Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/265abfd9-fb66-3d69-8b64-81b526014ce8.roa
File: 265abfd9-fb66-3d69-8b64-81b526014ce8.roa (raw, json)
Hash identifier: krhUsa/1lTTTYNXKjJa3H/4ICfi0HkQywM0CtOUfOvM=
Subject key identifier: 1C:4C:09:14:DA:28:A1:8D:00:76:85:BD:A2:B5:41:D6:5A:C2:AE:66
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328576D51CC73C042CFC158BE6944A0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/265abfd9-fb66-3d69-8b64-81b526014ce8.roa
Signing time: Fri 02 Dec 2016 07:21:59 +0000
ROA not before: Thu 01 Dec 2016 05:00:00 +0000
ROA not after: Tue 01 Dec 2026 05:00:00 +0000
asID: 51964
IP address blocks: 216.72.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:be:69:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 1 05:00:00 2016 GMT
Not After : Dec 1 05:00:00 2026 GMT
Subject: CN=1442c964-d9e7-4ce1-86c6-8f2528c22001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:37:8e:af:80:e9:a7:c2:1f:5e:90:2f:41:
ce:1c:da:ed:c4:e6:c3:4e:19:10:f3:24:9d:7d:1c:
68:5b:75:d0:bd:61:8f:2c:96:22:84:43:19:51:5f:
09:c7:e5:a6:21:5b:0a:de:8b:b8:3d:c9:f7:cc:87:
dc:e2:cf:17:54:35:a9:ca:41:47:e3:7b:6e:30:7e:
9d:6c:fe:f1:1a:03:07:ac:9b:60:83:eb:2e:85:73:
ca:03:c6:eb:81:33:93:ac:d2:83:1e:cf:78:bb:0e:
a4:a4:3c:a6:8e:e6:a6:ba:0c:67:28:89:ec:5c:f6:
45:23:cf:34:94:aa:16:4a:6f:c6:09:d6:c9:84:d4:
5c:a1:77:42:df:ed:94:b3:3d:4e:2d:62:cd:d1:91:
77:fe:b3:09:19:fd:bd:44:5a:b4:c7:b2:68:94:20:
f7:56:29:95:fa:74:e0:44:cf:1b:d6:96:7f:41:67:
5d:9e:f6:c0:c5:b7:d8:79:5c:7a:74:93:b3:9f:be:
11:19:67:91:ec:56:89:46:48:d2:2a:21:b7:82:8e:
42:54:bf:2e:fc:09:a7:e2:ba:23:04:bf:f4:73:5d:
4d:89:0e:90:76:9a:94:f1:c2:da:28:ad:e0:6c:bf:
be:21:94:68:44:c4:9b:84:fc:18:05:06:a7:bb:3f:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:09:14:DA:28:A1:8D:00:76:85:BD:A2:B5:41:D6:5A:C2:AE:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/265abfd9-fb66-3d69-8b64-81b526014ce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
216.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:96:97:e3:4b:68:17:2f:ab:65:df:7a:b3:fb:9b:b8:72:91:
20:f9:3b:13:ec:c2:bb:c3:db:b1:64:be:cb:7a:ff:87:61:50:
23:05:77:43:0c:e6:27:cc:63:0b:33:2d:31:fc:e4:f6:99:86:
73:6c:c9:10:92:f7:29:06:33:72:93:39:92:3a:a2:b9:18:26:
71:d1:3c:af:fc:27:41:a0:55:8b:ee:12:ce:70:e5:07:a4:a4:
cd:e6:fa:f7:31:b1:86:a6:6f:33:69:9e:0e:db:b1:b4:7e:24:
e0:0d:10:ef:07:e9:cf:7a:a1:e6:fb:4c:07:1b:ae:93:bc:2c:
a1:f9:aa:c7:d8:9a:6d:b2:3b:ef:c7:80:3c:9e:b2:1e:4a:32:
37:e2:5b:99:58:38:03:52:1e:a3:5d:ae:9a:f2:bf:1a:7c:fd:
06:5f:f4:a8:6f:59:b3:59:54:ff:80:c8:d8:2e:bf:54:52:cd:
4d:3e:43:b1:04:36:92:df:a2:43:ed:5d:ed:0a:dc:6a:90:a7:
60:2c:ad:92:7a:36:a5:f5:ed:ca:2d:36:5c:7e:2c:d5:b1:82:
4e:c1:20:5c:ab:46:18:68:c4:ae:1a:20:f7:fa:be:e5:6b:f6:
01:55:c8:27:ed:0e:ec:74:f6:0c:ab:fd:7f:de:50:cb:ad:24:
e0:78:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:04 2024 by rpki-client on console-ams.rpki-client.org