Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1deae8cb-3b65-3970-b4de-89fbd5922395.roa
File: 1deae8cb-3b65-3970-b4de-89fbd5922395.roa (raw, json)
Hash identifier: j6N1L2Cev5zugIAjovRquUTDY+leY72qJZDCoErxiZg=
Subject key identifier: 10:94:C6:D0:83:22:6F:F4:E9:96:0B:78:7D:18:82:06:FB:1D:1E:5A
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328583A0D0E16B67C84430696E5C960
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1deae8cb-3b65-3970-b4de-89fbd5922395.roa
Signing time: Tue 30 Jul 2019 04:00:00 +0000
ROA not before: Tue 30 Jul 2019 04:00:00 +0000
ROA not after: Mon 30 Jul 2029 04:00:00 +0000
asID: 34011
IP address blocks: 132.148.0.0/16 maxlen: 24
68.178.128.0/17 maxlen: 24
23.229.128.0/17 maxlen: 24
45.40.128.0/18 maxlen: 24
50.62.0.0/15 maxlen: 24
72.167.0.0/16 maxlen: 24
97.74.0.0/16 maxlen: 24
104.238.64.0/18 maxlen: 24
148.72.0.0/16 maxlen: 24
160.153.0.0/16 maxlen: 24
166.62.0.0/17 maxlen: 24
173.201.0.0/16 maxlen: 24
184.168.0.0/16 maxlen: 24
192.169.128.0/17 maxlen: 24
192.186.192.0/18 maxlen: 24
198.12.128.0/17 maxlen: 24
198.71.128.0/17 maxlen: 24
208.109.0.0/16 maxlen: 24
216.69.128.0/18 maxlen: 24
2607:f208:d000::/43 maxlen: 43
2607:f208:df00::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:0d:0e:16:b6:7c:84:43:06:96:e5:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jul 30 04:00:00 2019 GMT
Not After : Jul 30 04:00:00 2029 GMT
Subject: CN=34e45e24-affe-475c-be99-ca236accb109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:4f:d5:fe:e4:a5:80:95:af:c3:63:b4:b3:
d3:27:fe:7d:be:e7:6d:ef:4e:d3:33:d1:a6:bf:d2:
2d:b5:f0:15:82:e8:c2:d1:51:20:c7:97:49:47:ef:
05:70:55:c7:3a:76:22:25:d7:46:99:04:08:66:c5:
af:94:17:af:eb:7d:6a:39:6b:93:4a:8f:ad:3a:3d:
e3:39:e3:0d:bb:42:d7:ad:b1:96:d1:13:16:be:90:
3a:e0:39:0d:aa:8f:7b:cd:30:7e:ea:88:d6:9d:e4:
48:f3:94:db:f0:b3:f2:d6:72:4a:ba:bc:f6:37:65:
7f:f1:ca:93:8a:e8:0a:f4:4f:df:9a:66:a8:5d:1c:
09:3d:4d:21:ed:db:d1:cd:a6:1c:86:f0:0c:cb:22:
38:47:3d:c4:ef:2b:83:ae:24:a4:99:db:c3:8d:ea:
2c:f7:a5:0c:b2:4f:88:5c:e7:93:3b:fa:55:b6:3d:
44:7f:33:4e:fc:74:80:07:a8:56:73:e3:61:b8:57:
18:70:fb:ad:db:9c:78:d8:d9:78:d2:44:57:31:f4:
61:a6:c8:32:c8:c2:3f:8d:b8:cd:4e:c2:fe:40:3d:
36:ca:2f:02:e8:8f:67:58:80:b3:a4:83:c5:b5:67:
69:c8:32:a4:8a:f4:46:65:04:68:02:2b:a8:26:79:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:C6:D0:83:22:6F:F4:E9:96:0B:78:7D:18:82:06:FB:1D:1E:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1deae8cb-3b65-3970-b4de-89fbd5922395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.128.0/17
45.40.128.0/18
50.62.0.0/15
68.178.128.0/17
72.167.0.0/16
97.74.0.0/16
104.238.64.0/18
132.148.0.0/16
148.72.0.0/16
160.153.0.0/16
166.62.0.0/17
173.201.0.0/16
184.168.0.0/16
192.169.128.0/17
192.186.192.0/18
198.12.128.0/17
198.71.128.0/17
208.109.0.0/16
216.69.128.0/18
IPv6:
2607:f208:d000::/43
2607:f208:df00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:18:8d:6a:d4:28:0b:49:04:be:ab:68:b3:60:e2:09:35:3a:
fb:3f:ea:79:28:c8:e6:63:ce:19:1e:12:56:d2:30:5d:fc:74:
a6:11:d8:bc:81:fb:11:28:d2:d0:e8:29:cd:7f:5f:c4:46:3f:
63:e3:5a:80:79:56:72:e8:e4:ce:51:b0:02:f3:25:dd:2e:e8:
67:49:aa:19:b7:bc:91:46:6b:26:11:4c:07:7c:c7:cf:95:9a:
2c:09:98:56:4b:0d:41:55:d4:bc:7e:bc:5c:3a:fb:82:15:47:
24:c8:c6:3d:9f:10:62:12:21:07:62:e8:8d:4d:da:20:aa:35:
44:1d:93:b8:3d:51:c5:24:88:37:40:94:bf:39:fa:5c:97:d4:
d9:8f:a7:c9:12:48:b6:c6:78:f6:40:6f:99:0b:a8:4c:ec:8f:
2c:72:4d:de:1c:91:e0:0b:5c:5e:a9:74:11:e3:f5:a2:59:d2:
14:6a:ae:a5:e6:71:61:e5:a3:2a:01:57:16:8c:12:94:48:3e:
39:2e:06:b8:9d:9c:72:0a:db:8f:8c:61:67:8e:97:fd:b5:70:
84:03:f9:70:ec:19:c9:9f:03:c1:9b:e9:f4:9a:b4:18:85:40:
c6:c6:38:88:eb:0c:7e:cf:85:ef:40:2b:19:87:7b:31:55:b1:
67:ed:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org