Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3ff1e633-2adb-3c26-a62c-e301ffbba12b.roa
File: 3ff1e633-2adb-3c26-a62c-e301ffbba12b.roa (raw, json)
Hash identifier: NrOwOECBU7gT2eyGaO3KnLdPLzo/xwQdACNJtBE3ZSU=
Subject key identifier: 28:81:DB:D4:07:49:19:91:67:A7:D0:8B:AA:66:4E:64:0B:40:04:1F
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328576D51CC73C042CFC158BE68C216
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3ff1e633-2adb-3c26-a62c-e301ffbba12b.roa
Signing time: Fri 02 Dec 2016 07:21:26 +0000
ROA not before: Thu 01 Dec 2016 05:00:00 +0000
ROA not after: Tue 01 Dec 2026 05:00:00 +0000
asID: 6505
IP address blocks: 216.72.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:be:68:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 1 05:00:00 2016 GMT
Not After : Dec 1 05:00:00 2026 GMT
Subject: CN=41a73c62-163b-413f-aec2-55ed00102e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:99:63:40:23:f8:72:75:0c:e9:b5:73:a7:
89:da:c7:e1:ab:9c:41:71:e9:b7:a2:3b:d6:36:aa:
19:03:a4:10:fb:ab:6a:e6:cb:f1:4e:3a:9f:da:97:
9d:33:fa:16:c8:24:bf:f9:8d:15:0b:b4:4c:6c:67:
80:c0:ad:23:38:c0:32:0d:c9:af:70:ba:21:f2:65:
e5:0b:05:0e:1c:02:8d:20:c2:eb:fe:2b:6c:36:41:
7f:62:4d:a2:20:3e:92:8e:97:c7:b2:a2:e5:97:6b:
b2:35:67:77:9c:d2:aa:12:85:e8:f2:70:cc:c3:cc:
7b:33:32:4e:02:1e:2f:e5:80:2b:80:42:c0:52:e9:
ff:3d:56:a5:81:15:35:bb:a3:82:26:e6:4e:41:6c:
2d:61:fe:39:93:81:fa:af:1e:55:5b:66:03:58:d5:
01:d8:f5:52:7c:e1:bf:86:cd:fb:9d:e3:b3:7b:34:
e8:26:15:d2:53:27:4e:8d:15:16:44:b4:d6:0d:56:
7a:d1:e4:49:13:c9:3a:ff:27:f1:2a:d6:31:1e:c3:
4c:4c:09:c3:b0:e7:af:24:06:76:83:c1:92:12:e1:
13:23:39:40:97:e5:fd:fd:ac:59:83:11:2e:d0:82:
27:02:33:6b:56:16:19:dc:99:2f:dd:d6:2f:19:d7:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:DB:D4:07:49:19:91:67:A7:D0:8B:AA:66:4E:64:0B:40:04:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3ff1e633-2adb-3c26-a62c-e301ffbba12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
216.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:50:58:0d:3b:2a:52:59:2e:2d:50:f4:3b:87:11:65:33:d7:
ef:a7:d6:4f:3a:60:ae:ad:a4:1a:3b:3d:82:15:3c:e3:70:50:
08:3a:8a:aa:67:df:fb:ef:44:01:ad:d3:d1:56:06:ff:38:60:
ac:9b:03:5d:ce:1e:d7:eb:b4:df:83:e8:97:e1:72:0f:e0:fd:
51:b8:7a:de:17:f2:a9:eb:4c:6f:9c:5e:3c:80:a4:c8:ea:c0:
35:40:3a:08:31:27:f7:d3:2a:2d:17:13:db:4b:d1:8e:ce:0b:
f5:6c:54:da:fe:66:1d:8d:de:56:c0:96:13:54:a9:3d:88:c8:
d5:eb:f5:f4:c2:e1:19:8d:c1:18:da:62:ba:92:16:7b:36:36:
d5:aa:d8:40:23:fb:82:9a:c2:90:b9:0f:99:62:73:ff:47:37:
90:9b:18:b8:4f:0d:da:35:bb:8c:27:34:2f:b0:8b:e9:48:1a:
dc:33:45:a2:1f:6e:74:ae:43:a4:46:bf:6c:f9:4c:0e:37:de:
c7:30:c8:39:44:ed:ab:74:02:c2:90:06:0d:3d:74:42:c2:70:
26:5a:d9:1b:d4:d3:da:42:cb:cb:f4:b9:1b:02:19:db:af:b6:
e6:b6:18:27:9a:5f:68:c6:9d:73:4d:e4:2f:be:c7:14:1f:65:
76:99:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org