Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/cf9e9e87-a5d4-3da3-9c01-2e76263d757d.roa
File: cf9e9e87-a5d4-3da3-9c01-2e76263d757d.roa (raw, json)
Hash identifier: XVZOX8IV8CwHgAMaufcaHbOAC7SvUdawS4W976WEKXU=
Subject key identifier: 8A:FF:22:63:E7:E0:0D:9A:68:A9:FC:0E:1F:96:40:7F:1A:72:F2:D2
Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial: 010D0C9F432858447AF47A4A2E15F7A003203E80
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/cf9e9e87-a5d4-3da3-9c01-2e76263d757d.roa
Signing time: Mon 08 Jan 2024 02:00:15 +0000
ROA not before: Mon 08 Jan 2024 02:00:15 +0000
ROA not after: Sun 07 Apr 2024 01:00:15 +0000
asID: 834
IP address blocks: 209.240.8.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7a:f4:7a:4a:2e:15:f7:a0:03:20:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Validity
Not Before: Jan 8 02:00:15 2024 GMT
Not After : Apr 7 01:00:15 2024 GMT
Subject: CN=e2bafeae-7fe4-42b3-9525-a048a2bb71cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:bf:76:47:c8:03:a2:46:c2:d6:f9:08:e7:
d4:62:3a:22:d1:8d:0b:cb:2f:9e:d6:9a:21:ac:70:
4c:7e:aa:0f:1d:34:b5:2b:0c:ca:df:0e:96:2e:14:
e7:25:f1:96:75:ac:84:ff:cf:e8:5c:55:c8:35:04:
8a:59:88:23:87:9f:7c:fc:95:16:ff:0b:e2:1e:47:
f0:e0:cb:b9:d1:f5:c3:32:71:a6:fc:68:60:82:a3:
e7:6a:bb:4a:c8:32:a9:d1:8a:83:93:2a:38:9e:6d:
5c:5e:e4:5e:53:20:f2:20:9c:48:ca:9f:39:01:17:
ba:37:b5:e6:19:05:6f:3f:3b:85:dd:43:eb:5f:25:
83:16:c2:2b:b5:ac:12:a4:e7:02:1b:c9:2d:02:3d:
2c:bd:20:02:a8:97:9e:09:13:d7:41:e8:ea:11:c1:
2c:bf:2e:d4:5f:1c:b6:75:f0:70:9b:eb:df:71:13:
d4:0d:2a:8f:84:3c:58:43:75:89:93:16:5c:dd:7c:
1d:5f:69:c0:25:a9:95:e8:80:de:35:10:8f:a4:5e:
3a:e6:06:5a:88:1d:f8:b7:dd:38:bd:23:e1:53:2d:
54:ea:12:2f:76:1d:73:89:3d:51:1c:10:89:52:a5:
76:91:a7:21:5d:1c:e7:58:52:53:8a:5b:32:bf:7a:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:22:63:E7:E0:0D:9A:68:A9:FC:0E:1F:96:40:7F:1A:72:F2:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/cf9e9e87-a5d4-3da3-9c01-2e76263d757d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
X509v3 Authority Key Identifier:
keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a2:38:5d:36:fa:d5:91:9d:28:cf:3c:fd:95:ff:e5:f5:97:
f9:23:34:93:5a:c7:93:33:35:e0:24:1c:dd:cc:c3:09:49:ce:
d8:df:cf:92:ef:3e:32:44:92:da:59:7f:37:1c:2d:54:43:ad:
f1:62:8d:44:61:87:d6:5e:47:89:fa:a7:7c:1e:61:27:8a:db:
3b:02:97:87:15:ca:9e:d8:b5:85:5d:fc:67:82:6e:ee:8a:37:
aa:9d:42:92:82:d5:25:57:e6:6f:45:91:6f:02:a0:a0:80:ae:
68:bb:ad:12:f2:54:90:fb:b4:0c:43:2c:ba:66:c5:95:c6:91:
eb:f7:de:ad:a0:7f:bd:b9:be:01:76:dd:35:25:a7:9f:01:0a:
69:2b:d3:0e:1b:6d:70:1a:dc:9a:90:d0:f0:67:f3:fd:0f:09:
fb:9a:64:c3:10:8c:ae:59:d8:9d:74:18:69:84:2d:01:ea:14:
b9:e6:38:b1:49:bd:e9:d5:56:51:8f:50:2b:4a:f6:6d:cf:68:
08:bd:20:c8:41:34:83:a7:c7:ea:1d:b6:55:7e:9b:bd:bd:26:
d4:26:f2:01:9f:ed:34:64:b4:34:a4:f1:e0:b8:9b:41:43:c3:
67:0a:33:58:bb:38:cb:48:7b:76:4f:b2:07:cb:3a:c4:65:2c:
f9:9f:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org