Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/979978c3-f040-3163-a3ac-61828349a28c.roa
File: 979978c3-f040-3163-a3ac-61828349a28c.roa (raw, json)
Hash identifier: ouEMpTc/emynBPC0Scn2IscKUaMNfrF1eRWHAZ01YUw=
Subject key identifier: 04:F8:77:B0:CB:FB:71:DB:30:08:49:19:55:9F:91:5B:46:25:A1:C8
Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01
Certificate serial: 010D0C9F4328584250ADF2AB36F5B3AE1F3321C0
Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/979978c3-f040-3163-a3ac-61828349a28c.roa
Signing time: Fri 23 Jun 2023 13:00:19 +0000
ROA not before: Fri 23 Jun 2023 13:00:19 +0000
ROA not after: Thu 21 Sep 2023 13:00:19 +0000
asID: 11491
IP address blocks: 216.120.188.0/24 maxlen: 24
216.120.161.0/24 maxlen: 24
216.120.134.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:ad:f2:ab:36:f5:b3:ae:1f:33:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01
Validity
Not Before: Jun 23 13:00:19 2023 GMT
Not After : Sep 21 13:00:19 2023 GMT
Subject: CN=1ac8d9a7-abc4-4510-aedb-e911e9283a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:42:6e:2e:74:6e:88:b5:c7:d5:4b:b8:bf:
b7:9d:77:12:3c:58:a6:a4:31:04:78:5c:86:03:b5:
de:cb:cd:f4:2b:85:4a:a8:ed:62:07:9d:a7:85:fd:
76:22:f8:0c:9e:45:83:9f:92:f2:ca:31:e3:c2:db:
0c:f1:fb:31:15:7b:3e:c2:cd:fb:67:d5:e7:07:95:
8a:85:ff:76:74:7e:7a:52:be:e3:3e:26:d9:2c:d8:
39:94:5a:a1:f8:95:1a:81:24:31:e3:60:1f:c8:08:
f1:39:ac:10:72:c3:97:57:06:97:1e:90:a7:fd:99:
cb:4a:69:21:87:9a:44:b5:c5:e3:25:3b:d0:5e:6e:
36:17:7b:2d:19:04:6e:4b:62:39:d2:6e:8b:bf:8d:
45:8f:2a:9e:e8:1d:fc:86:07:b5:0d:97:db:9d:d3:
3b:16:d2:d8:a7:af:9a:a5:19:e3:d6:ec:b0:d0:60:
de:23:80:60:2d:a6:16:a0:9a:ba:31:88:4e:0d:33:
76:2e:e3:77:58:63:d1:bd:06:b1:cc:93:06:4c:cc:
a7:63:fc:df:d8:2b:a5:b7:86:bb:76:ff:f0:62:47:
fd:ef:a5:55:ff:7b:27:2e:f9:3a:d2:bf:18:87:7d:
45:a3:f5:2c:c1:07:3a:c2:fe:35:9e:77:88:d1:09:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:77:B0:CB:FB:71:DB:30:08:49:19:55:9F:91:5B:46:25:A1:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/979978c3-f040-3163-a3ac-61828349a28c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl
X509v3 Authority Key Identifier:
keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.134.0/24
216.120.161.0/24
216.120.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c8:c3:be:76:1f:23:ea:59:c8:73:cc:47:87:2e:de:0f:ff:
ff:c1:f8:c2:0d:d2:57:b7:ad:24:43:e4:e8:6f:48:fc:32:0f:
d1:9c:1a:fe:30:e3:c9:f1:01:57:82:32:d3:be:d9:ae:0b:dd:
7b:6a:7e:85:a9:df:c4:32:86:d3:7e:88:ec:31:d1:a9:cc:74:
d0:2b:60:97:84:87:8a:72:8c:a1:39:ea:39:86:50:3b:81:d1:
42:48:6a:41:b4:3d:a1:93:f3:6d:b0:7e:eb:da:dd:4f:2c:0e:
f7:80:f6:72:60:b4:84:a3:b3:14:b9:17:25:e4:ad:0b:63:4d:
c2:f5:28:15:48:96:e8:e7:60:83:7b:6b:22:2e:5a:e8:3a:63:
63:64:7f:fe:ac:6b:a5:c5:f0:c2:3f:89:e7:7a:b3:5f:d0:02:
63:83:05:e5:02:17:a0:b8:fe:13:76:f6:2b:33:4a:ac:55:34:
89:66:79:0f:79:76:74:a4:15:50:39:2a:15:93:3a:34:ad:22:
fe:65:9d:1c:2a:40:8e:fe:6c:ca:e8:52:5c:4f:6a:06:af:3e:
ef:64:6b:a8:4b:6c:ea:00:46:52:39:6f:62:cd:d0:ea:a0:5d:
d0:44:4f:93:e1:df:be:f8:2c:25:33:af:51:5b:59:93:7a:79:
9b:4e:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 11:46:56 2023 by rpki-client on console-fra.rpki-client.org