Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d374581c-04f4-3b01-8043-925452a2af77.roa
File: d374581c-04f4-3b01-8043-925452a2af77.roa (raw, json)
Hash identifier: lAkyWjkNdyQClj8Fi49T5Lxc8N+WHhKtanJUPBeZ/v4=
Subject key identifier: C0:13:9D:32:F0:7E:D1:01:8B:BB:57:94:7C:7D:3A:83:5B:AD:92:B0
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858471A4067DA7F9EA032BC9974C0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d374581c-04f4-3b01-8043-925452a2af77.roa
Signing time: Wed 04 Sep 2024 13:00:41 +0000
ROA not before: Wed 04 Sep 2024 13:00:41 +0000
ROA not after: Tue 03 Dec 2024 14:00:41 +0000
asID: 26496
IP address blocks: 173.201.16.0/20 maxlen: 24
173.201.32.0/20 maxlen: 24
192.155.96.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1a:40:67:da:7f:9e:a0:32:bc:99:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Sep 4 13:00:41 2024 GMT
Not After : Dec 3 14:00:41 2024 GMT
Subject: CN=ae15de03-8486-4161-a8b5-f7617e79372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:e8:79:31:44:0b:6f:f8:6b:69:cd:ff:da:
7e:4b:8c:be:03:29:25:be:a1:19:6a:8c:eb:1b:44:
bd:38:a7:39:35:a2:81:33:b6:d7:3d:e7:b1:33:c6:
9c:49:ae:f0:79:aa:a3:ed:ea:9f:35:16:4d:65:96:
b6:49:60:88:d0:5f:7e:c8:a4:65:8b:a6:6c:67:80:
83:cc:52:ca:48:3b:66:91:f4:a5:0b:f4:d4:f3:81:
19:bc:74:8e:d5:84:27:cb:90:f2:8f:e8:55:8c:42:
33:f9:d4:75:03:63:ff:24:39:8d:fd:dc:18:f2:20:
08:e3:96:c0:c5:d2:81:22:39:8c:9f:91:36:f7:09:
5f:61:e5:c9:d6:3b:d2:c8:cd:58:71:6c:bb:c1:5e:
7d:19:8e:40:45:29:96:67:d4:a7:3d:5c:68:a3:cb:
e5:c0:11:c2:69:5f:40:3b:9d:c9:e7:0d:21:db:4c:
c9:d8:68:60:01:7a:21:99:d0:bf:a1:32:dd:df:f8:
55:80:f7:8b:78:78:14:eb:f6:f5:df:e2:95:c6:f4:
0b:e8:4f:e1:3d:cb:68:9a:eb:c3:1c:3f:64:8e:00:
84:92:97:a7:67:9a:79:08:e1:ab:6b:1e:36:d2:d1:
a6:bd:19:a6:b9:0c:4f:c3:ba:0a:d8:8f:f4:3d:22:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:13:9D:32:F0:7E:D1:01:8B:BB:57:94:7C:7D:3A:83:5B:AD:92:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d374581c-04f4-3b01-8043-925452a2af77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.201.16.0-173.201.47.255
192.155.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:91:55:92:47:cb:22:ef:24:70:11:80:aa:b7:02:f6:c8:66:
55:63:da:96:d9:4b:e6:f4:9b:43:84:3d:99:c1:d3:6d:16:6d:
93:15:9a:22:94:26:7b:ce:fa:b1:67:6b:14:a8:ec:55:4b:d2:
f5:6e:7a:54:ab:b2:77:a2:a2:22:2f:86:f5:ce:7e:3c:91:5a:
a9:00:a0:bf:25:83:87:99:7e:dc:ff:e0:57:3d:60:62:fe:ab:
0a:58:9e:cb:f8:de:91:92:1e:14:b1:2d:69:f1:b7:4a:ca:db:
58:35:29:96:ad:3e:d9:9e:15:b6:30:35:b4:1a:62:7b:97:3c:
00:6f:e3:e8:34:e0:54:1b:9a:1f:0a:00:cd:9b:4f:b0:d1:80:
a7:50:6c:7f:d2:18:76:73:6b:14:03:e1:54:16:db:ea:e0:8b:
4a:54:7d:61:bf:43:9e:5a:c4:11:8d:14:1f:c9:d3:78:d2:1d:
61:3a:7d:a1:af:9e:4e:7b:7f:af:a8:e4:6c:da:84:ce:16:0d:
f1:2a:72:4e:64:78:15:c1:d4:ad:cd:80:b9:2c:ce:cc:55:f7:
85:65:09:40:36:76:34:c3:7f:9b:f8:a8:1b:eb:e6:18:c1:3c:
63:af:d9:14:c8:9c:24:7c:aa:1c:b3:f6:e4:2d:19:6c:8b:95:
d9:9e:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org