Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/efcad54d-c201-3893-8efa-1c3b3863d02b.roa
File: efcad54d-c201-3893-8efa-1c3b3863d02b.roa (raw, json)
Hash identifier: m0C3U2nDaOOjomZOFVzCvLB44Pr4DLMTGx/xI3RAqlM=
Subject key identifier: BE:8F:A9:99:09:ED:AF:CA:D0:AC:53:AC:E5:63:35:01:EF:0A:27:25
Certificate issuer: /CN=0c6ea609-981e-40d0-b481-d09a11cbe682
Certificate serial: 010D0C9F4328583DD0D51F936F65B08C50569100
Authority key identifier: FB:50:0C:6B:77:3D:50:88:C7:2D:95:56:A3:C0:7F:53:96:C1:93:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/efcad54d-c201-3893-8efa-1c3b3863d02b.roa
Signing time: Thu 17 Sep 2020 15:54:38 +0000
ROA not before: Thu 17 Sep 2020 15:54:38 +0000
ROA not after: Thu 08 Aug 2024 04:00:00 +0000
asID: 16509
IP address blocks: 66.178.130.0/24 maxlen: 24
66.178.132.0/24 maxlen: 24
66.178.133.0/24 maxlen: 24
66.178.134.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:d5:1f:93:6f:65:b0:8c:50:56:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6ea609-981e-40d0-b481-d09a11cbe682
Validity
Not Before: Sep 17 15:54:38 2020 GMT
Not After : Aug 8 04:00:00 2024 GMT
Subject: CN=ff7d2f87-99ae-4e55-a322-a836848ea310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:f4:d7:8f:e9:31:65:6d:2d:7b:7c:b3:cb:
21:8f:22:a8:a9:89:26:c0:d0:b0:34:86:d5:fa:e4:
ac:18:3a:d5:30:0e:8b:f3:02:98:49:b1:b2:fa:23:
8a:64:bf:92:d8:d9:72:d4:04:07:40:46:23:c0:3b:
26:c2:6f:f5:d1:d8:9a:55:ce:2a:a0:b3:9c:6b:77:
2b:59:dc:fe:29:93:eb:c5:c9:1f:f4:f3:ed:cb:4a:
c2:e8:7a:9c:7e:2b:55:88:fa:93:b6:50:d9:7d:40:
16:65:22:41:06:97:15:05:b7:55:3a:2f:05:cf:ad:
b3:40:80:ee:f2:ce:f5:68:f1:4d:72:bb:4f:36:45:
c3:65:b5:63:27:21:b4:a9:54:c9:e1:bb:7a:ac:0d:
35:5c:89:e0:8b:c0:ea:d2:8d:8c:1f:bc:c3:e0:e0:
68:00:b7:9d:89:a5:8c:2c:67:12:c5:d6:7f:a2:d6:
5e:d6:23:de:75:f7:bc:48:23:db:fa:bb:cd:4f:7f:
f9:72:84:1e:cc:66:ab:7a:fd:08:5c:b5:22:2b:d1:
a7:66:85:05:70:bb:ca:16:27:c8:93:a1:a2:7c:46:
7f:30:1e:36:c5:90:7e:b2:de:6a:d7:56:17:82:be:
df:8c:db:f8:a7:60:55:18:30:9d:f1:89:cd:23:cd:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:A9:99:09:ED:AF:CA:D0:AC:53:AC:E5:63:35:01:EF:0A:27:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/efcad54d-c201-3893-8efa-1c3b3863d02b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682/0c6ea609-981e-40d0-b481-d09a11cbe682.crl
X509v3 Authority Key Identifier:
keyid:FB:50:0C:6B:77:3D:50:88:C7:2D:95:56:A3:C0:7F:53:96:C1:93:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c6ea609-981e-40d0-b481-d09a11cbe682.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.130.0/24
66.178.132.0-66.178.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d4:c8:e4:72:e1:07:80:01:3d:17:01:33:45:e4:31:11:3f:
