Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/59396986-4e78-3375-8e89-33131673feff.roa
File: 59396986-4e78-3375-8e89-33131673feff.roa (raw, json)
Hash identifier: G38kAQycc6nVR6Ff5teCGBAfWiUYotPDswVkydm9UAA=
Subject key identifier: A0:7B:6E:D3:CB:3C:89:45:52:1D:AD:61:BE:36:78:8A:22:9B:53:F7
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285846DCA6C31F5D876B410C348100
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/59396986-4e78-3375-8e89-33131673feff.roa
Signing time: Tue 13 Aug 2024 11:26:51 +0000
ROA not before: Tue 13 Aug 2024 11:26:51 +0000
ROA not after: Mon 11 Nov 2024 12:26:51 +0000
asID: 30083
IP address blocks: 192.155.96.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:dc:a6:c3:1f:5d:87:6b:41:0c:34:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Aug 13 11:26:51 2024 GMT
Not After : Nov 11 12:26:51 2024 GMT
Subject: CN=edcf92bf-ba6c-4f69-b96c-331fa93c6324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:d9:18:7f:90:5b:8e:09:9c:1a:41:4e:94:
91:70:75:3d:b3:07:99:79:53:29:bd:fc:1f:85:7e:
5d:25:d0:c4:16:6b:18:23:f2:1d:22:52:df:49:4a:
8a:d9:c0:8a:1e:e5:ee:33:b9:09:80:85:cf:e0:5c:
33:2d:40:73:ba:cb:93:8f:7b:c0:f8:77:13:76:3e:
34:7a:e0:38:2e:fe:ac:10:71:69:50:99:e1:6b:68:
c5:6b:40:50:75:9b:27:95:72:8b:27:2e:ea:af:93:
78:5f:25:d1:b6:f7:4b:9f:61:e3:2a:bb:11:b5:23:
d3:7a:b0:69:cf:45:d9:3a:65:35:c8:40:84:60:c8:
71:ee:09:55:db:fd:91:7b:f6:ae:35:7f:30:bc:1a:
be:b8:46:11:75:81:8f:e3:9f:66:ac:69:08:af:85:
06:25:f7:0a:21:44:4a:dd:4f:5a:85:3c:b0:e1:3c:
14:c6:23:59:72:04:65:fb:0d:59:58:a5:ee:90:de:
aa:5a:17:10:3c:73:e3:fc:51:fb:dc:2a:23:c8:27:
e7:fb:64:33:60:fd:f3:35:6d:1f:c1:ad:1e:90:82:
d3:d1:03:98:2d:6e:c1:fe:e5:87:6b:22:fd:4d:41:
c6:41:50:17:88:2f:a4:53:e9:6b:74:e7:cf:4f:a8:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:6E:D3:CB:3C:89:45:52:1D:AD:61:BE:36:78:8A:22:9B:53:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/59396986-4e78-3375-8e89-33131673feff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.155.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:88:8a:90:ed:5d:82:3b:81:e1:8a:35:ff:0c:d5:c2:86:ca:
74:08:a9:c4:84:96:1d:92:e1:a6:59:9b:16:c3:cd:13:7c:67:
98:cf:07:fc:91:08:7f:0e:74:47:e7:92:40:68:40:c4:b1:d1:
a3:bb:48:10:0e:8e:e9:2e:0d:b8:f3:50:dc:a4:ad:a8:29:9a:
e1:6e:3d:75:12:50:f6:a6:e6:fb:8c:f1:76:ba:b8:ff:6e:d0:
4f:23:60:e7:08:a8:d2:4c:e1:74:e5:45:48:81:7f:fc:06:e1:
75:92:de:b5:74:c5:23:34:9b:e3:fb:3b:69:f5:70:57:10:bd:
4a:78:78:ab:6a:12:4a:c1:b0:ff:a4:28:e9:91:1a:af:f5:73:
9e:cb:d4:bd:3a:76:ce:48:06:fe:b6:cf:2b:cd:ed:2f:69:1b:
1f:f9:6f:c6:57:d3:34:b1:68:c4:1f:d2:be:57:a6:2f:b9:d4:
4c:89:2e:9b:e8:a2:ff:42:10:1c:16:db:6b:4e:81:06:2e:84:
c0:0c:34:8d:dc:9b:b8:8c:01:d4:bc:ef:43:10:a0:f0:65:da:
4c:f7:1c:65:1d:91:4d:62:34:84:67:93:db:b7:7c:be:c3:8d:
fc:01:9e:46:89:06:4e:27:e3:1f:a3:82:aa:1d:ee:0f:32:94:
e6:78:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:33 2024 by rpki-client on console-fra.rpki-client.org