Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/1528d4b6-1f39-36ef-b820-bb3db1838fd0.roa
File: 1528d4b6-1f39-36ef-b820-bb3db1838fd0.roa (raw, json)
Hash identifier: eHz2flbZixieSkx+1YwNREAC/Q6l54ChOkSi06nCTIA=
Subject key identifier: 3A:87:0F:A7:3F:26:98:32:CB:6F:A4:37:5D:79:A0:D5:E2:87:1A:7D
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F43285845734DAC0A1DB92D198723D080
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/1528d4b6-1f39-36ef-b820-bb3db1838fd0.roa
Signing time: Sat 06 Apr 2024 01:00:26 +0000
ROA not before: Sat 06 Apr 2024 01:00:26 +0000
ROA not after: Fri 05 Jul 2024 01:00:26 +0000
asID: 396998
IP address blocks: 205.178.176.0/23 maxlen: 24
205.220.224.0/21 maxlen: 24
206.71.158.0/23 maxlen: 24
209.237.140.0/23 maxlen: 24
2600:3500::/28 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:73:4d:ac:0a:1d:b9:2d:19:87:23:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Apr 6 01:00:26 2024 GMT
Not After : Jul 5 01:00:26 2024 GMT
Subject: CN=906d8882-b8bf-470b-bc00-10e59594f06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:21:f9:96:e9:9a:60:08:ac:2e:a7:05:ef:
ca:a8:72:ec:99:49:29:2b:f6:78:d1:e5:80:d3:1e:
c4:fe:b8:e6:86:9d:da:98:66:2b:73:6c:c8:ca:22:
3c:28:1f:63:1a:32:c2:53:89:3f:42:ce:8c:60:87:
a7:47:d7:15:29:87:a1:b0:65:ec:15:1d:a9:eb:c7:
d4:b7:48:37:db:e5:d6:fe:4f:09:4f:ab:53:cd:a2:
b6:cc:f3:18:84:47:c3:89:d7:15:8d:d0:de:39:15:
0a:ff:4f:e5:51:da:25:04:c5:6b:6b:44:c2:e5:04:
4b:d6:c6:27:80:3e:dd:ec:54:e0:0a:57:8c:6e:fb:
2c:a6:d6:5c:ea:03:a1:4d:45:49:af:e5:ec:6c:a1:
4e:bd:6b:d4:2b:19:53:0a:65:f6:fe:4e:3b:91:43:
70:61:02:07:a4:da:87:43:2d:af:d0:5a:a6:44:cd:
10:6e:c8:5e:88:51:d1:35:14:07:46:d7:2c:e4:91:
72:ca:94:f9:b5:a9:35:80:de:90:d3:ce:4f:ce:b7:
3b:22:7d:9f:66:be:0d:1d:8f:83:1c:f9:90:b2:c4:
d9:35:8b:3a:10:41:ab:55:86:2f:bf:cc:16:b1:64:
74:16:20:53:c2:1a:2b:12:de:8f:35:0d:d4:6f:48:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:0F:A7:3F:26:98:32:CB:6F:A4:37:5D:79:A0:D5:E2:87:1A:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/1528d4b6-1f39-36ef-b820-bb3db1838fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.178.176.0/23
205.220.224.0/21
206.71.158.0/23
209.237.140.0/23
IPv6:
2600:3500::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:99:cd:61:50:32:f8:05:c7:3e:d1:c6:78:89:67:c5:52:78:
93:0e:9e:90:f3:80:f5:2b:bb:67:20:54:08:61:15:4e:3d:8b:
a1:f5:ac:dc:21:46:e2:8d:0b:32:09:cd:71:bf:c3:34:60:fc:
e6:f8:14:d0:27:77:2a:58:83:08:09:bb:55:2e:3c:80:8c:b6:
43:14:b5:8c:52:c9:cd:1a:fe:61:49:c5:ec:47:a9:f3:ce:83:
6f:f4:fc:88:19:33:10:d8:66:49:f2:b3:0f:54:4e:e4:cb:81:
fc:40:f1:9b:2c:9e:a6:58:ab:80:d9:81:f8:30:64:d9:4e:6d:
61:34:6d:ff:21:30:70:e7:92:50:7d:64:13:bf:4e:d6:19:0f:
3b:3b:8d:df:b0:aa:ec:8e:52:4e:b0:1d:d0:55:0e:a1:70:d6:
8a:4e:9e:84:19:c3:a5:9a:23:01:06:c1:4b:f2:87:8c:e8:9c:
79:d7:16:73:bc:3f:61:ac:8e:0d:f2:2f:b9:0b:15:7f:7b:37:
36:77:fc:2e:a2:96:73:99:10:e3:c2:15:85:5c:d6:df:7f:8c:
27:71:92:5c:e7:af:df:4e:e8:10:55:c2:2e:5e:29:bb:77:85:
fd:26:cc:3d:1c:fa:3e:62:54:ff:1d:2f:18:89:67:54:32:ef:
23:08:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:00 2024 by rpki-client on console-fra.rpki-client.org