Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/708f5e92-93b7-3d5a-a6e2-ec24158a5538.roa
File: 708f5e92-93b7-3d5a-a6e2-ec24158a5538.roa (raw, json)
Hash identifier: ZR7dnjTa3JQnjqKmKHsxdhJPDFSD7bRqADrwUf+wYmg=
Subject key identifier: 3D:B7:12:C7:32:C1:4A:00:42:8D:C0:07:02:BE:BA:7C:43:AA:13:10
Certificate issuer: /CN=a3e437f7-1e43-4bb4-be78-da876ad33518
Certificate serial: 010D0C9F43285845DEC94550A7DC6E15635F5600
Authority key identifier: 2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/708f5e92-93b7-3d5a-a6e2-ec24158a5538.roa
Signing time: Tue 14 May 2024 13:00:34 +0000
ROA not before: Tue 14 May 2024 13:00:34 +0000
ROA not after: Mon 12 Aug 2024 13:00:34 +0000
asID: 30002
IP address blocks: 23.156.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:de:c9:45:50:a7:dc:6e:15:63:5f:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e437f7-1e43-4bb4-be78-da876ad33518
Validity
Not Before: May 14 13:00:34 2024 GMT
Not After : Aug 12 13:00:34 2024 GMT
Subject: CN=f7d03130-606b-49d2-8384-f816d3125dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:70:89:bf:ef:df:a8:d3:76:fb:d1:46:1b:
67:58:48:c7:d2:ad:29:0d:1e:6e:5d:9c:1f:5c:ef:
a1:14:64:38:16:4b:0e:a3:9f:a7:15:92:23:6f:6c:
28:ee:f5:17:1b:eb:6f:5c:27:17:f6:a3:1c:3f:3b:
14:4c:ad:62:c5:38:4a:02:4e:10:2b:e0:e0:5d:2c:
80:b1:c0:b5:cb:98:63:df:04:86:2b:10:57:f2:93:
f5:9b:70:c2:b5:b1:7f:aa:45:88:5b:ef:2e:d8:cd:
ec:51:50:38:31:ce:b5:ac:b6:5c:94:e5:32:b8:95:
3d:e8:5b:8a:69:98:ff:d5:d9:be:ce:7c:db:54:11:
1b:04:f4:e4:04:42:5d:8e:67:e9:de:94:87:66:7b:
8b:ec:8a:21:10:ff:17:71:39:5d:64:64:b8:bb:2c:
cd:f1:81:33:1a:96:bd:15:aa:e3:31:45:58:0a:4a:
d5:c5:f2:ff:7e:55:f2:00:4c:f8:84:e0:ec:52:c7:
51:28:97:4a:31:56:d8:71:8d:78:76:66:0d:8d:d9:
9a:16:12:d6:ae:fc:e5:6f:6b:db:c4:8b:30:0b:8b:
de:d6:f8:45:c8:45:2e:f0:62:c1:30:71:2b:94:de:
83:29:46:50:e1:44:5c:6f:a8:21:ce:9d:41:71:65:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:12:C7:32:C1:4A:00:42:8D:C0:07:02:BE:BA:7C:43:AA:13:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/708f5e92-93b7-3d5a-a6e2-ec24158a5538.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.crl
X509v3 Authority Key Identifier:
keyid:2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:17:cd:af:d8:70:da:b9:14:49:2c:5f:49:07:25:36:af:06:
e7:76:7c:19:4c:e8:00:b9:33:c9:11:8f:17:0f:e0:01:db:c1:
b0:94:2d:cf:49:d7:04:98:f3:b7:16:c4:45:38:41:94:bc:1c:
b4:03:c2:3c:5b:9e:fc:ce:73:4b:f8:01:23:0c:58:26:2d:a3:
ae:c0:45:98:00:5f:59:a2:ca:7e:ee:04:b8:5f:0e:60:46:6b:
66:f3:3c:4c:1e:39:66:44:99:75:31:21:b3:bd:9a:83:e5:b3:
3a:2d:67:1d:5e:5a:e5:fe:86:8c:25:95:07:ab:78:87:93:3e:
f2:3b:63:a6:d6:90:cf:dd:f0:a7:bf:46:be:f9:1e:08:fb:1d:
c7:3b:1b:1a:7f:97:da:ac:8c:7f:6b:b5:19:1e:9d:92:98:d1:
99:84:d4:b4:24:c4:bb:75:82:e8:50:38:fe:90:a1:9a:f8:48:
65:cd:7a:e1:8d:83:ef:eb:fa:6d:3e:2d:39:77:72:72:29:02:
22:a7:b1:75:e7:91:56:c8:61:18:e6:99:a5:1d:14:d0:03:85:
06:3d:aa:b5:09:f1:6f:b8:62:17:ac:fa:2e:eb:a2:d2:4a:34:
3c:1b:12:ce:69:18:c7:61:0b:b5:96:8d:da:82:30:27:f5:11:
55:f1:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:19:57 2024 by rpki-client on console-ams.rpki-client.org