Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/87fb94e0-035b-3b46-b922-f5081676a227.roa
File: 87fb94e0-035b-3b46-b922-f5081676a227.roa (raw, json)
Hash identifier: OyXOf7NVQK5Ornbzw4RBqECfyvyrM1zXmFgj3S7GY84=
Subject key identifier: CA:79:DB:8A:A9:1A:F1:90:99:66:3C:1C:21:E7:3F:CD:9A:C8:6F:FE
Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial: 010D0C9F4328583FB36EF570AC1685CC4B4C5AC0
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/87fb94e0-035b-3b46-b922-f5081676a227.roa
Signing time: Mon 03 Oct 2022 15:18:07 +0000
ROA not before: Mon 03 Oct 2022 15:18:07 +0000
ROA not after: Tue 28 Jan 2025 05:00:00 +0000
asID: 211619
IP address blocks: 23.139.232.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b3:6e:f5:70:ac:16:85:cc:4b:4c:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Validity
Not Before: Oct 3 15:18:07 2022 GMT
Not After : Jan 28 05:00:00 2025 GMT
Subject: CN=23a22c62-77bf-42c6-9e2a-8db07bc9cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:c8:01:dd:4a:bc:87:21:9c:0f:f3:3b:46:
8d:bb:cb:75:64:69:39:ac:77:ed:f3:d9:22:f8:8b:
3e:da:25:81:20:28:3d:71:74:f1:c4:a9:72:04:f2:
70:68:c2:fc:d7:69:4c:ee:49:2f:0e:bf:11:f8:d2:
70:2a:62:22:db:f2:c2:a1:19:f3:b9:23:4c:0f:94:
5e:2c:38:95:fa:1a:fe:ad:33:9f:cf:13:8a:00:0a:
4c:e8:f6:3b:16:80:07:02:11:62:7e:2e:78:95:75:
a4:43:a8:d4:08:20:bc:cd:bd:81:53:ee:f1:0d:3f:
80:f0:65:de:ce:0f:3e:92:56:d8:2b:5e:f6:d6:6f:
7f:aa:e8:e3:30:18:b5:95:a4:81:4a:c5:5a:d6:7c:
77:81:96:dc:a4:07:3f:bf:ba:82:01:5b:b9:3f:05:
9c:11:a7:ff:51:f9:e4:98:4c:ae:2d:a0:59:c7:26:
13:11:76:57:c6:ff:37:ac:e1:b2:e1:bc:29:36:1f:
fa:78:4e:79:49:00:b0:88:5e:90:01:7a:94:33:95:
16:a2:92:8d:df:06:e0:2e:21:8f:1f:ec:95:31:ba:
69:2d:f8:16:43:e5:5f:2e:16:04:c3:c3:e2:81:6b:
e3:33:30:05:8f:18:c3:05:5f:ad:56:91:37:24:12:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:DB:8A:A9:1A:F1:90:99:66:3C:1C:21:E7:3F:CD:9A:C8:6F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/87fb94e0-035b-3b46-b922-f5081676a227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
X509v3 Authority Key Identifier:
keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:3d:c9:2f:ef:61:33:d1:8d:e8:7e:cb:42:13:97:bd:df:3b:
1d:15:02:67:54:bc:7b:87:32:dc:b0:70:7c:d5:f1:b1:ed:bd:
e9:5d:6a:1e:c9:d5:a3:1b:4a:c1:00:bb:ae:b5:45:70:02:7e:
cb:3b:16:54:14:19:cc:fd:14:b9:c6:15:fe:4d:f0:b9:28:73:
a0:e8:49:2a:a2:93:62:f6:23:90:66:d9:1e:bd:d6:d0:ab:10:
28:23:a5:30:8f:99:94:90:e3:76:e8:cd:83:9c:e4:b0:1b:e7:
d1:38:44:1f:41:0c:50:0b:8d:2e:f2:5f:0e:a2:13:45:13:9c:
6e:31:ed:ac:d0:3e:f8:0a:35:d0:1d:f9:df:9d:84:b2:f8:3b:
7f:a1:41:23:c2:01:c2:5f:3e:1a:62:0e:7e:03:a1:07:eb:59:
a4:5e:49:ba:ce:7a:96:44:63:d6:da:8f:0f:79:3c:cf:2c:6e:
33:7b:f4:7a:8a:63:21:5b:91:94:5c:ae:cb:f8:ad:17:2b:53:
dd:b0:49:c3:c3:40:51:c4:23:34:2c:48:e0:ae:59:50:59:85:
67:1d:c2:c0:dd:b0:38:ec:a5:69:e0:b6:69:b7:02:84:ad:ff:
29:75:28:a7:a0:1c:e5:b1:06:dd:44:14:a9:fd:e1:a4:34:fa:
58:6b:0a:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+zbvVwrBaFzEtMWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTIyMTAwMzE1MTgwN1oXDTI1MDEyODA1MDAwMFowLzEtMCsGA1UEAxMk
MjNhMjJjNjItNzdiZi00MmM2LTllMmEtOGRiMDdiYzljZjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpzIAd1KvIchnA/zO0aNu8t1ZGk5rHft89ki
+Is+2iWBICg9cXTxxKlyBPJwaML812lM7kkvDr8R+NJwKmIi2/LCoRnzuSNMD5Re
LDiV+hr+rTOfzxOKAApM6PY7FoAHAhFifi54lXWkQ6jUCCC8zb2BU+7xDT+A8GXe
zg8+klbYK1721m9/qujjMBi1laSBSsVa1nx3gZbcpAc/v7qCAVu5PwWcEaf/Ufnk
mEyuLaBZxyYTEXZXxv83rOGy4bwpNh/6eE55SQCwiF6QAXqUM5UWopKN3wbgLiGP
H+yVMbppLfgWQ+VfLhYEw8PigWvjMzAFjxjDBV+tVpE3JBJolQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMp524qpGvGQmWY8HCHnP82ayG/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvODdmYjk0ZTAtMDM1Yi0z
YjQ2LWI5MjItZjUwODE2NzZhMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4voMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ09yS/vYTPRjeh+y0ITl73fOx0VAmdUvHuHMtywcHzV8bHtveldah7J
1aMbSsEAu661RXACfss7FlQUGcz9FLnGFf5N8Lkoc6DoSSqik2L2I5Bm2R691tCr
ECgjpTCPmZSQ43bozYOc5LAb59E4RB9BDFALjS7yXw6iE0UTnG4x7azQPvgKNdAd
+d+dhLL4O3+hQSPCAcJfPhpiDn4DoQfrWaReSbrOepZEY9bajw95PM8sbjN79HqK
YyFbkZRcrsv4rRcrU92wScPDQFHEIzQsSOCuWVBZhWcdwsDdsDjspWngtmm3AoSt
/yl1KKegHOWxBt1EFKn94aQ0+lhrCuo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:38 2023 by rpki-client on console-ams.rpki-client.org