:ca:c5:91:fc:43:41:11:e0:26:dc:03:35:
4b:f9:32:32:87:c4:b6:1d:a0:11:9a:98:61:9e:27:
a1:e6:5b:9f:92:0a:1e:43:dc:20:27:18:76:01:29:
cd:2a:09:21:28:05:e4:6d:6b:30:53:41:39:bb:9e:
cb:8b:f8:77:35:21:68:f7:aa:c9:f7:6b:55:59:96:
15:9b:53:75:a4:98:40:64:d8:80:a2:4c:dc:97:bf:
38:e2:b8:1d:94:af:72:17:fd:a7:b2:ff:25:ae:ae:
31:52:8b:8a:8c:c1:0a:0d:28:cc:2f:c1:68:5d:ce:
9d:63:a4:ba:f4:c0:b4:f9:c9:46:dd:b0:d0:e1:16:
ba:72:29:e6:ce:09:9e:ef:ec:7b:b1:b1:0e:f4:9c:
55:4f:76:bd:65:7a:0a:ce:40:a3:8d:5c:a4:ea:4d:
01:2e:40:7e:1a:63:21:81:0e:ca:e5:55:db:50:31:
9c:1e:fa:51:f3:f6:c8:c4:be:57:a9:0b:10:98:df:
65:0c:d8:fe:e4:a8:85:8c:26:b4:3e:11:fd:ed:04:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:7C:7F:7B:B1:C5:E4:5B:AF:2E:74:61:F5:E4:BC:26:18:9B:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/724c80f1-e3f4-3c47-83b6-b891e551090b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.crl
X509v3 Authority Key Identifier:
keyid:3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
sbgp-ipAddrBlock: critical
IPv4:
208.100.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ef:a8:1e:af:ef:06:77:a0:10:c5:48:03:a4:8a:c6:c6:b7:
6f:1c:8b:8d:83:31:ff:88:fd:12:99:17:e9:9e:27:f6:ca:ec:
3b:33:8e:6f:a3:7d:10:a8:e9:e8:d6:e8:1d:b0:e8:48:aa:a0:
f0:66:6d:3a:72:2a:62:8b:44:26:69:7c:bd:51:ee:cb:e2:c5:
92:86:5c:06:06:84:37:e7:3e:28:d6:4f:30:c3:62:dc:2b:90:
43:57:dd:b0:86:19:d8:2a:c6:e6:65:53:50:43:06:cc:f6:c1:
15:64:7a:5c:47:a2:00:73:0a:54:88:e0:1f:f2:aa:87:3d:f7:
a8:60:cc:7d:e0:c6:79:57:0c:60:2e:22:56:22:e6:ad:16:5a:
07:bd:83:61:48:71:57:ef:55:a5:fc:15:75:0a:e4:bc:07:97:
b2:43:0d:15:d3:08:fe:4a:ec:bf:64:f8:31:b0:91:1a:25:e8:
64:a9:e4:77:eb:b1:b7:bf:55:f7:92:f3:15:d7:c3:f1:c9:fc:
49:06:c8:8d:01:d6:11:8d:6a:ee:cd:dc:b6:77:76:d9:db:b4:
50:e0:9d:28:66:bc:9f:13:0a:4a:eb:90:ad:f3:a3:45:60:e8:
e0:b2:31:e2:57:c3:55:54:51:76:ee:67:12:43:19:b9:b9:d8:
f5:7a:30:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6cl8wwGS2vpg23jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc0YzI2ZTMtYTQxNy00MjViLThkNGItMzE2YzY4ZjM1
ZTA2MB4XDTIyMDYyMTEzNTA0NFoXDTI0MDkyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTI5NDVhMWQtZGQwZS00MjgyLTg0NmItNGYzNmY1YmNhMTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwSFeCI7yPiKZiY8SO18vOrCrvHHvcpvA9uc
3IFzfzemQ7as8p7eNH+gzpLg57vKxZH8Q0ER4CbcAzVL+TIyh8S2HaARmphhnieh
5lufkgoeQ9wgJxh2ASnNKgkhKAXkbWswU0E5u57Li/h3NSFo96rJ92tVWZYVm1N1
pJhAZNiAokzcl7844rgdlK9yF/2nsv8lrq4xUouKjMEKDSjML8FoXc6dY6S69MC0
+clG3bDQ4Ra6cinmzgme7+x7sbEO9JxVT3a9ZXoKzkCjjVyk6k0BLkB+GmMhgQ7K
5VXbUDGcHvpR8/bIxL5XqQsQmN9lDNj+5KiFjCa0PhH97QSPNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgWfH97scXkW68udGH15LwmGJscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yNzRj
MjZlMy1hNDE3LTQyNWItOGQ0Yi0zMTZjNjhmMzVlMDYvNzI0YzgwZjEtZTNmNC0z
YzQ3LTgzYjYtYjg5MWU1NTEwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjc0YzI2ZTMtYTQxNy00MjViLThk
NGItMzE2YzY4ZjM1ZTA2LzI3NGMyNmUzLWE0MTctNDI1Yi04ZDRiLTMxNmM2OGYz
NWUwNi5jcmwwHwYDVR0jBBgwFoAUPr7BT5aqfZ3RR3rP7CVYljNFtZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yNzRjMjZlMy1hNDE3LTQyNWItOGQ0Yi0zMTZj
NjhmMzVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GTDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3vqB6v7wZ3oBDFSAOkisbGt28ci42DMf+I/RKZF+meJ/bK7Dszjm+j
fRCo6ejW6B2w6EiqoPBmbTpyKmKLRCZpfL1R7svixZKGXAYGhDfnPijWTzDDYtwr
kENX3bCGGdgqxuZlU1BDBsz2wRVkelxHogBzClSI4B/yqoc996hgzH3gxnlXDGAu
IlYi5q0WWge9g2FIcVfvVaX8FXUK5LwHl7JDDRXTCP5K7L9k+DGwkRol6GSp5Hfr
sbe/VfeS8xXXw/HJ/EkGyI0B1hGNau7N3LZ3dtnbtFDgnShmvJ8TCkrrkK3zo0Vg
6OCyMeJXw1VUUXbuZxJDGbm52PV6MNo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:46 2024 by rpki-client on console-ams.rpki-client.org