Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/6a108de2-ce34-3965-96f2-8592ea0daa4b.roa
File: 6a108de2-ce34-3965-96f2-8592ea0daa4b.roa (raw, json)
Hash identifier: KocMs3d6axBD/BDTRmyZIH5Cnws910fKHlwfIYWloZM=
Subject key identifier: 2E:4E:28:CD:EB:A0:AC:6A:D3:B5:B4:80:5C:27:3C:00:84:A7:14:DC
Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01
Certificate serial: 010D0C9F4328584250ADF3039BFD7ED3F1312400
Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/6a108de2-ce34-3965-96f2-8592ea0daa4b.roa
Signing time: Fri 23 Jun 2023 13:00:19 +0000
ROA not before: Fri 23 Jun 2023 13:00:19 +0000
ROA not after: Thu 21 Sep 2023 13:00:19 +0000
asID: 14618
IP address blocks: 216.120.134.0/24 maxlen: 24
216.120.161.0/24 maxlen: 24
216.120.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:ad:f3:03:9b:fd:7e:d3:f1:31:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01
Validity
Not Before: Jun 23 13:00:19 2023 GMT
Not After : Sep 21 13:00:19 2023 GMT
Subject: CN=c7829e09-e26d-4a44-98e7-d070e75a7221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:38:82:89:f6:e1:fa:f6:1f:3d:87:83:5f:
89:6b:ce:c4:08:42:5e:1e:95:76:e4:e4:e0:38:5d:
57:b3:c0:9b:a5:4d:64:a1:04:a6:19:55:09:1a:2c:
9a:71:e0:f5:33:60:f5:fc:a6:c9:00:74:6f:a9:50:
63:3d:d0:04:d6:57:5c:4c:db:ee:be:9e:1d:bd:11:
9d:26:73:dd:87:b9:fe:bd:b8:b2:48:27:cf:00:8d:
a6:87:fe:56:86:cf:5d:08:92:6f:b4:0e:b6:a8:6d:
ab:cd:21:e8:e0:2b:fa:7d:51:60:5d:e8:c1:de:96:
ee:d5:5c:7f:10:e3:66:40:c3:f4:9b:44:d4:a2:bb:
a5:2b:46:02:ab:a3:b5:1e:19:65:69:01:7b:c8:ba:
64:0c:70:62:d5:65:7c:67:d7:83:05:96:44:5e:78:
38:4b:bb:05:14:85:43:44:d6:8b:ac:b9:9f:e3:f3:
91:2d:7b:52:f2:49:8e:96:3a:d9:a4:e9:36:bf:dc:
8d:75:7e:95:55:6e:c1:be:b1:fc:43:df:01:6a:da:
65:57:94:d1:64:2c:48:ba:5e:04:1f:e2:39:45:68:
ab:4f:13:93:1c:68:a0:2d:07:3c:14:9e:9d:6b:3d:
9e:f4:b5:4b:9d:09:43:6b:35:49:14:4d:12:ff:93:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4E:28:CD:EB:A0:AC:6A:D3:B5:B4:80:5C:27:3C:00:84:A7:14:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/6a108de2-ce34-3965-96f2-8592ea0daa4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl
X509v3 Authority Key Identifier:
keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.134.0/24
216.120.161.0/24
216.120.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d1:aa:23:0e:e0:81:93:22:15:4b:a6:41:cd:4d:b3:e1:28:
c9:8d:8a:c1:ef:06:61:70:2c:d8:72:6f:a2:8f:f6:c4:9b:10:
53:78:32:a8:02:80:6d:2e:ce:59:21:77:e1:28:3f:e0:2d:64:
