Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/368e42e8-4798-3891-9539-e7c34fd2c6cf.roa
File: 368e42e8-4798-3891-9539-e7c34fd2c6cf.roa (raw, json)
Hash identifier: TjyJCG0Tsek2Ggls53QUSqNvZbB3CRqmjK+KD93/iOQ=
Subject key identifier: B5:C4:6A:3C:C0:39:DE:CD:91:D0:FB:09:DD:16:60:39:BC:0E:CC:99
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328583A0D0DCA6A93FE504FC8586B70
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/368e42e8-4798-3891-9539-e7c34fd2c6cf.roa
Signing time: Tue 30 Jul 2019 04:00:00 +0000
ROA not before: Tue 30 Jul 2019 04:00:00 +0000
ROA not after: Mon 30 Jul 2029 04:00:00 +0000
asID: 21501
IP address blocks: 132.148.0.0/16 maxlen: 24
68.178.128.0/17 maxlen: 24
23.229.128.0/17 maxlen: 24
45.40.128.0/18 maxlen: 24
50.62.0.0/15 maxlen: 24
72.167.0.0/16 maxlen: 24
97.74.0.0/16 maxlen: 24
104.238.64.0/18 maxlen: 24
148.72.0.0/16 maxlen: 24
160.153.0.0/16 maxlen: 24
166.62.0.0/17 maxlen: 24
173.201.0.0/16 maxlen: 24
184.168.0.0/16 maxlen: 24
192.169.128.0/17 maxlen: 24
192.186.192.0/18 maxlen: 24
198.12.128.0/17 maxlen: 24
198.71.128.0/17 maxlen: 24
208.109.0.0/16 maxlen: 24
216.69.128.0/18 maxlen: 24
2607:f208:d000::/43 maxlen: 43
2607:f208:df00::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:0d:0d:ca:6a:93:fe:50:4f:c8:58:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jul 30 04:00:00 2019 GMT
Not After : Jul 30 04:00:00 2029 GMT
Subject: CN=9af28f68-542d-42df-ad51-9459ba1c751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:7d:13:8d:25:76:38:c2:38:85:9e:d6:a8:
3b:ed:67:8e:9e:97:8d:60:b0:a0:ac:5f:44:fa:04:
a4:0a:85:54:ad:3b:3b:08:dd:c0:02:6d:6b:23:4d:
9a:b3:85:76:f3:8b:09:90:d9:a9:c7:6b:61:15:2b:
b8:6e:03:45:e2:36:44:c0:fa:c0:d7:ae:44:37:04:
a6:e0:7f:5c:f6:73:92:5d:22:12:6f:a9:b7:49:ad:
92:fa:db:72:98:c4:65:f6:da:bd:7c:34:1e:8c:a5:
3f:84:7a:6c:15:1c:97:e3:ff:0c:e4:88:6f:32:ae:
a0:dd:b7:ea:5e:75:81:35:28:77:09:17:51:4f:e8:
80:45:b6:f6:f4:13:04:f0:e7:c6:b6:15:81:12:66:
cc:f0:78:59:3f:2f:9b:a6:89:10:18:c3:7c:0d:b3:
7b:77:8e:45:e8:f5:b5:c2:a4:f0:ff:df:85:20:c3:
6f:31:5a:9f:40:97:49:60:28:3b:aa:09:d7:34:77:
5b:ac:8c:10:19:c4:6f:a5:c3:68:82:01:9e:9b:1e:
c1:0e:66:d8:9a:11:54:70:78:17:ce:f0:59:08:7f:
2e:b2:30:fb:de:73:e1:5a:5e:ee:8e:7e:b1:af:3c:
9a:aa:52:b4:ab:4e:62:13:bb:f5:d0:5f:d9:0d:d3:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C4:6A:3C:C0:39:DE:CD:91:D0:FB:09:DD:16:60:39:BC:0E:CC:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/368e42e8-4798-3891-9539-e7c34fd2c6cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.128.0/17
45.40.128.0/18
50.62.0.0/15
68.178.128.0/17
72.167.0.0/16
97.74.0.0/16
104.238.64.0/18
132.148.0.0/16
148.72.0.0/16
160.153.0.0/16
166.62.0.0/17
173.201.0.0/16
184.168.0.0/16
192.169.128.0/17
192.186.192.0/18
198.12.128.0/17
198.71.128.0/17
208.109.0.0/16
216.69.128.0/18
IPv6:
2607:f208:d000::/43
2607:f208:df00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:81:e7:1c:da:e3:92:ac:99:c3:df:fe:67:87:45:69:14:57:
f3:e8:ff:a9:60:e6:98:f0:8f:28:d0:d8:75:37:a3:82:3a:71:
46:00:66:cf:f9:f0:64:1e:e8:75:c8:0a:13:2b:18:56:2a:e0:
c9:a6:8f:97:a8:1d:db:5d:6f:91:8a:43:88:ac:b7:06:01:c0:
9a:8a:00:91:bf:6f:20:df:b0:39:99:a0:4e:76:55:97:d6:0f:
5a:74:9c:4d:d2:b9:ce:ca:3f:18:a7:28:24:53:a5:a0:cc:93:
23:93:ee:f8:89:b1:ab:2c:d9:83:1b:cc:07:b8:d6:91:32:73:
52:df:4f:aa:a0:fe:b2:57:97:9f:f0:1d:6b:e6:e7:3e:bf:61:
5a:f7:cb:be:83:b9:8f:a7:ab:38:de:ad:01:2b:c2:56:6b:ac:
8d:0b:d9:fa:b5:bf:f1:8e:0b:ed:ad:2a:c1:de:33:29:2c:55:
06:50:5e:b9:25:3a:a3:97:51:8c:68:91:e6:05:0e:bc:96:0e:
1b:83:62:c4:00:51:91:8a:b7:de:1c:be:da:34:d0:41:9c:4c:
09:02:60:17:67:60:4c:af:58:0a:41:90:d1:57:fd:79:26:10:
af:2f:68:81:d3:ec:40:07:be:db:a7:48:9a:47:23:d2:1c:13:
a5:36:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:33 2024 by rpki-client on console-fra.rpki-client.org