Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/bb9d8f9f-e14a-37a2-a170-6109f6b4f72e.roa
File: bb9d8f9f-e14a-37a2-a170-6109f6b4f72e.roa (raw, json)
Hash identifier: TaVSVML3E0iEb+cAFJR+mvGCSFWCZBByryfkTnKQ3oQ=
Subject key identifier: 2D:90:91:F8:54:6E:DD:03:02:1A:CF:7D:8D:9C:64:2F:D0:90:5C:85
Certificate issuer: /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial: 010D0C9F43285840B113EF70A7D1EE66E92B1200
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/bb9d8f9f-e14a-37a2-a170-6109f6b4f72e.roa
Signing time: Thu 13 Oct 2022 16:06:08 +0000
ROA not before: Thu 13 Oct 2022 16:06:08 +0000
ROA not after: Thu 29 Aug 2024 04:00:00 +0000
asID: 54681
IP address blocks: 23.133.248.0/24 maxlen: 32
23.133.249.0/24 maxlen: 32
23.133.250.0/24 maxlen: 32
23.133.251.0/24 maxlen: 32
23.133.252.0/24 maxlen: 32
23.133.253.0/24 maxlen: 32
23.133.254.0/24 maxlen: 32
23.133.255.0/24 maxlen: 32
2602:fba2::/32 maxlen: 32
2606:c740::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b1:13:ef:70:a7:d1:ee:66:e9:2b:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Validity
Not Before: Oct 13 16:06:08 2022 GMT
Not After : Aug 29 04:00:00 2024 GMT
Subject: CN=259db5fa-65d6-423b-810b-7431626f2324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:db:bc:64:80:4d:61:1b:a9:f2:28:d9:26:
d2:f2:72:66:b7:05:32:5a:69:e4:88:9f:de:1f:5e:
cd:59:cd:3c:47:dc:da:62:cb:46:08:33:58:0a:e5:
f0:4b:10:75:fb:f0:e3:99:0d:88:64:c0:ec:12:5b:
84:8a:f8:97:47:03:fe:53:b2:bc:f5:89:f9:8b:10:
03:dd:74:6c:7e:eb:31:61:96:ce:a1:f7:0c:99:f6:
3a:05:9a:a5:48:d9:c0:f4:1c:96:94:5e:a9:23:30:
a2:47:95:23:21:69:08:a5:3f:4e:2f:25:22:a7:67:
f4:e4:5d:98:ca:b3:f4:84:1b:82:61:0b:59:ab:f6:
00:6f:e8:e2:02:8d:d7:1d:4d:d4:3a:95:42:4e:8b:
c6:a7:44:d8:e5:f7:e1:43:2b:6b:a7:74:d0:bc:55:
b9:1c:ef:00:11:e6:01:43:ff:32:dd:7b:35:f5:17:
01:1b:2a:a6:19:6a:94:fb:66:0b:cb:3a:10:28:c8:
62:2f:4a:11:7d:4b:68:42:86:37:cf:fb:91:18:99:
10:d2:2f:82:03:61:ec:f7:ba:c9:2c:b0:ff:4d:9a:
5e:46:7e:cb:7e:34:df:10:e9:d6:65:4b:06:df:35:
0b:a0:a7:e8:28:d4:8d:da:b7:2c:a2:2d:5d:ca:4f:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:91:F8:54:6E:DD:03:02:1A:CF:7D:8D:9C:64:2F:D0:90:5C:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/bb9d8f9f-e14a-37a2-a170-6109f6b4f72e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
X509v3 Authority Key Identifier:
keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.248.0/21
IPv6:
2602:fba2::/32
2606:c740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:91:1f:14:1d:0f:b5:c1:1d:4a:93:d4:a2:b6:09:9e:6b:d6:
c2:25:5c:bb:29:9b:ec:bb:9f:1a:ae:16:7e:1e:41:01:0f:6f:
64:71:bb:66:8a:bb:06:65:33:5c:60:92:e8:df:90:c2:16:55:
a1:8a:4b:a5:cb:3a:ca:4b:55:61:0d:be:ae:88:03:14:c4:0f:
33:0b:74:5a:11:f9:f5:c9:0a:c9:34:01:51:64:1e:93:1b:89:
96:d5:b5:c8:b0:6d:83:a3:14:93:30:fe:55:21:ba:66:6f:0d:
ea:43:55:8a:0f:42:ca:a7:4a:c1:27:20:f1:8b:58:c3:fb:6c:
33:bc:7a:cf:0b:9a:6e:40:e1:7e:bf:a6:9d:93:53:fb:db:28:
db:9a:06:5b:b3:88:dd:6c:7d:0c:29:6c:d4:15:68:b1:ac:62:
97:20:6d:96:dd:28:a0:1d:b3:4d:7c:6d:b4:25:d5:62:b7:0a:
5f:a9:8c:8f:01:9d:6b:ea:4d:9e:a0:b2:5e:6d:a5:18:0a:c7:
33:43:ff:95:4a:66:04:53:b7:f3:e9:9f:86:99:a3:6a:0f:b1:
23:62:da:40:6c:ae:d8:32:70:8a:b2:e8:8a:9d:d1:5c:71:f9:
ff:66:39:75:54:8b:53:5a:f6:62:17:19:c7:eb:b5:98:5e:1f:
3b:34:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org