Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/4efe36fc-f344-3984-91f0-3c5275b20086.roa
File: 4efe36fc-f344-3984-91f0-3c5275b20086.roa (raw, json)
Hash identifier: ga7WPdmNbCZx9wnQVhEiZy5bFxlgWGLbsBaV4qajykM=
Subject key identifier: B3:93:0A:B1:32:F0:59:5F:1E:25:BC:40:26:BF:10:25:6F:ED:D0:EE
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328576D51CC73C042CFC1730ECF27DA
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/4efe36fc-f344-3984-91f0-3c5275b20086.roa
Signing time: Thu 02 Jul 2020 09:15:23 +0000
ROA not before: Tue 30 Jul 2019 04:00:00 +0000
ROA not after: Mon 30 Jul 2029 04:00:00 +0000
asID: 30083
IP address blocks: 50.30.32.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0e:cf:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jul 30 04:00:00 2019 GMT
Not After : Jul 30 04:00:00 2029 GMT
Subject: CN=0471c3ed-c0e5-4b98-96e3-99eadd568c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:62:ca:45:25:0c:d7:62:02:73:20:0a:83:
19:aa:30:16:24:57:80:2b:15:d8:3d:33:53:64:c3:
5c:eb:d4:1a:d1:a2:41:d7:26:b0:4e:9d:33:19:dc:
a1:3e:2b:4d:a4:8d:47:55:3b:3e:3f:6d:0d:66:01:
46:04:da:62:1e:ed:5f:8d:3f:e0:cb:67:a7:ae:2a:
fa:26:b3:dc:88:96:67:db:70:1a:57:38:92:81:32:
6d:45:b2:98:9e:aa:da:e4:49:b5:fa:88:8c:d4:b8:
b7:ab:95:27:e6:2d:be:ff:2b:93:b8:62:ca:7d:87:
e6:c7:fa:de:3f:15:7f:a7:7a:be:c0:ad:6a:ba:aa:
9b:2d:f9:de:ea:49:4a:db:42:39:df:a7:7f:0f:32:
d4:86:68:ac:17:51:54:98:f5:83:af:41:34:de:90:
6b:ac:71:7c:4c:2a:3d:c7:83:99:20:7e:93:cc:e6:
32:7d:25:63:2b:df:58:75:ec:15:8f:96:af:5e:ba:
50:33:88:90:e7:51:e1:65:08:dd:a0:bb:52:58:ab:
56:07:70:1e:d7:0f:61:88:8a:fa:30:f4:52:2d:11:
dd:cb:72:1c:82:b4:8f:4d:44:fb:03:34:38:77:4b:
e5:d7:96:22:a4:f6:57:8e:6b:9e:16:1e:ed:ab:6f:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:0A:B1:32:F0:59:5F:1E:25:BC:40:26:BF:10:25:6F:ED:D0:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/4efe36fc-f344-3984-91f0-3c5275b20086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
50.30.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:9e:04:3b:75:55:99:6b:d6:a3:46:e6:b6:73:2b:bd:42:de:
f3:74:64:63:dd:18:33:38:11:a9:22:3f:07:ec:fc:f4:78:a1:
66:bc:67:b0:74:98:23:b7:14:ac:32:0c:d1:51:94:d1:c6:1e:
d6:7d:ac:20:2e:e2:20:85:c4:a6:9d:6e:9f:05:43:15:ab:f0:
ee:62:d4:2b:84:68:05:d3:da:bd:3f:41:c3:7a:61:b7:b2:75:
46:50:ae:8c:18:ce:d4:48:42:73:61:b5:0b:61:cd:9c:24:ee:
9c:51:75:51:bf:c8:6f:d5:88:fb:b3:04:d8:ff:42:64:6b:6b:
29:49:f4:c9:2f:01:7a:8f:b6:d6:24:19:d7:af:d9:5c:88:73:
36:f7:2a:ab:9e:76:d3:f9:7f:63:04:af:72:1b:7a:ef:6f:bb:
46:34:34:ce:53:51:0f:3e:66:1d:70:07:20:33:32:a7:70:8e:
75:2a:de:f0:3a:55:c9:a1:1e:1a:77:91:98:76:95:b7:c1:ef:
33:37:8e:78:93:cd:c7:9f:df:d9:ff:3a:43:fe:b3:fb:ad:14:
14:4c:dd:41:ce:d6:a7:7c:fc:fa:fa:6e:90:97:1a:50:59:08:
1a:4c:16:aa:84:e2:2a:36:c8:24:8a:44:83:3e:e4:74:b7:31:
42:32:d0:a8
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcw7PJ9owCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNjZjEz
ZjAeFw0xOTA3MzAwNDAwMDBaFw0yOTA3MzAwNDAwMDBaMC8xLTArBgNVBAMTJDA0
NzFjM2VkLWMwZTUtNGI5OC05NmUzLTk5ZWFkZDU2OGM4MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMLtYspFJQzXYgJzIAqDGaowFiRXgCsV2D0zU2TD
XOvUGtGiQdcmsE6dMxncoT4rTaSNR1U7Pj9tDWYBRgTaYh7tX40/4Mtnp64q+iaz
3IiWZ9twGlc4koEybUWymJ6q2uRJtfqIjNS4t6uVJ+Ytvv8rk7hiyn2H5sf63j8V
f6d6vsCtarqqmy353upJSttCOd+nfw8y1IZorBdRVJj1g69BNN6Qa6xxfEwqPceD
mSB+k8zmMn0lYyvfWHXsFY+Wr166UDOIkOdR4WUI3aC7UlirVgdwHtcPYYiK+jD0
Ui0R3ctyHIK0j01E+wM0OHdL5deWIqT2V45rnhYe7atvH8UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSzkwqxMvBZXx4lvEAmvxAlb+3Q7jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNl
ODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2NmMTNmLzRlZmUzNmZjLWYzNDQtMzk4
NC05MWYwLTNjNTI3NWIyMDA4Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzllZDVjZTgwLTIyNGUtNDZhYi05NGYx
LTFhZmNlOGNjZjEzZi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2Yx
M2YuY3JsMB8GA1UdIwQYMBaAFDgdn6a6fMGoRK4J/loAlp07/OEPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4
Y2NmMTNmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDIeIDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAmJ4EO3VVmWvWo0bmtnMrvULe83RkY90YMzgRqSI/B+z89HihZrxnsHSYI7cU
rDIM0VGU0cYe1n2sIC7iIIXEpp1unwVDFavw7mLUK4RoBdPavT9Bw3pht7J1RlCu
jBjO1EhCc2G1C2HNnCTunFF1Ub/Ib9WI+7ME2P9CZGtrKUn0yS8Beo+21iQZ16/Z
XIhzNvcqq5520/l/YwSvcht672+7RjQ0zlNRDz5mHXAHIDMyp3COdSre8DpVyaEe
GneRmHaVt8HvMzeOeJPNx5/f2f86Q/6z+60UFEzdQc7Wp3z8+vpukJcaUFkIGkwW
qoTiKjbIJIpEgz7kdLcxQjLQqA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org