Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b90d691c-0b17-36d3-9623-3ef0873456ab.roa
File: b90d691c-0b17-36d3-9623-3ef0873456ab.roa (raw, json)
Hash identifier: Bnepa9SJ3LcYtaNgTIvJCXnJL4VMUSlKna86srn9bQc=
Subject key identifier: B6:E9:18:F4:54:AF:60:0E:C8:BF:E5:29:31:94:75:ED:80:53:A8:AD
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285837D61C2FB06E1E70E1E99E48C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b90d691c-0b17-36d3-9623-3ef0873456ab.roa
Signing time: Thu 10 Jan 2019 05:00:00 +0000
ROA not before: Thu 10 Jan 2019 05:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 262257
IP address blocks: 64.76.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d6:1c:2f:b0:6e:1e:70:e1:e9:9e:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 10 05:00:00 2019 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=5273bf27-29cd-4d43-8347-b74949b1c5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:ba:94:3c:7c:17:13:39:da:78:f4:c0:7c:
a9:e5:ad:f7:97:8b:4f:c2:80:f8:b5:a9:d9:c0:bc:
eb:ba:41:81:60:3a:54:ae:24:31:4d:b0:59:b1:46:
ed:08:a8:c7:a3:23:6d:1e:da:e3:8b:77:41:65:d1:
08:a8:c6:40:a6:26:9c:59:db:bd:ac:28:88:e9:74:
a2:7e:7b:fe:0d:63:94:76:40:55:25:fd:7c:95:4f:
f1:b5:30:eb:7d:48:20:4d:eb:50:ff:52:76:b8:5a:
40:ce:5e:6e:c8:3d:41:02:16:19:0c:84:7d:f3:47:
ed:49:e5:68:6d:f8:b4:bd:3b:49:32:92:33:2e:da:
1d:8e:83:01:56:69:45:43:91:e0:37:da:78:e7:a1:
8b:9a:e5:68:75:0f:4b:81:a9:fa:d7:c3:e2:81:da:
53:18:50:88:77:fa:4f:6f:ca:c4:6b:b4:15:8f:a7:
dd:ac:44:0e:cb:d2:f8:5c:b1:45:2d:29:7c:48:fa:
0c:82:a6:86:ce:7d:94:f1:7a:80:87:85:46:49:99:
df:ee:aa:34:0b:0c:0f:05:ea:3c:a7:a2:f0:7e:73:
8c:93:0e:e6:55:db:fd:01:7c:c2:ec:97:2c:ef:f3:
97:83:bc:cd:08:03:25:b0:34:2f:2c:36:45:91:e0:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E9:18:F4:54:AF:60:0E:C8:BF:E5:29:31:94:75:ED:80:53:A8:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b90d691c-0b17-36d3-9623-3ef0873456ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.76.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:e2:f3:6d:36:e3:f5:89:50:22:ef:8d:77:f0:f2:e3:b3:4c:
cb:35:8a:44:1e:f3:7a:5b:fb:3b:10:bf:e2:71:98:bc:a8:56:
09:8b:41:d9:41:ca:15:65:23:19:68:8e:d5:44:a6:35:33:9c:
12:de:81:26:dd:3a:c0:80:1b:b9:05:6f:89:b9:bc:7b:07:b0:
f1:1b:39:1d:a5:2d:f6:96:50:79:20:d3:9c:f0:a5:90:d0:3e:
e1:22:40:dd:48:5f:17:91:ff:66:3c:a7:c3:62:b9:90:bc:8a:
f6:bc:2c:74:24:3c:3d:e1:8c:83:1c:b2:a7:d4:25:5b:35:27:
73:59:5a:66:48:ba:f1:74:1e:c3:13:3a:ef:fb:49:18:12:fc:
9e:e4:78:76:64:0d:db:45:09:d0:be:10:86:a0:4a:c4:3b:17:
af:4c:69:74:c7:39:70:0a:fc:34:a1:5f:10:17:ac:e3:ba:ca:
cd:fb:17:b7:a6:ef:35:68:78:ee:23:2e:77:ce:36:24:84:82:
cb:d8:4a:d8:98:7d:42:52:3a:19:ec:74:ae:b6:71:dc:dc:4c:
16:05:68:8f:f8:c2:f3:bb:c5:42:6c:d2:ac:0e:c5:ac:0b:69:
e7:02:85:67:83:1f:59:91:f3:cb:be:1b:8d:16:d3:0a:62:e8:
fb:67:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:58 2023 by rpki-client on console-ams.rpki-client.org