Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/864efa41-b3f2-3480-8542-cfbfd5faffd5.roa
File: 864efa41-b3f2-3480-8542-cfbfd5faffd5.roa (raw, json)
Hash identifier: ojIYquuB0UhquQ786nH2xCsDWdTW+hiX+kTqk+K7S6Q=
Subject key identifier: 5A:EB:07:AD:5D:AC:C5:5F:3F:86:1F:D8:6C:19:D3:F3:C2:AE:AF:3F
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328576D51CC73C042CFC158BE4897B0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/864efa41-b3f2-3480-8542-cfbfd5faffd5.roa
Signing time: Fri 02 Dec 2016 06:46:18 +0000
ROA not before: Thu 01 Dec 2016 05:00:00 +0000
ROA not after: Tue 01 Dec 2026 05:00:00 +0000
asID: 51964
IP address blocks: 209.88.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:be:48:97:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 1 05:00:00 2016 GMT
Not After : Dec 1 05:00:00 2026 GMT
Subject: CN=325756d5-35cf-49ac-971b-da6d93f254fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:a6:60:22:db:20:86:54:3f:53:32:4b:5a:
e9:06:99:c6:98:e8:eb:56:44:a7:11:02:93:7f:2d:
d8:db:2d:ad:86:90:aa:41:33:4b:f7:87:dd:83:c5:
e4:8b:e8:45:b8:63:78:79:b9:a9:cb:2f:6f:ae:0b:
ae:d9:f5:e4:d0:35:3a:9e:a2:53:31:74:7d:54:34:
69:87:bc:f8:89:60:69:0a:a8:5a:b2:2d:c9:b5:7a:
d7:2e:13:fa:d5:d7:25:72:f2:8c:ef:c5:8c:08:59:
c6:68:06:ba:04:5d:ef:78:cb:42:77:d7:c4:75:40:
2c:34:39:40:b9:0f:63:ec:db:ee:7f:47:8f:a0:a7:
c3:5f:74:1e:ad:6b:a9:39:4e:a5:f8:d2:97:0c:33:
4d:dd:52:5c:bf:50:65:af:9b:6f:3a:37:c9:5a:cf:
83:d7:9a:78:5b:e7:f4:fd:ea:1c:38:93:68:0f:d6:
82:48:37:26:f8:f4:99:9a:bd:2e:dc:42:39:2a:b7:
0a:f0:5e:fe:58:19:3f:1d:ac:28:e5:dd:f7:88:00:
14:ba:4a:a1:07:cb:4c:0f:b8:a8:69:2f:5b:75:6a:
a5:70:35:18:3c:13:97:57:f4:a0:a2:56:fd:b2:f8:
fd:2e:02:c4:96:8c:b6:3d:37:f7:d3:0b:0d:46:77:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:07:AD:5D:AC:C5:5F:3F:86:1F:D8:6C:19:D3:F3:C2:AE:AF:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/864efa41-b3f2-3480-8542-cfbfd5faffd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a8:20:4b:2e:2b:2a:dd:1b:f9:61:34:ff:79:6c:41:b7:2a:
45:3c:d9:f0:c3:39:17:a0:dd:0e:28:67:94:b8:5f:2d:24:a9:
25:35:38:5d:d9:12:2c:10:01:8e:90:c5:25:25:62:16:7b:d6:
f7:1f:e0:ca:66:32:d6:2e:89:bb:b9:c2:e0:6a:9d:0b:eb:7d:
0e:84:a1:89:bd:67:b2:c6:3d:c5:75:c9:77:73:0e:9a:7c:e8:
f8:cd:38:2c:50:48:11:f9:64:f1:48:f4:38:d9:c1:04:20:6d:
30:21:8f:d1:80:fd:b9:4e:0d:9a:68:ff:9c:84:7d:38:64:b3:
cf:83:86:65:6c:4f:2a:bb:12:86:d0:2f:a0:0c:93:c1:f3:66:
92:54:cc:dc:5e:33:1f:3b:82:59:5b:5b:35:8a:8f:81:b3:fc:
f1:97:36:09:64:35:b6:4a:ee:20:47:43:71:09:1d:d1:ef:2b:
1a:ed:a1:75:5b:fc:d5:a1:61:7f:58:2f:2a:1d:f3:3f:11:2b:
19:6c:6f:68:9f:1a:31:2d:24:f8:e1:9d:96:71:be:c3:eb:76:
54:e6:a0:6a:6c:8c:10:78:6f:f8:fb:4a:bf:96:56:ba:aa:aa:
92:8d:f4:cc:2e:0d:03:17:51:17:8e:8d:4b:ce:88:82:2a:5d:
db:84:ec:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org