Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc4d1ed3-1be3-372d-a5b0-57af3145f3ee.roa
File: fc4d1ed3-1be3-372d-a5b0-57af3145f3ee.roa (raw, json)
Hash identifier: Kg1eohuqCT3uZjDecQKQQPtku865dRpa+Y93+GNpePE=
Subject key identifier: FD:47:F5:0D:4F:07:CF:8F:B1:48:BF:45:42:D4:C6:54:8C:8D:67:FA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584553331ABE1D9A2355B37857E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc4d1ed3-1be3-372d-a5b0-57af3145f3ee.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 206.216.96.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:1a:be:1d:9a:23:55:b3:78:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=0fd93135-d2b4-4666-aa77-bf1c809088fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:5f:a1:79:fa:6c:01:71:4b:89:41:8d:f6:
a7:78:39:5f:fd:38:ed:3b:0c:1c:c8:f0:4a:87:fb:
80:75:9a:52:4b:58:d5:6d:a5:d9:4d:24:65:96:73:
0c:b7:1c:05:30:d9:79:c4:74:1e:07:e3:0c:ec:b5:
81:ca:01:d6:b3:b7:1f:2d:5b:e2:71:7e:80:c4:19:
16:8d:b1:8a:ca:4d:d8:9e:cf:1b:89:c4:10:66:ba:
74:b3:13:a8:30:db:97:4b:5c:2f:fc:6a:83:52:eb:
70:ab:4a:40:24:bb:2e:1d:de:d0:e3:ac:34:0c:9c:
1c:d7:6e:a8:32:89:c5:4c:f7:4d:1b:e3:6c:c7:61:
cb:3c:80:ef:ca:ad:ee:0f:d5:c7:66:00:be:4e:f4:
38:93:b9:cd:5f:6d:a1:0c:01:ed:13:01:b3:1a:1d:
05:62:b5:c4:3a:3a:02:ad:04:23:0f:1d:c5:05:d8:
f6:8a:48:8a:8a:1d:32:28:e2:ea:84:47:33:88:e8:
ac:e5:d8:aa:13:39:f9:4f:ee:a1:0c:de:34:f6:d4:
c4:95:85:b4:1c:d2:d2:75:54:c1:bb:46:4b:dc:f8:
b1:fd:28:22:1a:a7:90:9a:41:01:2f:a6:c4:a6:c5:
34:57:09:ce:45:d2:18:04:9a:a5:8b:11:56:e4:79:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:F5:0D:4F:07:CF:8F:B1:48:BF:45:42:D4:C6:54:8C:8D:67:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc4d1ed3-1be3-372d-a5b0-57af3145f3ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.216.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:88:c8:83:30:7e:2a:af:7a:96:ad:56:c5:14:96:61:9e:e5:
41:c8:2b:98:74:08:58:88:9e:16:80:8a:43:95:b9:4f:1c:9f:
ff:40:9e:64:74:79:b5:5e:60:23:d6:38:12:0a:97:9e:cb:8e:
c5:26:9d:8f:65:ee:16:04:91:9a:b3:27:7f:08:c9:b8:d7:6a:
1c:d8:f0:08:8c:09:a4:52:11:60:26:d6:26:4f:c6:8e:23:5b:
5f:eb:22:ff:f9:67:8f:82:67:0a:c9:ee:68:53:14:34:39:3b:
47:a7:47:0b:62:94:4a:55:67:85:9c:13:40:e4:72:9c:f1:5f:
78:30:e1:cc:1b:7f:4b:bb:b4:fc:62:4c:72:8d:4f:c9:85:c6:
2f:b4:40:e0:f4:05:5f:03:b8:2c:63:9d:9f:bd:50:ee:53:6d:
63:d5:b0:c8:a4:6c:18:9a:e0:51:44:ae:7d:48:a3:0c:18:1d:
ab:0a:3a:25:cf:3a:77:be:56:1e:03:f5:89:c9:2c:8f:63:f9:
ea:70:e0:c9:d6:68:e3:d5:ef:8e:cd:5d:6a:b7:ea:47:1c:32:
60:e9:d0:e0:4b:a9:2c:54:f3:ee:02:8b:5b:1e:75:48:c4:8c:
a2:ce:28:62:97:d0:f6:9c:c0:7d:29:10:fc:66:5f:75:92:6f:
d1:d5:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:45:17 2024 by rpki-client on console-fra.rpki-client.org