Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/7e433ff4-6d11-3a02-b25c-c830c7cbda09.roa
File: 7e433ff4-6d11-3a02-b25c-c830c7cbda09.roa (raw, json)
Hash identifier: oBRjAqddCbiNArgIsp8AT3WfueypOHnS5hId0JtWQfU=
Subject key identifier: 6F:83:25:95:EC:ED:9C:15:67:24:0B:0E:7F:8B:AA:BD:E7:FD:F2:20
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285846CC1553415095380B9065A900
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/7e433ff4-6d11-3a02-b25c-c830c7cbda09.roa
Signing time: Wed 07 Aug 2024 13:00:39 +0000
ROA not before: Wed 07 Aug 2024 13:00:39 +0000
ROA not after: Tue 05 Nov 2024 14:00:39 +0000
asID: 30083
IP address blocks: 162.211.120.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:cc:15:53:41:50:95:38:0b:90:65:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Aug 7 13:00:39 2024 GMT
Not After : Nov 5 14:00:39 2024 GMT
Subject: CN=98aaa04e-e9a6-46be-829d-9ef60022ecff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ae:1f:22:14:55:e9:ac:86:a2:0d:9e:02:e7:
f2:45:cc:6f:2d:8e:8d:a6:53:74:b6:fe:58:79:b2:
ea:56:21:e4:13:d8:d7:13:b3:97:6e:af:3c:b0:fa:
ba:a8:8a:25:9a:bb:14:49:5d:b3:7d:87:c3:72:1e:
7c:26:a4:7e:9e:2c:01:11:26:84:cc:4e:02:98:1f:
86:6d:eb:7d:0a:8a:85:54:0a:a4:00:39:91:d0:81:
b0:42:e4:6f:32:13:00:5e:01:d0:31:75:6c:7d:e5:
15:18:6c:40:2f:45:19:37:42:37:5a:47:e3:ef:05:
03:06:45:68:b9:3d:d2:15:fa:dc:fc:c1:5c:58:25:
40:b9:bb:f9:b5:dc:a3:da:61:a1:14:34:55:31:da:
e0:e1:1a:83:dd:d0:88:4a:cb:92:b9:96:ec:8f:80:
20:c8:23:83:5d:c5:47:0e:57:c2:03:de:24:bf:28:
d1:e6:2b:d4:ae:55:8c:e6:67:cf:b2:c8:70:7b:7f:
31:af:6b:2d:a7:fc:94:ab:30:98:ef:fe:3b:ea:c9:
2d:de:a0:1c:be:ce:7d:4f:c0:83:92:d4:6d:ae:b1:
ed:3c:b0:03:3b:13:21:f7:9e:8a:11:c9:65:94:21:
3f:af:bc:30:3e:e5:e5:89:85:0a:ff:18:66:3e:70:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:25:95:EC:ED:9C:15:67:24:0B:0E:7F:8B:AA:BD:E7:FD:F2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/7e433ff4-6d11-3a02-b25c-c830c7cbda09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:77:78:0c:90:8d:86:9a:23:5f:54:f8:4a:74:df:5b:60:5d:
66:4d:b2:4a:fc:e4:0e:cf:9e:e8:30:90:15:4a:01:98:40:36:
4c:d4:bd:10:dd:a7:84:42:13:7c:1e:b9:46:f1:1f:ea:e8:31:
f4:93:4e:c7:7e:30:f7:8e:3b:06:0f:44:be:32:36:7c:32:01:
14:eb:be:32:1a:db:1f:39:a4:94:20:d5:a4:e2:8e:ac:f9:00:
48:b9:0e:e1:da:44:f6:68:3e:c4:79:9e:58:0e:6b:56:2a:a3:
c1:0e:e0:44:cb:db:fa:cc:ec:81:e5:d9:b2:b9:e3:93:22:2d:
4d:00:66:69:4c:b5:4b:50:49:40:27:0d:40:5e:3a:72:47:d6:
19:b9:b8:57:5b:a9:36:e8:c8:12:36:33:3c:75:33:9a:00:26:
6d:0f:79:81:49:70:88:a7:b1:a5:76:42:ed:2c:ae:8c:55:fa:
5f:98:aa:c6:30:85:22:5e:dd:bb:cd:74:c3:fe:e0:ac:05:f1:
7a:d5:0a:5e:8e:d4:c1:12:67:1c:61:6c:b1:3a:9b:64:ec:d8:
09:6c:c6:3d:22:0d:b2:b2:52:2b:38:f1:8f:97:3b:cf:4e:2d:
84:7f:a7:79:a0:2b:55:89:f3:ab:54:ea:c6:af:0b:bf:48:a8:
1f:12:3a:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbMFVNBUJU4C5BlqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI0MDgwNzEzMDAzOVoXDTI0MTEwNTE0MDAzOVowLzEtMCsGA1UEAxMk
OThhYWEwNGUtZTlhNi00NmJlLTgyOWQtOWVmNjAwMjJlY2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK4fIhRV6ayGog2eAufyRcxvLY6NplN0tv5Y
ebLqViHkE9jXE7OXbq88sPq6qIolmrsUSV2zfYfDch58JqR+niwBESaEzE4CmB+G
bet9CoqFVAqkADmR0IGwQuRvMhMAXgHQMXVsfeUVGGxAL0UZN0I3Wkfj7wUDBkVo
uT3SFfrc/MFcWCVAubv5tdyj2mGhFDRVMdrg4RqD3dCISsuSuZbsj4AgyCODXcVH
DlfCA94kvyjR5ivUrlWM5mfPsshwe38xr2stp/yUqzCY7/476skt3qAcvs59T8CD
ktRtrrHtPLADOxMh956KEclllCE/r7wwPuXliYUK/xhmPnCd5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+DJZXs7ZwVZyQLDn+Lqr3n/fIgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvN2U0MzNmZjQtNmQxMS0z
YTAyLWIyNWMtYzgzMGM3Y2JkYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZ3eAyQjYaaI19U+Ep031tgXWZNskr85A7PnugwkBVKAZhANkzUvRDd
p4RCE3weuUbxH+roMfSTTsd+MPeOOwYPRL4yNnwyARTrvjIa2x85pJQg1aTijqz5
AEi5DuHaRPZoPsR5nlgOa1Yqo8EO4ETL2/rM7IHl2bK545MiLU0AZmlMtUtQSUAn
DUBeOnJH1hm5uFdbqTboyBI2Mzx1M5oAJm0PeYFJcIinsaV2Qu0sroxV+l+YqsYw
hSJe3bvNdMP+4KwF8XrVCl6O1MESZxxhbLE6m2Ts2Alsxj0iDbKyUis48Y+XO89O
LYR/p3mgK1WJ86tU6savC79IqB8SOvs=
-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:33 2024 by rpki-client on console-fra.rpki-client.org