Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/067104fc-c303-3234-abcf-bfa89c6e097d.roa
File: 067104fc-c303-3234-abcf-bfa89c6e097d.roa (raw, json)
Hash identifier: ovjLYpfIhrcRVCr59badTNQnWLtddHREfozL5gmKrtE=
Subject key identifier: BD:E8:31:AF:5A:E5:A6:DB:83:4E:51:81:13:18:EB:18:F3:4F:A1:32
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841CB509EB3B195BB35DA964D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/067104fc-c303-3234-abcf-bfa89c6e097d.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Fri 08 Aug 2025 04:00:00 +0000
asID: 18530
IP address blocks: 136.0.74.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:cb:50:9e:b3:b1:95:bb:35:da:96:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 8 04:00:00 2025 GMT
Subject: CN=ef74e8b8-5bd5-4ba7-9c83-a929231b0632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:f3:09:af:0d:1f:e7:3a:54:47:36:d7:9b:
4c:83:d7:23:43:2f:8a:72:ab:e9:7b:6f:b5:35:f4:
2f:a9:38:a8:cf:f1:28:c5:9d:be:e6:2b:9e:1d:21:
ea:ae:97:d1:5d:47:88:86:cf:41:ec:f9:b7:12:8a:
7b:48:2a:e7:6c:c9:a8:31:b2:f4:7f:fc:bf:6f:52:
2f:15:15:0f:98:16:51:85:35:0d:d4:57:8e:a5:66:
d1:ba:aa:75:cc:d4:51:be:7b:01:fc:f6:ac:de:51:
e3:60:eb:2a:fe:86:ae:8e:c3:0a:5c:ce:23:d0:30:
c3:28:6b:70:b9:e6:c2:26:f1:04:c6:19:41:22:40:
57:b7:34:2e:06:0d:07:e5:1c:0c:2d:01:45:a7:db:
74:2b:e0:51:9d:ff:5f:eb:a6:ba:25:3f:02:42:9f:
4f:97:83:5e:b9:08:45:20:43:4b:da:66:87:24:e4:
c7:16:5f:bd:ca:85:27:76:29:c6:3c:f3:dc:f5:3a:
63:e9:d4:b3:a6:8c:01:1a:d1:dc:a9:78:63:35:db:
a1:5a:93:96:16:65:28:7c:8c:d9:76:73:ba:a2:66:
82:d6:94:72:d5:f2:c5:da:87:11:3a:5b:dd:f4:88:
3e:c5:99:c4:e8:93:9f:38:bc:32:b4:3b:7e:20:fc:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:31:AF:5A:E5:A6:DB:83:4E:51:81:13:18:EB:18:F3:4F:A1:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/067104fc-c303-3234-abcf-bfa89c6e097d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:36:fa:81:10:4b:98:b3:58:04:b3:73:1b:3a:2f:e6:b7:d1:
d7:cc:97:f2:ac:90:82:89:d7:25:18:03:33:40:ad:93:0b:aa:
fd:48:7a:2e:bf:95:49:04:bf:c4:c6:f8:ae:de:c2:37:63:01:
ee:d8:f5:34:e7:2e:e1:62:c3:6a:a6:4f:b5:94:93:df:c9:f4:
0e:e6:27:fb:25:26:10:c7:7c:4c:3d:1d:92:e4:cb:e1:a5:dd:
06:d9:2b:0f:5e:6d:68:95:25:81:bc:f7:84:1d:86:90:f0:d6:
6a:21:9f:58:51:d9:0b:48:ac:b9:a6:03:3d:98:56:38:03:e9:
2b:ad:82:3e:16:34:60:11:af:cf:8c:d8:26:7d:df:80:32:c0:
b7:b1:ff:46:e8:bb:87:28:46:9d:c2:51:eb:85:02:cc:57:f6:
15:35:d5:f1:2d:fb:74:36:a6:3b:d6:83:1e:99:70:45:ea:2e:
b9:50:14:e4:85:a8:ef:c4:99:94:29:b4:31:9f:fd:4e:be:f0:
46:3b:15:e0:d0:d7:9d:53:e2:68:0d:2a:ff:00:59:a3:f5:6c:
e1:e5:37:be:b0:ef:af:b6:73:33:c4:e1:7c:1d:98:3c:a5:46:
e5:73:c9:69:7f:40:e9:79:7a:41:7c:11:08:18:92:ed:03:7c:
64:39:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org