fe:ba:81:af:3c:38:84:fa:f2:13:31:ce:ab:17:e9:1c:ba:46:
7d:c1:73:2e:df:d1:62:ea:70:d4:30:30:18:b9:fc:89:b6:cb:
ba:55:c0:0b:09:af:d7:ae:12:97:0f:b8:0a:2c:f7:75:2b:40:
fb:57:3f:67:ea:69:12:43:6f:dd:29:f5:c1:3c:14:7b:29:da:
73:fb:0c:42:f9:47:b8:0c:ea:e6:fe:1d:9f:94:b3:6a:33:f2:
f3:67:ea:4c:39:cb:cc:0e:ae:08:3b:3e:91:31:38:4e:1d:83:
52:75:db:79:2b:26:9b:58:82:5c:31:50:0e:cb:de:4a:ac:5c:
de:1d:c4:60:ae:7b:f3:da:a3:82:9f:4c:b6:60:16:aa:45:51:
aa:12:14:b8:5c:4d:e7:b9:29:a0:51:9f:d2:37:7d:f6:85:a8:
19:21:e5:cb:e1:94:f1:e9:cc:81:80:8b:58:8a:f6:81:80:f0:
45:eb:87:c2:53:12:4c:56:75:83:aa:f4:cb:83:40:7e:59:5c:
66:2b:2d:03:07:b3:0c:1b:55:91:f8:d9:dd:4f:78:b7:18:25:
62:82:d9:66:dd:ac:e9:a9:d9:46:d4:47:86:b0:88:b4:62:90:
1a:7b:8e:3d
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWD3Q1R+Tb2WwjFBWkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM2ZWE2MDktOTgxZS00MGQwLWI0ODEtZDA5YTExY2Jl
NjgyMB4XDTIwMDkxNzE1NTQzOFoXDTI0MDgwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmY3ZDJmODctOTlhZS00ZTU1LWEzMjItYTgzNjg0OGVhMzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumL014/pMWVtLXt8s8shjyKoqYkmwNCwNIbV
+uSsGDrVMA6L8wKYSbGy+iOKZL+S2Nly1AQHQEYjwDsmwm/10diaVc4qoLOca3cr
Wdz+KZPrxckf9PPty0rC6HqcfitViPqTtlDZfUAWZSJBBpcVBbdVOi8Fz62zQIDu
8s71aPFNcrtPNkXDZbVjJyG0qVTJ4bt6rA01XIngi8Dq0o2MH7zD4OBoALediaWM
LGcSxdZ/otZe1iPedfe8SCPb+rvNT3/5coQezGarev0IXLUiK9GnZoUFcLvKFifI
k6GifEZ/MB42xZB+st5q11YXgr7fjNv4p2BVGDCd8YnNI80SAQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFL6PqZkJ7a/K0KxTrOVjNQHvCiclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzZl
YTYwOS05ODFlLTQwZDAtYjQ4MS1kMDlhMTFjYmU2ODIvZWZjYWQ1NGQtYzIwMS0z
ODkzLThlZmEtMWMzYjM4NjNkMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM2ZWE2MDktOTgxZS00MGQwLWI0
ODEtZDA5YTExY2JlNjgyLzBjNmVhNjA5LTk4MWUtNDBkMC1iNDgxLWQwOWExMWNi
ZTY4Mi5jcmwwHwYDVR0jBBgwFoAU+1AMa3c9UIjHLZVWo8B/U5bBk78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzZlYTYwOS05ODFlLTQwZDAtYjQ4MS1kMDlh
MTFjYmU2ODIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAQrKCMAwD
BAJCsoQDBABCsoYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAeNTI5HLhB4ABPRcBM0XkMRE//rqBrzw4hPry
EzHOqxfpHLpGfcFzLt/RYupw1DAwGLn8ibbLulXACwmv164Slw+4Ciz3dStA+1c/
Z+ppEkNv3Sn1wTwUeynac/sMQvlHuAzq5v4dn5SzajPy82fqTDnLzA6uCDs+kTE4
Th2DUnXbeSsmm1iCXDFQDsveSqxc3h3EYK5789qjgp9MtmAWqkVRqhIUuFxN57kp
oFGf0jd99oWoGSHly+GU8enMgYCLWIr2gYDwReuHwlMSTFZ1g6r0y4NAfllcZist
AwezDBtVkfjZ3U94txglYoLZZt2s6anZRtRHhrCItGKQGnuOPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:15 2024 by rpki-client on console-fra.rpki-client.org