Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/54159aba-bb21-3361-86e9-a402859525cb.roa
File: 54159aba-bb21-3361-86e9-a402859525cb.roa (raw, json)
Hash identifier: jAIQkai7yZs2A9Euqt6e3KWOt3gf6JHHEW9HlzoRAdI=
Subject key identifier: 29:0D:F5:66:A2:A7:CF:76:18:E3:C2:5A:57:34:EB:B3:BC:22:3C:35
Certificate issuer: /CN=0c6ea609-981e-40d0-b481-d09a11cbe682
Certificate serial: 010D0C9F4328583DD0D374F5076AD344D2B4B180
Authority key identifier: FB:50:0C:6B:77:3D:50:88:C7:2D:95:56:A3:C0:7F:53:96:C1:93:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/54159aba-bb21-3361-86e9-a402859525cb.roa
Signing time: Thu 17 Sep 2020 15:54:38 +0000
ROA not before: Thu 17 Sep 2020 15:54:38 +0000
ROA not after: Thu 08 Aug 2024 04:00:00 +0000
asID: 14618
IP address blocks: 66.178.130.0/24 maxlen: 24
66.178.132.0/24 maxlen: 24
66.178.133.0/24 maxlen: 24
66.178.134.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:d3:74:f5:07:6a:d3:44:d2:b4:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6ea609-981e-40d0-b481-d09a11cbe682
Validity
Not Before: Sep 17 15:54:38 2020 GMT
Not After : Aug 8 04:00:00 2024 GMT
Subject: CN=aa147cc1-cf43-4cdf-a1e9-17679a7f1d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:2f:79:7b:31:9c:9a:7e:26:d2:5d:7f:27:
71:2a:73:b0:da:85:e5:14:31:88:b7:03:34:d3:8f:
5f:42:ea:48:f9:58:ff:b0:4a:7a:e1:24:c6:56:15:
18:c9:20:82:e4:ca:2c:2a:c7:84:44:d8:2b:cc:00:
dc:89:de:2c:e0:c9:c4:0c:f9:bd:a2:35:cb:67:68:
f5:43:50:f6:a6:51:dd:80:8a:d7:30:19:ba:7c:58:
98:f6:ed:94:10:33:30:1f:6a:27:60:65:ab:a2:c7:
6d:f0:b2:0d:f6:62:2e:c6:6a:c6:a5:e9:de:1f:24:
96:04:34:dd:56:1c:14:35:61:78:04:60:b7:ea:02:
b5:58:5a:97:b9:41:5a:b3:d4:13:e0:eb:45:37:83:
67:58:2e:f6:11:de:c9:2d:23:24:3f:50:38:26:01:
e7:9d:7b:86:09:fa:6b:f3:fd:97:b9:59:fd:2a:d7:
70:b0:d0:b3:94:b1:86:62:a7:31:13:b1:19:0f:5f:
7b:69:45:00:11:9b:93:90:14:38:f1:14:42:1f:c9:
43:4c:67:ef:ae:9e:a7:56:f9:52:48:f5:4a:1a:0b:
a7:c9:87:4c:19:c2:a5:20:05:ce:a2:c6:a1:72:ae:
73:8b:26:e0:45:37:6a:05:4b:a1:11:6a:95:01:c6:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:F5:66:A2:A7:CF:76:18:E3:C2:5A:57:34:EB:B3:BC:22:3C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/54159aba-bb21-3361-86e9-a402859525cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/0c6ea609-981e-40d0-b481-d09a11cbe682.crl
X509v3 Authority Key Identifier:
keyid:FB:50:0C:6B:77:3D:50:88:C7:2D:95:56:A3:C0:7F:53:96:C1:93:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.130.0/24
66.178.132.0-66.178.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:72:87:e7:26:99:eb:0a:81:8c:f5:9c:fd:97:7c:7a:06:61:
be:a1:4d:e5:81:13:ae:8f:af:c4:c4:44:53:2a:12:23:fd:a0:
05:dc:08:ad:ca:2b:c0:f4:46:44:92:14:36:55:c6:e1:80:88:
3c:ec:46:d6:52:91:fc:00:72:48:1d:8c:82:4d:f4:4a:cd:f7:
ec:ba:76:36:ba:c6:7c:0a:c9:30:e1:09:2a:65:3c:00:c2:8f:
94:ee:15:92:e4:2f:4d:88:74:b8:da:0c:71:ad:3a:0a:2e:d0:
78:70:b3:71:97:da:8d:d1:81:b7:37:aa:27:cc:53:6a:5d:74:
2c:db:16:5a:e8:e2:47:5a:8b:72:5a:49:a5:3f:3a:ad:7c:d5:
29:48:00:b4:b8:f1:3e:75:b2:b9:70:24:9e:05:e1:ad:65:52:
0d:67:27:bc:7c:64:27:38:94:b0:f3:f0:b0:a5:06:3e:15:46:
3d:48:5a:1d:99:b1:40:04:22:ab:65:2d:7f:0b:59:6e:ca:52:
61:47:55:38:91:2e:bd:06:37:a1:ab:05:9e:1c:57:a1:3e:cb:
d2:70:92:69:90:0e:d1:03:02:8e:b7:eb:ea:97:4d:a1:17:53:
60:d7:41:37:a8:65:73:ad:07:c5:4a:da:cf:50:f4:b1:6e:aa:
5d:98:0e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:48 2023 by rpki-client on console-ams.rpki-client.org