Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/1a86dee2-80cc-3069-bfe7-5826c009eb0d.roa
File: 1a86dee2-80cc-3069-bfe7-5826c009eb0d.roa (raw, json)
Hash identifier: mTxrXcfEiqirouXXl3U/k9reb1HMAOXg4bIEVetIkTU=
Subject key identifier: 34:E6:B3:5E:32:BF:59:80:45:06:E2:4A:F9:08:42:15:80:9B:C6:2D
Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial: 010D0C9F43285845BA7E29F5CE01BBD4E964AF80
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/1a86dee2-80cc-3069-bfe7-5826c009eb0d.roa
Signing time: Wed 01 May 2024 13:00:34 +0000
ROA not before: Wed 01 May 2024 13:00:34 +0000
ROA not after: Tue 30 Jul 2024 13:00:34 +0000
asID: 14618
IP address blocks: 199.65.240.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ba:7e:29:f5:ce:01:bb:d4:e9:64:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
Validity
Not Before: May 1 13:00:34 2024 GMT
Not After : Jul 30 13:00:34 2024 GMT
Subject: CN=55064253-c652-4f0e-9fd6-2027fde17835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:0e:ec:4e:37:3f:41:69:45:2c:53:27:38:
a0:21:b8:5a:ac:55:eb:5d:61:f8:ba:c5:39:ae:a8:
84:22:fe:ca:96:81:d3:5e:15:23:6a:92:19:64:f3:
16:8b:3a:57:df:3e:45:b3:4c:f8:11:73:bc:39:9e:
73:98:98:07:ba:10:9f:dd:14:c2:09:81:00:45:e2:
4e:6b:75:6d:45:7a:77:3f:03:fa:c6:84:8d:14:e8:
a9:f6:50:f4:96:bd:f0:36:ed:ec:e1:94:68:4a:5c:
54:b2:f0:8e:ba:1b:dc:dd:c9:c4:ee:fc:3b:43:5a:
9c:84:1e:cb:88:96:28:16:19:24:5d:31:e4:1a:32:
93:0b:64:f1:f5:cc:13:3e:82:cc:65:b8:ad:f4:b4:
40:f5:7f:2e:e0:55:92:28:12:01:83:e1:1b:cf:06:
03:35:48:62:43:7b:2b:4f:f1:3f:7c:36:20:06:e5:
e9:af:79:51:8f:ff:e6:59:d3:ca:69:41:71:b9:ba:
ad:b5:48:8b:bf:2d:91:10:13:e6:60:ff:0b:04:4d:
53:af:17:c9:c9:57:d6:f1:ad:aa:a3:86:a3:ed:33:
53:a2:11:2a:f4:fa:9e:43:dc:46:70:b0:30:86:4c:
19:11:fc:c8:d8:a6:89:f4:68:9c:ab:d7:de:05:94:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E6:B3:5E:32:BF:59:80:45:06:E2:4A:F9:08:42:15:80:9B:C6:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/1a86dee2-80cc-3069-bfe7-5826c009eb0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
X509v3 Authority Key Identifier:
keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
sbgp-ipAddrBlock: critical
IPv4:
199.65.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a6:fe:21:f6:51:a0:c4:0f:21:93:a6:93:f2:0b:f0:8a:a9:
24:8e:2e:d8:18:6b:5d:c6:96:f5:70:ec:ee:37:c1:08:ae:ae:
6b:9f:af:67:7c:da:3d:e5:5f:49:ea:4c:b2:e4:c2:4f:c7:9d:
9e:12:8a:15:ab:a7:4e:59:41:3b:cd:2b:80:ec:6e:9e:39:f2:
d1:bf:a1:4b:c4:a8:d6:7e:12:e9:fa:b8:95:e4:d6:95:fc:e6:
f2:35:a8:70:5c:69:c8:16:16:ce:7d:d2:4f:cf:06:4d:ed:34:
6b:71:06:07:0a:e1:28:53:8b:8f:f3:16:dd:c4:5a:66:a6:1c:
51:bf:e1:9d:36:0d:d2:00:03:0c:ae:e7:8c:6b:4d:81:0a:9d:
3e:2c:7d:8e:5a:3d:36:1d:f5:31:c4:7a:d1:0b:a0:26:fa:51:
8a:02:81:bd:4f:26:db:57:57:2f:75:0b:4b:ca:83:48:ca:df:
48:ba:12:cf:75:e6:ba:81:9f:c9:b8:3c:33:d3:ae:a9:f6:e9:
89:7e:3c:a7:53:7b:3d:16:45:40:c0:cc:25:04:03:48:bd:30:
7a:52:f6:ad:70:52:db:91:84:b7:ad:ef:09:c6:d1:bc:78:54:
c3:72:7e:4e:16:ca:d9:b6:5c:9d:ea:76:bd:34:e6:f0:99:b9:
6d:6e:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 00:14:22 2024 by rpki-client on console-fra.rpki-client.org