Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0106b839-cb99-3406-8900-5b6d183281f0.roa
File: 0106b839-cb99-3406-8900-5b6d183281f0.roa (raw, json)
Hash identifier: uD5Wcff4sf9e4SrXKz8wppQZV6vsO2jAonyHRtifiu8=
Subject key identifier: C2:9F:4B:09:E4:69:87:DD:AD:95:2B:E5:B3:DF:E7:4A:20:53:9F:D6
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583ACD21DE499689BA1BF2F26D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0106b839-cb99-3406-8900-5b6d183281f0.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Mon 06 Nov 2023 05:00:00 +0000
asID: 54500
IP address blocks: 23.27.48.0/24 maxlen: 24
50.117.16.0/24 maxlen: 24
136.0.117.0/24 maxlen: 24
136.0.118.0/24 maxlen: 24
136.0.119.0/24 maxlen: 24
136.0.120.0/24 maxlen: 24
173.245.82.0/24 maxlen: 24
205.164.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:cd:21:de:49:96:89:ba:1b:f2:f2:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Nov 6 05:00:00 2023 GMT
Subject: CN=7779f9f4-a1f5-4d95-a0cc-8f71278816fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:bc:d8:c7:31:41:71:2d:58:e0:22:a0:d8:
06:8f:c8:f7:67:0c:28:c6:c0:4d:ad:59:1e:88:fc:
a0:32:13:c0:8a:b8:59:0e:15:a1:43:ed:f8:2a:b0:
b7:09:de:ec:2f:64:00:74:cd:85:27:15:f4:66:7d:
aa:b5:7c:02:bc:78:6a:b4:d8:52:28:fa:51:28:7e:
9c:2c:03:8f:3d:95:d8:ae:39:ae:d7:7c:2f:c9:31:
ec:04:48:e9:84:4f:13:31:5d:d1:5c:8a:1a:ff:20:
b1:32:0f:04:61:e0:95:6c:b4:75:16:eb:83:56:ff:
de:46:58:19:87:7b:88:9e:f1:2f:18:48:40:ed:7f:
7f:b2:74:6b:24:ec:74:9f:60:ce:b8:49:36:f0:61:
ab:82:c5:17:35:ce:bd:50:3e:cb:2d:c6:2d:11:47:
e0:e9:15:6d:3a:64:36:c4:74:42:09:41:36:10:41:
c7:3a:42:99:df:fb:23:57:b4:62:37:ec:80:3f:a2:
49:c9:22:e0:aa:77:a3:84:20:a7:34:15:58:be:88:
7c:44:f3:53:0d:00:78:57:0f:47:61:52:29:0d:51:
c0:90:f9:a0:39:c3:43:23:36:a9:da:75:fd:1f:1f:
02:b8:28:24:0c:21:aa:59:1c:29:6a:b0:de:aa:10:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:4B:09:E4:69:87:DD:AD:95:2B:E5:B3:DF:E7:4A:20:53:9F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0106b839-cb99-3406-8900-5b6d183281f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.48.0/24
50.117.16.0/24
136.0.117.0-136.0.120.255
173.245.82.0/24
205.164.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:aa:4d:fb:65:b5:80:33:a1:e0:96:06:85:d1:a2:65:b0:e2:
f2:1f:db:91:73:2f:ed:84:34:d2:1a:94:0f:46:78:58:2a:2a:
2c:4b:95:24:c1:51:44:6a:85:f4:0e:b5:32:c5:9d:37:72:de:
c6:53:30:dd:bf:47:a0:cd:d4:51:68:0f:9e:dd:a4:d5:a9:4f:
a6:3a:66:1d:e8:30:a3:d7:11:d1:eb:60:96:30:4b:e5:81:cf:
9b:a4:06:a9:7c:52:76:cb:77:ab:73:fa:e3:99:86:9c:ea:5c:
64:a5:e5:bf:b1:03:10:6c:87:ae:fd:d1:ef:41:48:3d:0a:83:
0d:ea:be:16:71:ff:d3:7e:9f:a5:86:eb:51:9f:c4:5d:93:e4:
5c:dd:01:9c:7c:63:5b:c5:48:be:c6:82:f6:23:d6:bd:73:99:
be:64:cd:ed:f4:91:e0:bb:9f:fc:11:5c:b0:22:8f:9d:e3:6e:
a3:25:53:4b:4c:28:67:29:ea:1e:c8:5d:43:63:0e:5f:f5:1f:
2b:4c:30:28:84:37:4e:91:a2:c1:20:f7:f8:a1:ee:85:bd:0f:
ed:4f:15:5c:43:f1:a2:d7:6f:60:ea:19:92:8b:cf:05:fa:de:
0e:05:58:b2:7e:fc:c7:1c:c1:da:c5:74:34:eb:3c:06:3d:67:
cb:48:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:17 2024 by rpki-client on console-fra.rpki-client.org