Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/98c39fbb-4032-363d-a9e8-195eaff40a4f.roa
File: 98c39fbb-4032-363d-a9e8-195eaff40a4f.roa (raw, json)
Hash identifier: aoUJjO93bQEQJvQ0MA6S8Bsl26OlgwLqEr8NAa2IzPE=
Subject key identifier: B3:19:31:4E:08:F4:6D:AC:9F:4F:0E:22:89:34:0E:FE:48:98:76:FC
Certificate issuer: /CN=d4919c1e-24c8-430e-8811-91383c31b96a
Certificate serial: 010D0C9F43285842C323FE0511D2F37220254E40
Authority key identifier: DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/98c39fbb-4032-363d-a9e8-195eaff40a4f.roa
Signing time: Thu 03 Aug 2023 13:00:19 +0000
ROA not before: Thu 03 Aug 2023 13:00:19 +0000
ROA not after: Wed 01 Nov 2023 13:00:19 +0000
asID: 19281
IP address blocks: 199.249.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c3:23:fe:05:11:d2:f3:72:20:25:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4919c1e-24c8-430e-8811-91383c31b96a
Validity
Not Before: Aug 3 13:00:19 2023 GMT
Not After : Nov 1 13:00:19 2023 GMT
Subject: CN=a9817b5f-c143-4cb0-863a-0f18c785d922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:37:cf:16:77:05:a9:d9:d3:13:c4:67:fb:
f6:48:2f:80:4a:9b:dd:00:6b:f1:fc:cf:ca:96:51:
a9:ed:e4:9f:26:9e:83:47:61:54:f4:d4:8f:43:dd:
67:4f:ed:95:ad:45:b5:04:c1:db:70:1e:39:12:2a:
06:31:a2:9a:1a:4f:37:35:73:1d:f2:b2:fd:36:2e:
f0:9e:80:b1:f7:fa:2c:9f:e4:fe:27:9b:52:81:e1:
a5:d4:f0:54:c3:b9:2e:a5:8f:a2:bd:f7:51:2c:fc:
47:8a:c3:cb:d8:40:eb:4d:99:18:d0:f2:9b:7a:82:
12:78:d8:f5:39:5b:61:2b:4f:d6:5c:fc:55:12:5e:
c7:67:f8:da:14:f5:68:06:f8:03:e8:d8:56:2e:c2:
c3:32:d2:bf:0b:9c:78:42:71:e4:55:0c:43:6b:2c:
1d:04:51:6e:e4:83:0c:2a:c8:fb:63:75:c7:21:97:
06:0e:f5:a0:1d:51:4f:79:f0:1a:f8:82:1f:d4:35:
ae:36:10:51:95:8f:2b:54:a2:56:0a:21:98:8e:07:
5c:9b:0f:10:7e:d6:20:79:ec:83:8f:72:3b:c5:51:
64:8e:51:fd:d3:d0:44:b5:48:d5:43:ad:04:2b:e2:
23:76:d2:62:eb:c4:0e:03:05:08:21:6a:b1:1f:66:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:31:4E:08:F4:6D:AC:9F:4F:0E:22:89:34:0E:FE:48:98:76:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/98c39fbb-4032-363d-a9e8-195eaff40a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl
X509v3 Authority Key Identifier:
keyid:DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b3:87:25:2f:57:72:79:d5:e2:a9:8e:b1:d1:6f:1e:ac:17:
ad:ff:28:d5:e2:48:eb:9a:6a:47:6d:4f:83:55:05:85:08:e5:
33:03:24:3e:b0:86:32:86:bc:6a:e9:fd:71:e5:26:85:b7:f1:
f9:60:51:5e:27:68:07:3d:48:3e:2c:ea:b7:45:c1:c5:57:8c:
72:4b:eb:21:4a:d4:8d:98:c4:81:f1:78:5a:54:8f:28:83:bb:
66:ad:68:c7:07:b5:24:64:c9:be:63:e4:d6:68:cf:14:b6:a5:
90:de:30:4d:76:7f:dc:2f:a7:e4:b4:80:80:cc:89:f2:24:75:
34:4b:dd:4d:32:49:05:7c:59:cc:e3:81:21:b6:1a:19:da:9b:
1d:ff:4f:8f:0b:2b:4e:0c:44:46:86:c3:01:1d:a3:2b:4d:d5:
74:b1:dc:6e:20:af:19:df:51:4b:ad:dc:d7:c1:10:34:f9:eb:
94:d3:51:ed:67:16:8d:a3:9e:17:1b:73:8d:3e:21:db:03:72:
af:53:cd:95:be:b8:0f:9c:7c:35:c0:1b:71:d8:69:7e:7a:df:
dc:9c:4b:aa:5b:05:64:34:cf:e1:b3:87:a9:1a:23:ea:89:28:
bb:2f:ff:1b:da:d3:25:d3:53:39:3c:60:2f:35:32:5e:3d:7a:
03:e9:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 16:54:08 2023 by rpki-client on console-ams.rpki-client.org