Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/686aabb3-e874-3b55-8ed3-aa7730f7edcd.roa
File: 686aabb3-e874-3b55-8ed3-aa7730f7edcd.roa (raw, json)
Hash identifier: 9m0P12BbXkZdD5V8H8Dxu7sfEy/AUF+dLhwJmtOdBN4=
Subject key identifier: 56:6E:2C:79:66:C5:7E:AC:A3:74:0C:FD:34:34:B5:85:73:39:8D:B6
Certificate issuer: /CN=3af35cfc-2385-44c7-b33c-0a6ce0409bfb
Certificate serial: 010D0C9F432858374B08EB23DD3CF592FF48AA80
Authority key identifier: B1:EA:79:8F:FD:1C:16:05:9B:A3:5B:AF:B2:83:6C:18:20:D7:51:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/686aabb3-e874-3b55-8ed3-aa7730f7edcd.roa
Signing time: Thu 10 Oct 2019 04:00:00 +0000
ROA not before: Thu 10 Oct 2019 04:00:00 +0000
ROA not after: Mon 10 Oct 2022 04:00:00 +0000
asID: 7393
IP address blocks: 64.37.98.0/24 maxlen: 24
184.175.115.0/24 maxlen: 24
216.15.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:4b:08:eb:23:dd:3c:f5:92:ff:48:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af35cfc-2385-44c7-b33c-0a6ce0409bfb
Validity
Not Before: Oct 10 04:00:00 2019 GMT
Not After : Oct 10 04:00:00 2022 GMT
Subject: CN=6762df7b-887b-4275-b0e1-d5dfa876c622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:91:e4:c0:a0:8e:af:d8:6c:87:c2:1a:7f:
46:c9:10:e1:35:e5:68:77:16:bc:8e:33:ae:ca:4e:
22:e2:b4:b1:dc:c9:95:94:4b:ab:28:61:ec:88:2d:
47:99:6f:69:17:8c:b1:2f:09:87:60:7a:92:f5:3c:
f9:05:4b:80:cd:41:ba:0a:05:18:62:21:3e:db:f6:
fc:01:f7:5d:8f:d7:94:91:ed:64:65:cd:f9:e4:5c:
55:dc:22:b4:e0:a1:ee:5b:99:ff:b8:62:a3:9d:82:
c5:10:ec:42:c3:be:b2:5f:32:39:11:34:e1:30:3f:
a6:31:24:dc:26:33:bd:6e:97:6a:98:1a:93:47:b5:
fa:5a:78:1d:cb:c7:0a:5b:bd:dd:50:01:32:7e:24:
57:fa:d3:66:d3:9e:a8:22:dd:c4:9d:6b:0a:e8:69:
2f:ce:f0:c4:e9:a7:53:2f:e1:52:14:39:b3:fe:c8:
0b:e6:9a:3a:41:51:78:eb:e6:ae:be:22:63:bc:a2:
5a:ed:c1:ad:56:eb:27:fc:da:e4:d9:63:d5:e7:ac:
43:4d:3e:59:80:3f:70:81:9f:ad:19:0f:fa:82:a9:
e9:99:e7:18:c1:8f:36:bd:68:14:fd:d1:b7:a8:01:
79:b2:15:9e:88:44:07:e6:69:e6:92:fc:6f:95:74:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:2C:79:66:C5:7E:AC:A3:74:0C:FD:34:34:B5:85:73:39:8D:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/686aabb3-e874-3b55-8ed3-aa7730f7edcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.crl
X509v3 Authority Key Identifier:
keyid:B1:EA:79:8F:FD:1C:16:05:9B:A3:5B:AF:B2:83:6C:18:20:D7:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.cer
sbgp-ipAddrBlock: critical
IPv4:
64.37.98.0/24
184.175.115.0/24
216.15.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:00:35:b6:a6:d9:16:e3:92:36:5d:67:f8:e2:d7:c2:2b:07:
4e:ed:44:5a:74:c7:98:7b:e3:2e:18:92:ea:6e:f3:c6:46:aa:
20:11:b1:3d:ca:29:3f:13:85:e3:7c:43:64:65:2a:1b:c3:01:
d5:04:f7:a4:fe:50:63:b8:91:77:e3:31:fe:ea:15:f5:9d:68:
86:11:73:1f:1e:32:93:ed:d8:39:2a:10:8e:88:f5:2a:48:68:
28:2d:72:88:e4:a4:ba:fe:3f:80:c1:9d:77:28:94:f9:29:12:
86:bb:10:17:e4:db:95:39:de:5a:dd:78:2f:8c:50:f4:e2:c5:
fe:68:c9:a1:7f:50:9a:5b:c6:15:ff:1e:de:c9:d1:b7:0a:fe:
5e:d8:36:bc:49:8d:db:d5:ca:8b:49:10:ab:3a:49:97:38:71:
7b:a1:c5:b6:24:90:b4:01:1c:c1:5d:db:fb:7d:e4:0f:91:63:
6d:81:50:26:bb:ab:e3:49:87:02:58:f3:48:51:68:03:f4:9b:
09:e8:e8:93:a5:3d:8c:41:53:55:0b:23:0e:e7:70:6a:7c:bd:
73:ae:c6:81:0b:72:3d:77:d2:0c:95:75:0e:31:7d:3b:ed:21:
bb:87:67:a0:c2:6b:6c:5e:2c:76:65:1f:72:5b:fd:6d:77:9f:
ef:9d:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:04 2023 by rpki-client on console-fra.rpki-client.org