Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/03d2620d-b594-3399-807b-4fa723b49724.roa
File: 03d2620d-b594-3399-807b-4fa723b49724.roa (raw, json)
Hash identifier: cHEVfJx4Zo2EnPPUVKjS4REEWYgberMOSO4by+fj+lw=
Subject key identifier: A2:D4:E8:3E:44:3E:ED:94:6C:85:C1:AD:87:1F:38:62:AC:4D:D2:D5
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858451A15884D0C3B006221454940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/03d2620d-b594-3399-807b-4fa723b49724.roa
Signing time: Tue 05 Mar 2024 02:00:26 +0000
ROA not before: Tue 05 Mar 2024 02:00:26 +0000
ROA not after: Mon 03 Jun 2024 01:00:26 +0000
asID: 10557
IP address blocks: 166.88.192.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1a:15:88:4d:0c:3b:00:62:21:45:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 5 02:00:26 2024 GMT
Not After : Jun 3 01:00:26 2024 GMT
Subject: CN=9dc68269-cf93-46df-b3be-fa45623490a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:88:34:35:a9:8b:fe:c3:78:09:4c:38:92:
20:70:12:ef:80:12:f6:ba:fb:04:82:88:3f:b6:b5:
f9:80:77:a6:89:b3:08:c4:e2:b1:1e:95:51:dd:05:
cf:e3:a4:00:97:99:99:ec:68:59:9d:7b:23:fc:c9:
d5:72:3e:7b:07:26:13:ff:9e:4f:68:65:fb:c1:9b:
12:ac:f6:1f:ac:e6:eb:42:b2:73:ba:1f:d0:be:d6:
c2:8b:89:9f:2b:ff:55:7a:81:54:c5:a7:99:53:be:
0d:14:84:cd:38:e1:b2:0d:d5:60:94:58:11:12:72:
02:56:0e:35:16:46:99:b1:8e:e0:f2:5b:1d:d3:e8:
e9:36:c0:05:67:ce:1d:b4:f2:21:56:94:b1:a2:77:
fa:87:2b:2f:d8:05:40:e5:21:89:98:cb:1e:16:6e:
6b:b0:58:fd:73:3a:86:bd:2c:96:84:b7:02:63:a4:
91:dc:bf:fe:dc:5e:ca:99:b1:b4:7e:ea:74:ab:90:
eb:a8:64:ed:df:3d:de:83:91:85:ee:49:de:a8:51:
6b:5b:e3:51:1d:4c:33:ab:68:d3:5b:8e:a2:25:d6:
ee:e5:34:86:d8:72:91:06:3e:00:44:84:16:25:6b:
29:ba:94:73:3c:06:16:1f:5f:07:c3:e6:26:e9:33:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:E8:3E:44:3E:ED:94:6C:85:C1:AD:87:1F:38:62:AC:4D:D2:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/03d2620d-b594-3399-807b-4fa723b49724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:fd:36:b2:34:5b:6d:54:36:7b:82:06:37:0b:4d:71:db:87:
4b:de:6b:c2:2c:14:99:e6:49:f5:3c:d3:19:75:5d:fd:19:54:
0b:b9:ee:05:44:de:d0:e0:e3:d1:23:83:4a:59:9c:16:36:a1:
0f:7e:b9:89:85:90:2b:aa:65:30:49:c3:97:2a:b5:10:77:9a:
16:ca:8c:c0:a6:8c:32:74:27:00:ed:98:00:f8:ff:b8:f8:d3:
14:71:7e:c5:be:7c:6a:e6:7e:55:5d:12:49:06:fb:38:21:36:
b9:8b:45:87:14:0f:3a:6e:51:41:52:91:77:b7:05:91:2d:87:
6d:23:35:fd:ef:e5:67:1c:a5:09:f1:92:e4:80:cb:0d:1f:29:
1a:fb:95:6a:91:62:09:5f:64:5a:85:21:03:e8:6b:81:bf:2f:
37:af:be:7c:69:a6:3c:7a:2e:61:32:e5:1c:01:ad:12:01:37:
ed:ba:12:e4:25:9f:c6:96:b4:6e:ff:35:7a:ea:78:b6:fe:9d:
14:55:5f:6b:42:a4:2b:f2:c1:97:ef:c0:ee:31:c5:c5:ea:47:
dd:16:3c:73:82:d3:3e:1c:1f:9b:76:fc:d5:4e:c0:d1:77:42:
0b:b9:18:c0:ed:d4:01:89:41:f8:14:97:12:26:c7:ab:aa:d6:
29:a9:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org