Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/16239640-a799-3c22-80d4-b0e582863ed1.roa
File: 16239640-a799-3c22-80d4-b0e582863ed1.roa (raw, json)
Hash identifier: 2T/CLL7SHp1EYWIn6FRGv149/FbmbVu33A9neI8XZ9Y=
Subject key identifier: 16:F5:44:39:0E:6D:35:A1:99:53:F8:44:96:D4:9B:26:40:EE:33:17
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328583DE01A7CB6AF1265450A6C1840
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/16239640-a799-3c22-80d4-b0e582863ed1.roa
Signing time: Tue 30 Jul 2019 18:24:23 +0000
ROA not before: Tue 30 Jul 2019 18:24:23 +0000
ROA not after: Mon 30 Jul 2029 04:00:00 +0000
asID: 398789
IP address blocks: 192.155.96.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:e0:1a:7c:b6:af:12:65:45:0a:6c:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jul 30 18:24:23 2019 GMT
Not After : Jul 30 04:00:00 2029 GMT
Subject: CN=973e8d0a-e695-4bf8-91ba-33c41437d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:cc:08:07:9d:e1:43:1a:bf:8f:6b:f2:b9:
bf:c7:4a:e2:12:9d:96:f5:d8:ea:19:70:3a:05:e9:
e6:ee:94:ef:fd:9c:7b:4c:75:54:09:94:07:87:fb:
62:f9:3a:e0:fd:23:cb:f9:91:ca:7d:eb:5d:fa:cd:
cd:e4:3f:7c:01:2e:23:eb:c7:05:17:63:d9:26:22:
7c:95:2a:b1:ad:a8:01:7f:41:b3:b7:b4:d8:9b:cb:
10:de:98:08:cc:74:76:c5:0a:80:d9:1a:31:fa:80:
c3:c9:79:c2:26:5e:27:cc:8e:6e:74:6b:88:62:f0:
7e:5b:22:ae:3a:3b:7a:25:e5:8b:08:a7:25:ef:ff:
d9:12:eb:d3:44:21:62:a1:89:76:cb:df:96:15:03:
1c:2b:a0:79:01:c3:a2:17:51:41:e9:58:f9:e4:05:
1d:9a:7b:fe:d2:d2:e4:69:f4:07:be:ba:c9:d0:cf:
f0:68:ae:17:36:03:c7:77:74:ad:b3:f9:73:b5:b0:
d0:a2:20:b7:52:62:1e:ef:37:5c:87:cd:fb:d4:c1:
88:e2:bc:40:52:e5:4c:a5:6d:9d:eb:b2:98:40:0d:
6f:9b:96:f1:3a:f7:99:28:aa:45:2f:9e:df:87:50:
32:9b:9b:86:b2:06:61:5c:68:5e:85:7c:46:51:3f:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:44:39:0E:6D:35:A1:99:53:F8:44:96:D4:9B:26:40:EE:33:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/16239640-a799-3c22-80d4-b0e582863ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.155.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:4c:6e:92:ae:74:20:d9:bc:e2:1f:cf:19:8c:bb:28:32:e3:
60:29:ab:28:eb:c0:9e:6b:f5:cb:bc:39:60:78:9e:29:2c:38:
37:14:6d:13:04:75:a0:85:f3:05:5c:fe:0a:15:0a:9c:6c:84:
12:5d:59:8c:a5:16:f0:38:09:9b:53:33:30:70:cd:e0:f9:ac:
99:bc:ad:5c:13:a2:64:fe:4c:53:25:55:9f:c2:a0:6d:c1:03:
11:98:e7:de:3b:1a:c8:a6:ba:52:80:c2:36:1a:77:af:36:37:
20:3d:b4:8e:9b:a0:1f:bc:d5:50:90:21:ad:94:9e:ff:91:83:
94:0d:c4:a1:dd:d0:26:a6:6c:96:34:8c:85:35:1d:b2:65:1e:
c7:7f:58:32:1a:28:42:77:17:97:07:bf:62:fa:9f:b9:90:d1:
f4:36:af:39:20:c2:0d:d8:06:d4:7d:d5:26:26:ae:c2:19:02:
dc:37:9a:24:fc:0b:14:1d:31:44:66:91:84:00:bd:b2:81:59:
35:9d:cf:33:56:d1:3e:70:ae:39:2e:cf:fa:10:28:21:9d:28:
e3:56:03:d0:63:9a:9e:16:f1:d0:45:75:0b:fe:94:4d:08:da:
34:a9:8b:ec:32:12:5e:13:70:8b:dc:62:55:44:fa:ec:50:15:
e5:74:25:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3gGny2rxJlRQpsGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTE5MDczMDE4MjQyM1oXDTI5MDczMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTczZThkMGEtZTY5NS00YmY4LTkxYmEtMzNjNDE0MzdkNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/zMCAed4UMav49r8rm/x0riEp2W9djqGXA6
Benm7pTv/Zx7THVUCZQHh/ti+Trg/SPL+ZHKfetd+s3N5D98AS4j68cFF2PZJiJ8
lSqxragBf0Gzt7TYm8sQ3pgIzHR2xQqA2Rox+oDDyXnCJl4nzI5udGuIYvB+WyKu
Ojt6JeWLCKcl7//ZEuvTRCFioYl2y9+WFQMcK6B5AcOiF1FB6Vj55AUdmnv+0tLk
afQHvrrJ0M/waK4XNgPHd3Sts/lztbDQoiC3UmIe7zdch8371MGI4rxAUuVMpW2d
67KYQA1vm5bxOveZKKpFL57fh1Aym5uGsgZhXGhehXxGUT/HoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBb1RDkObTWhmVP4RJbUmyZA7jMXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvMTYyMzk2NDAtYTc5OS0z
YzIyLTgwZDQtYjBlNTgyODYzZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJMbpKudCDZvOIfzxmMuygy42ApqyjrwJ5r9cu8OWB4niksODcUbRME
daCF8wVc/goVCpxshBJdWYylFvA4CZtTMzBwzeD5rJm8rVwTomT+TFMlVZ/CoG3B
AxGY5947GsimulKAwjYad682NyA9tI6boB+81VCQIa2Unv+Rg5QNxKHd0CambJY0
jIU1HbJlHsd/WDIaKEJ3F5cHv2L6n7mQ0fQ2rzkgwg3YBtR91SYmrsIZAtw3miT8
CxQdMURmkYQAvbKBWTWdzzNW0T5wrjkuz/oQKCGdKONWA9Bjmp4W8dBFdQv+lE0I
2jSpi+wyEl4TcIvcYlVE+uxQFeV0JWc=
-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org