b5:d5:78:a8:4e:23:c8:f5:4c:e9:90:ea:06:5c:94:cb:4a:c2:
90:f3:95:2e:50:c8:12:6f:b9:15:2c:4e:12:76:94:e4:fc:ef:
e9:f0:71:e6:0b:38:52:d9:6c:1f:b1:47:13:ec:3b:4d:8d:fa:
5b:43:1b:c8:ac:9c:46:2b:8e:ac:15:e7:fb:74:07:86:ca:dd:
0a:d1:0f:96:02:25:3b:42:6b:ec:ed:62:8a:1a:69:77:07:02:
97:3c:c0:c2:09:94:6e:1d:de:14:bf:67:b2:c0:22:c7:05:33:
93:9c:d6:e7:ce:00:1b:10:6a:40:27:74:83:32:2b:de:1c:32:
2a:8d:00:15:4f:34:78:0f:c4:2c:fd:3c:76:f2:ad:cc:0a:8b:
01:f9:5d:65:3d:c1:db:c2:c3:81:ab:b1:82:e1:98:b2:40:d9:
30:a4:e4:0c:c8:00:a3:4e:f7:8a:0f:28:01:fd:12:f7:a4:22:
ef:e4:2f:60:36:f1:61:6c:22:54:d2:10:7d:33:d9:32:4f:d6:
d3:e5:32:db
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEJQrfMDm/1+0/ExJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThjMjllMzgtYThkZi00MTVjLWEyOGItYTE0NjVmOWE0
ZDAxMB4XDTIzMDYyMzEzMDAxOVoXDTIzMDkyMTEzMDAxOVowLzEtMCsGA1UEAxMk
Yzc4MjllMDktZTI2ZC00YTQ0LTk4ZTctZDA3MGU3NWE3MjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT04gon24fr2Hz2Hg1+Ja87ECEJeHpV25OTg
OF1Xs8CbpU1koQSmGVUJGiyaceD1M2D1/KbJAHRvqVBjPdAE1ldcTNvuvp4dvRGd
JnPdh7n+vbiySCfPAI2mh/5Whs9dCJJvtA62qG2rzSHo4Cv6fVFgXejB3pbu1Vx/
EONmQMP0m0TUorulK0YCq6O1HhllaQF7yLpkDHBi1WV8Z9eDBZZEXng4S7sFFIVD
RNaLrLmf4/ORLXtS8kmOljrZpOk2v9yNdX6VVW7BvrH8Q98BatplV5TRZCxIul4E
H+I5RWirTxOTHGigLQc8FJ6daz2e9LVLnQlDazVJFE0S/5NnPwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFC5OKM3roKxq07W0gFwnPACEpxTcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMy
OWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5YTRkMDEvNmExMDhkZTItY2UzNC0z
OTY1LTk2ZjItODU5MmVhMGRhYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZThjMjllMzgtYThkZi00MTVjLWEy
OGItYTE0NjVmOWE0ZDAxL2U4YzI5ZTM4LWE4ZGYtNDE1Yy1hMjhiLWExNDY1Zjlh
NGQwMS5jcmwwHwYDVR0jBBgwFoAUeAe6NOGFy8MpALrpYvOu5kGzMgswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2
NWY5YTRkMDEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2HiGAwQA
2HihAwQA2Hi8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADHRqiMO4IGTIhVLpkHNTbPhKMmNisHvBmFwLNhy
b6KP9sSbEFN4MqgCgG0uzlkhd+EoP+AtZLXVeKhOI8j1TOmQ6gZclMtKwpDzlS5Q
yBJvuRUsThJ2lOT87+nwceYLOFLZbB+xRxPsO02N+ltDG8isnEYrjqwV5/t0B4bK
3QrRD5YCJTtCa+ztYooaaXcHApc8wMIJlG4d3hS/Z7LAIscFM5Oc1ufOABsQakAn
dIMyK94cMiqNABVPNHgPxCz9PHbyrcwKiwH5XWU9wdvCw4GrsYLhmLJA2TCk5AzI
AKNO94oPKAH9EvekIu/kL2A28WFsIlTSEH0z2TJP1tPlMts=
-----END CERTIFICATE-----
Generated at Fri Sep 8 11:46:56 2023 by rpki-client on console-fra.rpki-client.org