Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/24644a67-2239-34bf-8eb6-7816276ed320.roa
File: 24644a67-2239-34bf-8eb6-7816276ed320.roa (raw, json)
Hash identifier: +stZieVZhlHDo50W7F+3BPTFnHGkUsIsU/OolinPcQ4=
Subject key identifier: 48:15:8F:3B:76:65:E5:90:16:CC:E0:D8:CE:3E:61:C6:D2:A8:66:31
Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial: 010D0C9F4328583FC41F501A22B8B206B4F40700
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/24644a67-2239-34bf-8eb6-7816276ed320.roa
Signing time: Mon 03 Oct 2022 15:18:07 +0000
ROA not before: Mon 03 Oct 2022 15:18:07 +0000
ROA not after: Mon 03 Feb 2025 05:00:00 +0000
asID: 212238
IP address blocks: 23.131.191.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c4:1f:50:1a:22:b8:b2:06:b4:f4:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Validity
Not Before: Oct 3 15:18:07 2022 GMT
Not After : Feb 3 05:00:00 2025 GMT
Subject: CN=228e7f85-0679-4382-becd-e1c96a369a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:52:ca:f3:ab:d5:06:df:89:8b:92:0a:4b:c1:
8d:e2:ed:a6:5d:f6:6b:23:cd:4f:39:40:ca:8d:d9:
13:34:d5:47:cb:98:40:f2:83:09:35:43:50:37:3e:
84:74:1e:a7:19:c9:21:80:80:62:e4:74:94:26:8a:
56:25:b2:e7:1d:aa:69:a3:c0:6f:26:c8:e8:01:b0:
cd:ea:0f:6d:5e:61:c3:a1:99:4b:73:6a:fc:5f:d2:
43:ae:43:6d:14:fa:f4:30:f6:fb:b5:71:f4:90:a0:
83:8b:54:f9:99:20:d5:11:f5:ef:1d:8d:c6:47:5a:
e3:95:9e:bd:2e:4e:ad:3b:19:ff:de:98:b3:59:b7:
a4:2b:7e:d5:94:63:95:fc:26:02:40:ca:a2:c4:4d:
e2:b6:35:f1:bc:25:cb:64:eb:6c:f4:32:94:e8:4b:
86:ce:92:b1:1d:0d:4b:cb:54:89:26:ac:99:91:6b:
10:78:dc:0d:11:b7:90:b5:d8:42:e7:01:b4:e6:3c:
ca:61:f9:d5:fe:21:cf:d5:20:77:6d:6a:d8:fd:b6:
12:d8:e5:88:3b:6c:dd:59:21:a8:83:c2:8a:30:95:
6b:61:23:3c:0e:e2:4e:74:60:0b:c7:1d:ea:e3:65:
97:9a:a0:ed:57:2e:cf:2a:55:b0:17:36:b9:a5:a1:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:8F:3B:76:65:E5:90:16:CC:E0:D8:CE:3E:61:C6:D2:A8:66:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/24644a67-2239-34bf-8eb6-7816276ed320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
X509v3 Authority Key Identifier:
keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:d9:55:2c:50:94:93:a6:c4:ee:c8:d7:85:1a:0d:ce:3e:b8:
19:4c:6b:16:6c:b3:6d:21:da:01:f8:e8:80:12:d7:98:53:aa:
91:9a:25:e8:39:c0:32:45:15:ef:c6:8f:17:5a:f7:99:9a:06:
10:a9:54:49:30:63:9f:29:ab:7d:0c:9b:c8:5c:d7:10:50:c1:
67:e5:04:40:ce:d9:9c:e4:2e:88:82:81:49:a4:18:d8:ba:dd:
44:b3:ab:fd:0b:68:5f:7c:08:36:4d:03:54:62:d5:98:a0:af:
e7:4f:59:55:db:40:56:a1:18:9a:92:0a:39:83:5b:29:1e:42:
8d:b2:c6:59:1e:b6:99:e8:01:f0:e0:23:a3:ea:58:9a:95:bb:
db:e2:e7:08:9e:73:ea:2d:14:20:1d:73:8c:06:e6:be:4d:e7:
0a:81:0e:79:ff:8d:0a:50:f5:96:c7:24:fc:8a:8b:cb:7e:62:
c2:ab:5e:77:00:fc:ed:2d:c3:cf:04:92:4e:29:07:0e:76:ad:
2a:2f:07:04:4a:5f:08:76:78:fe:6a:4e:70:6c:c2:06:16:6b:
6e:2e:48:32:61:eb:6c:db:fd:9f:93:90:4c:b4:b2:8d:67:b8:
f2:2b:17:80:ad:94:97:ce:64:cf:88:ea:63:e7:14:02:22:b2:
e6:03:1b:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/EH1AaIriyBrT0BwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTIyMTAwMzE1MTgwN1oXDTI1MDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
MjI4ZTdmODUtMDY3OS00MzgyLWJlY2QtZTFjOTZhMzY5YTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lLK86vVBt+Ji5IKS8GN4u2mXfZrI81POUDK
jdkTNNVHy5hA8oMJNUNQNz6EdB6nGckhgIBi5HSUJopWJbLnHappo8BvJsjoAbDN
6g9tXmHDoZlLc2r8X9JDrkNtFPr0MPb7tXH0kKCDi1T5mSDVEfXvHY3GR1rjlZ69
Lk6tOxn/3pizWbekK37VlGOV/CYCQMqixE3itjXxvCXLZOts9DKU6EuGzpKxHQ1L
y1SJJqyZkWsQeNwNEbeQtdhC5wG05jzKYfnV/iHP1SB3bWrY/bYS2OWIO2zdWSGo
g8KKMJVrYSM8DuJOdGALxx3q42WXmqDtVy7PKlWwFza5paERbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgVjzt2ZeWQFszg2M4+YcbSqGYxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMjQ2NDRhNjctMjIzOS0z
NGJmLThlYjYtNzgxNjI3NmVkMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPZVSxQlJOmxO7I14UaDc4+uBlMaxZss20h2gH46IAS15hTqpGaJeg5
wDJFFe/Gjxda95maBhCpVEkwY58pq30Mm8hc1xBQwWflBEDO2ZzkLoiCgUmkGNi6
3USzq/0LaF98CDZNA1Ri1Zigr+dPWVXbQFahGJqSCjmDWykeQo2yxlketpnoAfDg
I6PqWJqVu9vi5wiec+otFCAdc4wG5r5N5wqBDnn/jQpQ9ZbHJPyKi8t+YsKrXncA
/O0tw88Ekk4pBw52rSovBwRKXwh2eP5qTnBswgYWa24uSDJh62zb/Z+TkEy0so1n
uPIrF4CtlJfOZM+I6mPnFAIisuYDG0s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:38 2023 by rpki-client on console-ams.rpki-client.org