Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8e31360c-21fb-3c68-8467-75fbf4d0fcaf.roa
File: 8e31360c-21fb-3c68-8467-75fbf4d0fcaf.roa (raw, json)
Hash identifier: MU27eQG1A6hxVQDQe7JNMrZbHsNdfAxGeoOl55GIMvI=
Subject key identifier: B0:06:7F:7A:DB:5C:7F:A3:DF:2E:6C:B2:9F:AC:DC:08:7F:81:C0:E9
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F4328584468CF098D5AED6A094B9244C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8e31360c-21fb-3c68-8467-75fbf4d0fcaf.roa
Signing time: Mon 01 Jan 2024 14:00:21 +0000
ROA not before: Mon 01 Jan 2024 14:00:21 +0000
ROA not after: Sun 31 Mar 2024 13:00:21 +0000
asID: 237
IP address blocks: 35.128.128.0/18 maxlen: 18
35.128.216.0/21 maxlen: 21
35.128.64.0/18 maxlen: 18
35.128.224.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:68:cf:09:8d:5a:ed:6a:09:4b:92:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 1 14:00:21 2024 GMT
Not After : Mar 31 13:00:21 2024 GMT
Subject: CN=1e25c343-8089-4abf-b087-8012c08dd476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:a4:da:37:d0:ad:fa:a0:6c:74:47:e0:a9:
01:ee:04:df:d4:1e:21:af:b5:07:30:68:d3:25:fc:
7f:93:47:5d:cd:b4:88:7f:36:74:2a:58:de:51:92:
23:30:50:1f:46:8e:3e:37:8e:f7:90:39:05:82:5f:
e8:8e:7f:18:5d:71:5a:0a:72:bc:70:89:6d:97:17:
1e:e5:f1:37:02:ff:e0:ec:76:d3:86:61:6c:d7:5b:
49:7a:3e:97:a9:92:f6:94:10:9c:5e:96:fb:43:83:
ed:76:66:89:06:cd:65:fb:a5:fc:a0:c3:cb:9b:53:
af:3a:ae:8f:ff:fb:05:ef:29:9c:8a:6d:aa:e4:7e:
36:d9:49:72:61:a8:37:4a:e2:40:a9:4d:d6:b1:2f:
7a:ea:bd:7e:b5:03:db:d1:eb:81:96:61:30:9a:54:
84:38:a8:be:44:b0:dd:90:05:80:51:5f:ee:e9:02:
ee:a0:04:60:92:b0:e7:d8:ad:1f:dd:04:e3:e8:d5:
f6:6d:68:ea:94:c2:9c:e7:9c:72:35:81:e8:c6:0f:
c2:3e:4c:bb:44:7d:d6:37:03:1e:25:30:cb:15:95:
8d:da:d8:42:a2:ed:e5:0e:c4:60:c7:b2:1e:cb:b9:
aa:94:ac:66:de:ce:b5:f6:a4:36:1c:c1:b8:0b:1a:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:7F:7A:DB:5C:7F:A3:DF:2E:6C:B2:9F:AC:DC:08:7F:81:C0:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8e31360c-21fb-3c68-8467-75fbf4d0fcaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.128.64.0-35.128.191.255
35.128.216.0-35.128.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:d6:ee:5b:fa:15:78:d6:6a:0c:76:d2:b6:fb:32:84:a8:4d:
1a:cd:a5:1c:bd:cc:36:68:21:cb:dc:6e:1c:f2:9b:c8:5c:d6:
a2:93:33:fd:c4:00:6a:73:95:bf:74:42:65:cc:00:1b:c7:f3:
4e:b6:65:b6:43:78:31:a0:7f:29:34:2e:8c:32:b8:4a:fd:6a:
9d:b5:7d:43:16:95:56:98:0f:6b:43:3f:a8:73:44:e4:ab:fd:
3f:3a:e8:4b:2d:aa:bd:3e:bc:c2:d0:e2:8b:d6:9c:fc:2c:41:
2f:e3:71:00:b0:5e:05:87:a0:a0:e2:0a:ff:45:ca:e0:54:61:
3a:ab:e2:3e:d8:0c:49:f0:16:51:15:4b:c9:d8:8b:24:93:cd:
04:f0:3b:35:6a:6d:d3:5f:99:23:af:a1:b4:44:7c:cf:d5:7c:
9e:ad:da:5a:06:23:94:8e:36:85:5d:b2:94:9b:99:a6:a6:ff:
b5:fe:33:17:4c:5a:69:00:cb:6d:e2:3d:6c:b5:c1:c2:ca:15:
69:5b:17:23:d6:f6:c1:a7:3c:76:d9:86:a2:50:fa:bf:e0:67:
93:04:82:cc:76:cb:20:49:ec:67:b6:16:c8:d6:2a:0c:6e:36:
06:e3:3d:a0:a7:2a:4f:c4:f2:f8:f1:4a:a3:d6:a0:1d:84:87:
19:39:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 16:56:09 2024 by rpki-client on console-fra.rpki-client.org