Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8af9388-8ab7-3a9c-8b76-e67e99f50e0a.roa
File: a8af9388-8ab7-3a9c-8b76-e67e99f50e0a.roa (raw, json)
Hash identifier: KDJi9RvOPgAUrRoPjyIfUZ7DYozCjmZ2qFpbkHhwyUU=
Subject key identifier: 04:3D:E0:DA:C8:27:77:78:C8:77:3F:17:A0:C0:E1:6F:16:53:68:D9
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328576D51CC73C042CFC158BE6BB626
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8af9388-8ab7-3a9c-8b76-e67e99f50e0a.roa
Signing time: Fri 02 Dec 2016 07:24:39 +0000
ROA not before: Thu 01 Dec 2016 05:00:00 +0000
ROA not after: Tue 01 Dec 2026 05:00:00 +0000
asID: 27962
IP address blocks: 216.72.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:be:6b:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 1 05:00:00 2016 GMT
Not After : Dec 1 05:00:00 2026 GMT
Subject: CN=b4ee673c-dffb-4b36-998c-dc5178950f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:49:88:22:ee:d9:b4:a5:51:a3:bb:f6:9f:
bc:b6:2a:06:e0:7d:49:90:a9:94:6c:70:70:11:83:
4e:57:43:45:9a:8f:43:d5:b7:42:48:db:e9:ab:b3:
f5:46:f8:27:59:a0:6b:2f:c4:92:aa:49:df:ec:cf:
ec:e2:11:33:40:55:68:55:c1:c2:02:a4:fb:33:20:
f6:8d:35:ae:d1:24:18:9d:bf:57:2b:b2:10:ee:bb:
31:cf:b0:71:64:7f:3e:c3:57:8c:41:45:72:9a:62:
2f:41:53:e5:a1:6c:f5:2c:8c:57:03:61:87:28:82:
16:8a:4b:8a:16:4c:7b:cf:5f:27:d9:b5:ad:22:3a:
e7:81:08:86:82:ce:b8:37:e5:b8:8e:cd:66:dd:d7:
df:65:3a:73:9f:c1:5d:9d:48:c9:0a:96:bf:f7:b4:
77:96:10:1e:3d:cf:2e:44:b6:d2:9b:84:72:06:50:
5c:e5:0f:30:be:c9:7f:6a:2f:e8:90:7d:26:79:d5:
f9:e8:a9:a3:f6:b5:52:b5:1b:6a:3b:da:bd:23:03:
43:42:c7:cf:8c:c0:32:ef:86:55:0c:a3:d8:d2:d2:
f1:48:82:7a:c6:18:25:86:5e:b2:42:35:20:52:8f:
78:00:8d:8f:a8:9c:9f:56:43:00:7b:7f:c3:f0:38:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:E0:DA:C8:27:77:78:C8:77:3F:17:A0:C0:E1:6F:16:53:68:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8af9388-8ab7-3a9c-8b76-e67e99f50e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
216.72.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:77:6f:91:44:2d:2b:97:cf:a2:d1:66:9d:c9:5f:ef:db:66:
8b:57:08:2a:c1:21:97:90:0d:77:fe:67:b7:23:ff:26:c3:24:
d8:62:40:d6:9d:ac:5b:d7:f3:0b:84:9b:63:39:30:af:a7:c9:
46:e9:d8:9a:ea:9d:a6:be:a3:84:8f:b3:96:89:19:5b:af:c7:
22:71:41:7d:15:2c:ef:91:5c:0c:1c:bb:31:65:95:fa:63:b6:
ce:7c:23:20:b1:a4:64:71:f0:4b:a7:2e:9c:d5:d6:62:47:c7:
bf:88:d5:0d:d7:72:e2:fa:c5:d5:0f:13:c8:d5:2a:99:1c:10:
f9:a5:dc:06:cb:f6:bb:be:f0:13:8a:9f:c6:3b:4b:04:f9:f4:
c8:6c:ff:d3:a5:3b:58:57:e2:99:f0:f7:1f:7f:f7:b7:47:82:
db:06:be:d9:f0:b3:e1:1f:10:39:d5:ea:06:da:54:22:89:ee:
54:e0:ad:cc:93:21:90:33:83:42:aa:44:a2:7e:3a:ba:f4:8f:
73:c2:d6:cb:27:95:2f:aa:70:74:e8:4a:f1:32:a4:b4:ea:6a:
0c:76:88:cf:74:af:51:0a:2b:02:91:45:d6:ad:42:e4:fe:95:
5b:e6:18:9b:2f:41:88:0c:d1:05:24:d7:dc:b9:50:39:07:2c:
a0:41:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org