Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f58c90d7-77ae-3704-9bf7-0147e0081a60.roa
File: f58c90d7-77ae-3704-9bf7-0147e0081a60.roa (raw, json)
Hash identifier: PiYnyLdKkTA4PIYS8xx5JGhrjQFZ2XaZKTmQ3zgCXU0=
Subject key identifier: 38:A4:3B:EC:10:9C:7A:C3:4B:3F:28:7B:55:E9:E7:DA:A0:46:87:11
Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial: 010D0C9F43285845BA7E26F2EDC8D0D05CE65B00
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f58c90d7-77ae-3704-9bf7-0147e0081a60.roa
Signing time: Wed 01 May 2024 13:00:34 +0000
ROA not before: Wed 01 May 2024 13:00:34 +0000
ROA not after: Tue 30 Jul 2024 13:00:34 +0000
asID: 35923
IP address blocks: 199.65.240.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ba:7e:26:f2:ed:c8:d0:d0:5c:e6:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
Validity
Not Before: May 1 13:00:34 2024 GMT
Not After : Jul 30 13:00:34 2024 GMT
Subject: CN=18941ce8-eea6-4311-9cfb-309ec606f2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:07:ca:82:19:4a:92:1c:af:a2:89:77:65:
fe:57:a5:2f:be:dd:82:4c:a5:24:b9:77:4c:12:26:
40:57:41:c8:44:3f:41:e6:aa:86:c8:f8:af:ab:6c:
a8:28:74:d2:0d:5c:1f:33:f1:4d:67:02:fc:2f:fb:
9f:03:a6:49:61:72:e9:d0:6f:83:bf:47:ec:46:ca:
7a:34:9f:e9:b3:8e:48:4b:b4:66:3f:6e:49:32:42:
39:1c:ea:cf:12:22:38:ba:69:62:58:8e:66:b3:ce:
58:8a:d7:0b:cc:4f:09:c5:dc:75:70:32:51:cb:26:
2f:ff:12:a4:95:15:95:0b:29:1b:b3:d8:17:d4:e7:
18:20:d5:6b:96:80:1d:35:2f:10:b6:75:bb:38:1b:
27:ed:55:0f:e3:cc:fd:99:99:a0:0c:48:7e:4c:f1:
62:b3:84:18:74:5c:18:19:be:b6:47:1f:e8:ce:d0:
69:b3:d1:46:b8:fa:cd:be:7c:a8:25:f7:f2:cd:ca:
40:41:90:b3:99:5f:b6:20:76:7a:ec:a5:ec:45:58:
80:dd:b8:6b:12:92:e2:e2:8f:6c:de:b7:30:9b:e3:
b1:2f:da:6a:d9:c4:52:68:26:7d:a3:6f:de:8d:f3:
94:64:4f:f0:e2:31:11:4b:fb:6a:ee:5c:aa:5a:79:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:3B:EC:10:9C:7A:C3:4B:3F:28:7B:55:E9:E7:DA:A0:46:87:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f58c90d7-77ae-3704-9bf7-0147e0081a60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
X509v3 Authority Key Identifier:
keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
sbgp-ipAddrBlock: critical
IPv4:
199.65.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:4f:28:63:92:d0:8e:f9:0e:6a:b7:dd:89:a1:50:82:9d:07:
07:65:d4:0a:1e:76:de:d0:e7:d7:d8:8b:68:88:78:4a:fd:23:
8e:06:0b:9e:a2:db:d7:02:26:0b:9e:ca:cf:e2:0d:9b:89:74:
ea:39:7f:dd:a7:93:5c:86:79:44:bd:29:f4:ab:42:0d:34:67:
bc:43:ab:a9:94:33:05:79:ff:9c:54:8d:f7:0b:d8:e1:d5:9d:
bc:f2:6c:4f:80:b8:43:49:af:8b:1a:96:f8:07:e1:fd:71:4d:
73:25:08:19:39:8d:86:24:e3:83:95:f6:6e:46:81:8e:38:9a:
a1:0d:f7:dd:56:ae:a4:cc:15:70:3a:a1:ae:d3:56:62:f0:aa:
a3:ba:19:9a:fb:60:32:07:bf:ef:ff:1f:b3:07:11:1f:4d:f8:
06:20:04:82:ce:c6:dd:aa:44:b7:ca:48:c3:ad:25:bf:57:79:
75:2b:9f:b4:19:03:63:65:61:3f:7d:01:85:68:0b:f5:88:a9:
ca:4f:58:1d:dd:9c:06:5f:a2:4e:67:55:30:0a:38:6b:c5:5f:
79:0d:61:14:2d:f4:33:01:a2:ea:d2:26:e7:09:96:b3:cb:f8:
e7:3c:fa:8d:2a:1d:fb:04:a5:65:ef:21:2a:d8:89:67:26:0f:
c7:92:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 00:22:47 2024 by rpki-client on console-ams.rpki-client.org