Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/5304f649-7d2b-3c26-aecc-510add06afae.roa
File: 5304f649-7d2b-3c26-aecc-510add06afae.roa (raw, json)
Hash identifier: Nx/MUNwNH9KtK6ckU8SXZsIfz8rU4CiiTruorVjFae4=
Subject key identifier: F3:79:37:7D:48:9D:C1:DA:5A:67:D6:98:B0:E8:49:5C:6A:6D:FD:8B
Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial: 010D0C9F43285846AAC337E4537611409AE056C0
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/5304f649-7d2b-3c26-aecc-510add06afae.roa
Signing time: Fri 26 Jul 2024 14:33:46 +0000
ROA not before: Fri 26 Jul 2024 14:33:46 +0000
ROA not after: Thu 24 Oct 2024 14:33:46 +0000
asID: 14866
IP address blocks: 192.69.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:aa:c3:37:e4:53:76:11:40:9a:e0:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Validity
Not Before: Jul 26 14:33:46 2024 GMT
Not After : Oct 24 14:33:46 2024 GMT
Subject: CN=688588f8-f71e-4621-ae7b-0b6825780ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c6:82:99:80:2e:99:7d:45:d6:98:12:18:74:
c6:7d:68:f2:43:a0:01:51:a5:1c:67:60:fd:d2:b4:
3a:0c:8c:20:d0:7d:33:e6:45:0d:c2:9a:f0:e9:c0:
98:b6:3a:9c:94:d2:c5:b6:0e:58:57:0b:60:ca:6d:
80:4c:63:e8:68:90:18:f5:ea:80:a8:14:de:e9:27:
41:b8:25:1f:5d:1b:29:dc:f0:8b:cf:92:9a:30:1c:
49:5d:f1:b4:de:1d:e4:5c:27:e8:fe:a9:bc:30:7b:
3e:28:6e:42:c9:fb:b5:71:68:d7:19:8f:51:f0:db:
8d:dc:ac:db:9d:da:1c:d9:1f:5e:35:47:67:64:3f:
73:74:e2:8e:09:b9:b4:72:e2:ad:92:9e:42:19:03:
f0:e5:85:e7:71:e2:0f:02:d4:f4:52:29:b1:42:d0:
b1:b2:e2:dc:da:0e:28:c0:d4:5a:26:b1:d7:93:1a:
b2:50:87:31:a1:66:1f:e2:ca:f7:29:92:4c:c8:3c:
c5:dd:5f:f9:91:54:51:df:14:ea:c2:c8:d0:c2:c2:
48:7f:61:6e:de:61:30:50:65:b5:4e:4c:15:09:e1:
4b:63:94:ca:42:11:1f:27:c7:44:e5:cc:e4:d5:3d:
d8:ea:86:e1:27:58:c8:fe:96:28:e2:ce:d3:23:a3:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:37:7D:48:9D:C1:DA:5A:67:D6:98:B0:E8:49:5C:6A:6D:FD:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/5304f649-7d2b-3c26-aecc-510add06afae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
X509v3 Authority Key Identifier:
keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
sbgp-ipAddrBlock: critical
IPv4:
192.69.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:46:fe:a2:86:6b:f0:a4:2a:f5:bf:23:83:4e:c2:b0:fb:52:
57:ed:61:2e:0a:81:9e:44:9c:78:74:96:00:10:ca:74:e3:7e:
6c:b5:3d:bf:91:13:b7:b2:04:7b:e4:ba:41:94:43:42:d6:5f:
5d:59:e0:ef:28:f1:2b:5f:88:f1:3a:db:61:0a:ad:85:6b:e7:
be:99:b9:4f:75:f3:9b:71:da:a4:ee:9d:59:39:18:7b:66:98:
6c:9e:22:b4:ee:9c:0f:9c:30:50:34:d5:4c:9b:91:d0:82:0a:
f8:e0:ee:70:6b:07:a9:fd:44:9c:44:68:d0:c9:63:96:95:68:
45:21:e6:c4:1c:1f:9e:66:9c:33:93:b3:cb:d0:58:52:59:b3:
62:de:ac:be:5a:39:ac:83:72:22:de:57:25:7c:57:9b:0a:6a:
5f:db:4d:68:a8:63:dc:6c:c5:65:d3:57:de:75:ce:99:77:f2:
83:cf:98:87:ef:36:e1:c7:99:68:8d:28:fd:57:2e:b3:7a:82:
22:2c:83:fa:de:42:fa:a1:31:5a:4c:28:8a:bc:fe:ce:f5:92:
52:54:cf:41:6c:49:64:0b:c6:00:de:94:7e:11:c2:97:65:15:
cd:75:1a:56:a7:bd:6d:c4:66:d1:c1:00:bf:e1:be:2d:1e:ea:
cb:3f:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:21:27 2024 by rpki-client on console-ams.rpki-client.org