Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/081d24b3-de22-32cb-9ef4-a20828cc20f8.roa
File: 081d24b3-de22-32cb-9ef4-a20828cc20f8.roa (raw, json)
Hash identifier: 4WNTrR+6PvN6FrQPxujOq5Q6VO3AZvei6XfMWrIFdLY=
Subject key identifier: 73:E8:64:31:34:6A:30:FC:D1:59:E6:85:BC:92:E9:D1:AC:05:E3:AF
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285838EA492AC7BB04F4558BEB8A00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/081d24b3-de22-32cb-9ef4-a20828cc20f8.roa
Signing time: Tue 30 Jul 2019 04:00:00 +0000
ROA not before: Tue 30 Jul 2019 04:00:00 +0000
ROA not after: Mon 30 Jul 2029 04:00:00 +0000
asID: 398789
IP address blocks: 173.201.16.0/20 maxlen: 20
173.201.32.0/20 maxlen: 20
2603:7::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:ea:49:2a:c7:bb:04:f4:55:8b:eb:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jul 30 04:00:00 2019 GMT
Not After : Jul 30 04:00:00 2029 GMT
Subject: CN=6af40ba5-3929-4530-bf31-23cce9253d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:00:db:04:88:c4:c1:c3:1b:09:77:97:a2:
24:79:36:c0:be:81:1c:67:e2:2e:ed:25:64:86:0d:
b9:6d:ab:7b:b9:82:1f:10:c2:24:f6:b3:77:99:a0:
34:cd:d6:66:15:9f:9a:1e:94:d4:45:5e:9b:40:21:
20:0f:ce:20:49:07:c5:79:29:95:28:af:db:be:48:
9b:ef:7e:39:48:fc:34:6d:8f:3a:2f:c4:21:c8:d9:
c4:b8:33:f5:91:60:8f:6a:1f:55:a3:8e:76:8a:49:
72:85:19:3e:43:2c:58:92:31:9a:2a:3b:04:6c:e2:
0d:28:2c:d1:82:a7:48:07:67:b9:78:4f:b2:b2:9e:
4c:20:97:4b:d4:5f:59:b6:b3:2a:ef:b3:e7:6e:1f:
08:c3:70:2a:fc:10:fe:ef:c3:97:d0:85:7b:55:48:
16:63:b0:d6:56:3b:5c:32:99:3e:24:e7:a7:71:3c:
86:34:cc:d9:6b:07:6f:dc:2b:17:61:c0:df:4d:44:
bf:d3:1a:3f:54:3d:46:9d:4d:d4:a0:3b:60:e7:9e:
a5:ed:2f:14:d8:52:44:36:a6:fb:d3:13:87:6a:34:
26:79:93:3a:8c:32:28:d1:dc:d5:db:cc:dd:2b:52:
ab:81:ed:12:1a:ee:f0:25:14:5b:a3:47:c0:1f:83:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:64:31:34:6A:30:FC:D1:59:E6:85:BC:92:E9:D1:AC:05:E3:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/081d24b3-de22-32cb-9ef4-a20828cc20f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.201.16.0-173.201.47.255
IPv6:
2603:7::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:e9:a4:12:53:7c:1a:9d:54:4b:1e:4b:40:4a:45:12:86:c4:
f0:55:ed:73:70:c7:76:14:06:3b:3a:c8:b4:3e:e5:fe:2c:d2:
57:29:a1:a3:5c:3a:a9:06:8b:01:6b:0c:3f:a6:98:8c:61:53:
3e:56:d5:74:93:2c:a9:ab:0b:57:19:56:df:0c:74:83:8d:a6:
da:d5:aa:a6:fb:5f:6a:bc:11:e2:79:d5:d2:bd:39:92:c3:7b:
e3:4f:b9:9b:a0:6c:98:9f:e8:4b:6a:07:48:bd:46:21:e1:45:
9b:5b:3a:9e:07:ab:a6:4f:5b:fa:33:4c:4b:0e:65:78:6d:b6:
b3:38:45:f5:28:9f:39:f7:75:c7:bd:a2:bf:b6:37:f1:af:0b:
65:aa:c8:f1:6e:02:05:89:ee:13:57:77:df:92:65:8d:5e:64:
fc:0a:ee:96:27:de:8d:33:cc:b9:40:b8:0c:2a:aa:06:d3:28:
2e:8b:e0:c9:b6:01:35:9c:e9:1b:30:0c:a4:5d:83:82:fd:bc:
2c:33:68:b7:a4:a8:86:f7:80:0d:4e:b8:7d:d9:fc:49:a4:dd:
9c:a3:d4:8d:c0:6d:46:43:e8:fb:dc:27:76:ad:25:7d:c1:40:
3f:c6:7c:df:59:c2:5a:97:2b:47:f3:0b:bf:df:61:e1:e7:8b:
bd:1c:59:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org