Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/bfe7762a-d55e-30a6-93a7-91f84412b331.roa
File: bfe7762a-d55e-30a6-93a7-91f84412b331.roa (raw, json)
Hash identifier: Ir2hmzC7EQ2DNZWm4OX9as54jOqxQJHP9g9qXwI5j3s=
Subject key identifier: CA:24:0B:AB:3D:3F:CB:01:49:6E:30:9B:17:F6:8D:6A:E9:D7:3F:8E
Certificate issuer: /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial: 010D0C9F4328576D51CC73C042CFC172E1513EA9
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/bfe7762a-d55e-30a6-93a7-91f84412b331.roa
Signing time: Tue 23 Jun 2020 13:14:57 +0000
ROA not before: Tue 23 Jun 2020 04:00:00 +0000
ROA not after: Sun 23 Jun 2030 04:00:00 +0000
asID: 43755
IP address blocks: 184.175.192.0/18 maxlen: 24
107.155.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e1:51:3e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Validity
Not Before: Jun 23 04:00:00 2020 GMT
Not After : Jun 23 04:00:00 2030 GMT
Subject: CN=df9a1651-c33e-415f-8531-1d768d6c81d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:25:45:ec:66:35:a0:92:79:27:4d:8f:54:
a1:3e:ea:ea:fc:6b:11:9f:ed:91:5e:68:a2:66:85:
60:af:19:7e:8d:da:17:00:3e:2e:2e:cb:4d:d2:a4:
ef:59:d3:5a:24:fc:b6:1c:a9:57:7c:54:1a:26:a1:
61:1f:33:38:71:2f:26:3e:24:be:13:76:b6:f4:d9:
b8:03:f4:38:2f:15:40:bb:40:89:46:91:fa:83:10:
4f:c8:73:ec:2e:8c:c0:30:a4:d7:75:db:6d:e3:67:
d1:1f:2e:34:81:ed:00:f5:25:cc:55:3c:ba:1f:dd:
8e:9f:e4:ea:a3:88:06:4d:ce:c6:c5:6d:46:f6:55:
9f:d5:61:1a:9e:72:cc:8b:71:9a:c4:aa:68:a8:17:
84:8c:88:6d:cc:70:e7:e8:28:53:d9:de:ef:3d:da:
c3:0a:3f:4c:7c:2b:73:f2:24:c6:b7:a9:26:a0:26:
96:57:15:dd:d7:04:58:23:98:48:b5:b3:46:2b:72:
2f:f0:ba:0b:d8:aa:f5:17:fd:b7:e9:8d:e3:de:b9:
87:f4:bb:8d:81:d3:c1:2e:9b:82:ac:2d:60:08:5a:
b4:87:8e:95:3d:ea:17:b9:67:a6:c0:76:98:d3:36:
13:dd:2b:10:e1:df:62:41:f1:aa:e8:58:d0:70:b6:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:0B:AB:3D:3F:CB:01:49:6E:30:9B:17:F6:8D:6A:E9:D7:3F:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/bfe7762a-d55e-30a6-93a7-91f84412b331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
X509v3 Authority Key Identifier:
keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.155.128.0/18
184.175.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c8:78:84:5b:3d:f4:77:1e:a6:d8:bc:33:c7:1c:06:59:96:
2d:f1:9c:17:e4:e8:f1:93:18:e7:b6:df:8a:d0:de:db:41:18:
cb:26:70:a3:d3:55:0c:52:85:72:c2:ba:04:3b:ea:51:f7:2f:
c5:9f:f7:51:34:df:6b:d7:65:46:ef:54:52:d0:ee:af:40:09:
25:9c:9e:91:1b:bd:1e:dd:65:15:b8:42:66:7d:6e:50:ef:61:
0d:5c:25:b9:e4:48:c1:4c:4d:67:3c:4f:eb:50:13:21:b0:37:
53:42:b3:dc:3d:96:bf:b1:06:19:25:26:fa:41:0c:b4:49:b4:
52:0b:1b:63:d9:0c:ca:e9:17:7f:c4:90:64:0c:26:34:be:b4:
e0:21:ec:7a:cd:6f:20:a2:c5:84:c9:c3:b9:94:b8:45:1a:84:
03:92:8b:18:4c:b6:ea:fc:43:c8:be:d8:82:ea:80:b8:45:46:
2d:51:c6:eb:a4:31:c2:86:d4:96:bd:87:c9:29:96:8b:4f:c8:
9e:24:fb:36:d4:f5:d1:6e:bc:2a:85:ae:e0:7c:21:b4:b5:1f:
92:44:87:68:33:b4:e0:1e:0c:3f:59:40:dc:f2:fa:7e:a3:43:
49:94:8b:d4:6a:4c:5d:bc:a9:3f:02:b1:1a:61:d8:c5:3c:1d:
de:e5:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:03:35 2024 by rpki-client on console-fra.rpki-client.org