Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/0f5766ee-6bfa-3bab-ac7c-79e782c14ae7.roa
File: 0f5766ee-6bfa-3bab-ac7c-79e782c14ae7.roa (raw, json)
Hash identifier: 3K4fyY2lu/HEx4DcLo13RN2GejobfDDZdmrxNS+my9k=
Subject key identifier: 2F:1F:D4:8A:DD:53:F9:0B:9E:AB:AE:F3:CB:CC:11:60:DF:C0:6A:2E
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285847924BDEB22B7BE50538952680
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/0f5766ee-6bfa-3bab-ac7c-79e782c14ae7.roa
Signing time: Thu 17 Oct 2024 13:00:42 +0000
ROA not before: Thu 17 Oct 2024 13:00:42 +0000
ROA not after: Wed 15 Jan 2025 14:00:42 +0000
asID: 30083
IP address blocks: 192.155.100.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:92:4b:de:b2:2b:7b:e5:05:38:95:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Oct 17 13:00:42 2024 GMT
Not After : Jan 15 14:00:42 2025 GMT
Subject: CN=2b3e70b5-8bf9-4e9f-afdd-7531bf388ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:9a:55:f5:c8:c0:73:38:b0:42:72:a3:80:
e4:60:74:f8:7e:be:ac:a9:a6:ea:52:32:55:78:b2:
2a:33:0a:d8:61:f5:3d:c6:d6:84:74:f1:e5:33:68:
06:fd:18:8b:0b:9b:9c:03:a3:5d:d6:13:8f:a5:54:
96:7b:1c:31:78:69:18:f4:9e:d0:5c:a6:45:5c:94:
7b:c8:fd:cc:31:f4:12:52:62:50:c9:58:78:80:4e:
35:d9:d7:29:a1:00:2a:e1:23:a8:44:42:65:9e:9c:
31:fa:e3:42:5b:9f:4e:49:1f:43:7a:03:a1:b9:11:
39:55:80:5b:a2:c8:83:45:f8:ce:fd:13:b9:29:8b:
74:81:75:d4:38:00:55:c2:a0:9a:49:82:6b:69:96:
2c:9e:23:96:e5:c9:ed:6a:82:19:4e:df:ad:0c:1a:
40:5a:ef:20:5a:ee:49:d4:4f:c8:39:0c:78:0e:25:
21:c5:3b:49:61:a3:ae:4f:f2:08:60:0c:ff:cd:cc:
c0:97:c0:ae:98:c7:83:8a:49:80:52:7c:84:d4:31:
f9:d4:c5:b0:f3:bc:e3:d6:91:7e:5c:43:d7:19:9b:
98:b3:9e:c0:63:bc:d7:ca:af:3c:be:d9:d8:05:da:
11:e5:6e:d1:b9:f0:f8:92:f0:50:b9:9f:b0:11:bb:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:D4:8A:DD:53:F9:0B:9E:AB:AE:F3:CB:CC:11:60:DF:C0:6A:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/0f5766ee-6bfa-3bab-ac7c-79e782c14ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.155.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:d4:26:a3:ac:40:a2:dc:18:5b:f0:21:62:a2:59:d6:d2:66:
3a:6e:2e:16:0a:07:2a:ca:18:88:2f:6d:46:a9:0e:2e:45:fd:
9b:35:fd:35:96:ce:34:bd:a6:e8:dd:7f:5f:1b:05:e0:2d:24:
c6:5f:b9:e2:90:04:fa:fb:86:c1:4f:6f:9a:4f:f0:0b:1e:2d:
39:fa:ca:f8:ba:a6:ef:89:58:fe:9f:c7:da:d4:d7:99:d6:1c:
ec:6b:3e:68:82:a2:6f:f2:c5:8b:53:50:2d:8a:35:97:57:cd:
9a:0b:76:23:06:6c:cb:91:d1:5c:fb:48:f1:a0:37:15:d9:e2:
b5:74:56:95:a6:04:5c:3e:8f:f1:ad:a2:58:69:1c:95:0e:9e:
f5:64:29:5f:c6:b5:78:b6:88:eb:1b:09:96:60:5c:f1:b8:d8:
07:07:06:82:e7:02:f7:cf:cc:93:c2:94:06:0d:0f:3c:21:c7:
27:e8:9f:51:4b:e2:3e:3c:0b:63:80:44:b7:6a:4f:ec:3d:75:
fd:4e:1e:58:aa:1f:ce:d9:d6:d0:49:85:77:e5:03:f6:38:56:
b4:87:a5:88:0f:23:02:31:82:33:49:62:00:1b:e3:d3:fa:5a:
95:d1:8d:0d:eb:60:21:ef:c7:5b:db:9a:5b:5f:0e:9c:ea:ab:
c6:f5:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:33 2024 by rpki-client on console-fra.rpki-client.org