Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9a6a2c8c-075e-39e8-92f1-0908e68ac7df.roa
File: 9a6a2c8c-075e-39e8-92f1-0908e68ac7df.roa (raw, json)
Hash identifier: EHaPFuAsiaO5E8YBZIKjlu2rUGdfPQUQwJap5hOgxJw=
Subject key identifier: 44:D8:1A:67:60:57:AF:84:FE:84:06:56:7F:EA:8C:CC:4B:54:5C:A8
Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial: 010D0C9F43285846AAC284C51C174EE604605900
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9a6a2c8c-075e-39e8-92f1-0908e68ac7df.roa
Signing time: Fri 26 Jul 2024 14:32:22 +0000
ROA not before: Fri 26 Jul 2024 14:32:22 +0000
ROA not after: Thu 24 Oct 2024 14:32:22 +0000
asID: 14866
IP address blocks: 199.202.0.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:aa:c2:84:c5:1c:17:4e:e6:04:60:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Validity
Not Before: Jul 26 14:32:22 2024 GMT
Not After : Oct 24 14:32:22 2024 GMT
Subject: CN=b7b89bdf-a81b-4ccd-9559-d6598deb960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:de:97:ce:69:2a:4f:3f:73:0b:93:56:51:67:
fb:26:33:92:44:3b:77:82:b4:06:5f:32:07:ee:4b:
07:93:27:fa:18:68:69:53:2e:66:95:eb:2a:ee:d7:
ca:ee:89:9c:89:30:d6:05:83:89:aa:ed:eb:47:5e:
f8:d2:48:45:95:33:da:c5:4b:1d:16:44:ab:da:cc:
c7:3e:d0:fd:2f:82:e7:84:5b:1a:b8:e2:20:ea:74:
28:32:7a:b6:20:20:c6:4f:10:4b:81:c0:4f:5c:cd:
4a:b3:15:58:dd:6c:86:e0:08:53:42:f7:af:a6:7d:
28:d6:58:d1:9e:3f:a7:46:43:50:ab:dd:45:71:64:
44:ea:86:e0:3f:d8:dc:af:76:c1:f2:71:98:e1:e9:
1f:66:b4:02:d6:0a:da:51:e7:cf:aa:26:9e:05:d4:
d2:33:15:6c:cb:45:25:35:27:dd:c3:70:9f:b2:32:
7e:2a:50:06:bf:b5:f0:23:7f:1f:5c:85:73:1d:8a:
a7:86:c8:37:60:d9:a3:57:f2:77:10:cd:e1:dc:8c:
8f:26:e8:c7:46:d0:21:37:b4:81:2d:ab:a9:6e:14:
95:79:03:ac:fa:32:56:c7:d6:8b:05:80:7d:fb:47:
f0:c0:1f:45:a4:99:0e:dd:ae:23:40:cd:23:a1:9c:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:1A:67:60:57:AF:84:FE:84:06:56:7F:EA:8C:CC:4B:54:5C:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9a6a2c8c-075e-39e8-92f1-0908e68ac7df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
X509v3 Authority Key Identifier:
keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:48:e1:fd:0f:51:eb:cb:3b:45:62:b0:d9:ae:2d:df:fe:d0:
dd:36:8b:16:a9:07:d3:ac:0d:63:3b:8f:8a:f2:0c:2f:9f:ca:
83:6a:8d:b6:f6:61:74:2c:d5:d0:8b:fa:7f:35:26:e0:ce:d9:
6c:e8:6c:a3:07:6f:54:88:35:69:7b:c4:57:bf:f2:08:c2:a5:
16:a2:5d:0b:3e:c6:5b:4e:a8:22:fc:4a:1e:fa:f4:4e:d5:d4:
86:40:88:04:90:8e:f2:88:50:bd:5b:35:90:5d:7d:50:c3:e3:
4f:48:7b:31:a5:67:c0:34:f7:c6:ef:d6:07:32:2a:24:c5:4c:
c6:f3:9b:a3:ea:43:a2:02:3a:d5:0a:26:cd:94:f4:d7:1a:a6:
ef:00:3c:1b:1e:b1:da:3f:46:e9:67:1b:cf:62:6e:05:ea:1e:
20:7f:dd:15:d1:f3:9b:1d:73:73:dc:25:d7:c4:cc:8b:46:8a:
67:b3:de:3d:a2:4c:21:2c:f4:d1:eb:05:cc:9b:20:1f:17:01:
2c:af:cf:5e:3a:7a:9c:ea:2b:b7:90:42:59:ed:03:ff:3b:56:
a2:cb:54:e2:55:04:d9:47:84:35:04:06:13:c3:07:44:f6:5b:
0e:a6:58:6b:ae:80:14:c6:78:08:31:8b:8a:2d:bf:ac:43:13:
aa:8d:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 22:06:55 2024 by rpki-client on console-fra.rpki-client.org