Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/bdb3b473-e6d9-313e-ba75-ba279c302359.roa
File: bdb3b473-e6d9-313e-ba75-ba279c302359.roa (raw, json)
Hash identifier: Sw8f9P+QR3vWRffxUY9AhnGcsXWH/eWHExY9zjX3sIQ=
Subject key identifier: F4:B9:E2:BB:D4:C4:6E:7E:E7:5C:1D:45:DE:C4:72:86:10:5F:07:8D
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328583D0B7F6C90E1244167352DD700
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/bdb3b473-e6d9-313e-ba75-ba279c302359.roa
Signing time: Thu 01 Dec 2016 05:00:00 +0000
ROA not before: Thu 01 Dec 2016 05:00:00 +0000
ROA not after: Thu 30 May 2024 04:00:00 +0000
asID: 11816
IP address blocks: 206.48.100.0/22 maxlen: 22
206.48.20.0/22 maxlen: 22
209.88.128.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:7f:6c:90:e1:24:41:67:35:2d:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 1 05:00:00 2016 GMT
Not After : May 30 04:00:00 2024 GMT
Subject: CN=c5ed62c9-f2c8-40b5-b3c8-cd2e0acd47da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:82:49:f8:7b:0c:e7:1c:47:a3:a9:19:0e:
7a:f4:d0:b0:fa:56:7f:dc:78:4b:b0:7f:cc:f9:00:
63:05:57:3d:c0:fa:56:fc:2b:60:df:ec:17:89:32:
fe:b1:be:97:ef:bb:cb:e9:10:6f:a7:ee:12:cb:4b:
0f:62:5a:9d:e9:f6:ab:ab:83:e8:a4:e1:6f:fd:b3:
b8:6d:6c:c1:2a:ec:7d:66:c0:e0:8d:a8:52:81:d3:
86:d5:ad:d2:71:a2:02:19:65:2b:46:25:4a:58:07:
3d:e2:9d:f0:b6:5e:67:43:3c:fb:bf:f4:d2:9d:95:
16:4f:f2:6e:3c:70:e5:70:b1:a4:25:9a:df:a7:13:
19:c6:e0:5f:1e:f5:89:fe:52:b3:bc:f6:89:fc:b1:
5f:fb:04:d1:9a:df:b7:19:43:60:d3:8a:cd:d5:32:
18:6f:93:58:83:78:23:90:ee:58:1f:c4:a3:f4:e9:
ee:20:15:9f:9a:3f:6c:85:a4:2f:42:c9:a7:43:8a:
f4:1b:26:5f:55:50:b4:b9:30:fa:54:b0:df:b8:4a:
db:11:ba:b2:7c:f5:78:47:a2:b4:d3:35:ee:a2:3a:
1e:1a:c7:ec:4d:99:7c:d1:82:1f:15:58:f9:5b:18:
76:5c:7f:e5:17:57:33:37:9f:dd:ee:0b:ad:c2:df:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:E2:BB:D4:C4:6E:7E:E7:5C:1D:45:DE:C4:72:86:10:5F:07:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/bdb3b473-e6d9-313e-ba75-ba279c302359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
206.48.20.0/22
206.48.100.0/22
209.88.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:cd:c2:de:57:f9:21:cd:0f:8f:a2:97:36:b3:96:9d:91:d4:
94:1a:50:22:f6:f6:01:98:3a:52:f5:d5:44:43:16:a8:74:21:
ca:31:0d:df:cb:72:2f:81:0d:97:db:ed:2d:84:26:45:92:50:
10:8b:b3:ad:6f:43:00:ac:5a:92:61:e1:87:e0:c9:ad:bb:74:
01:20:b2:69:da:a5:43:3e:2a:b8:51:53:5a:bb:a6:19:0a:5b:
2c:46:5b:cd:c1:42:7e:91:bd:94:52:02:c2:1a:d7:4e:2f:84:
48:8f:62:05:13:35:d7:69:65:ea:e2:ea:21:88:e3:ad:1f:22:
87:6d:63:58:e8:67:a3:c8:0a:3a:64:9d:5a:e7:82:bb:f8:1a:
0e:11:67:11:9c:10:db:6f:4c:74:8d:d6:86:c5:8a:3f:3b:a3:
87:bc:4e:0f:9a:6e:60:27:66:fa:69:bf:07:32:25:9d:a6:9b:
a8:f2:4f:2b:ab:78:8d:2b:52:43:1c:a5:20:23:7e:aa:f5:22:
a5:76:8d:36:22:21:93:7e:ec:cc:62:ed:4f:91:20:53:0d:90:
4b:24:9f:34:06:18:03:88:4e:27:3e:e2:24:e2:db:8e:4c:66:
07:5f:0c:5d:a3:b4:89:4f:8f:c2:4b:ac:47:20:7a:68:57:35:
fe:ae:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org