Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/07b2b880-6efe-3d47-a2ac-79b1e7ab303c.roa
File: 07b2b880-6efe-3d47-a2ac-79b1e7ab303c.roa (raw, json)
Hash identifier: oWUkpaEFIQynzW9Dyz73VtirP51vX2xNRBI9k69xQ/s=
Subject key identifier: EE:04:E4:A6:01:D3:EB:7C:B2:A0:71:BD:0A:4A:D4:89:EC:9B:B6:B9
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844BF5A5254A8A8C5994F663000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/07b2b880-6efe-3d47-a2ac-79b1e7ab303c.roa
Signing time: Thu 01 Feb 2024 14:00:30 +0000
ROA not before: Thu 01 Feb 2024 14:00:30 +0000
ROA not after: Wed 01 May 2024 13:00:30 +0000
asID: 397630
IP address blocks: 23.27.240.0/24 maxlen: 24
166.88.244.0/24 maxlen: 24
45.39.72.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:bf:5a:52:54:a8:a8:c5:99:4f:66:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 1 14:00:30 2024 GMT
Not After : May 1 13:00:30 2024 GMT
Subject: CN=eca42db1-dd04-4dca-9823-81e7737c15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:3f:64:75:1f:ac:3e:68:8b:93:a0:88:fc:
6c:7c:04:c0:1b:72:20:00:50:c8:ec:75:81:00:e1:
93:e0:5e:97:bb:ca:61:73:e4:6c:69:74:a3:83:56:
00:84:a5:3c:be:04:45:f6:27:6a:99:b7:9e:53:6c:
fb:9e:15:ce:8e:04:06:9a:62:f1:e7:9a:5f:c6:aa:
dd:76:ae:94:00:bc:86:8d:04:e4:2e:82:c8:82:5d:
9d:7a:f9:b5:a2:d1:cd:9b:6a:45:70:cd:63:11:ab:
b6:a0:d5:e5:73:cf:da:89:e3:27:1f:94:92:ef:36:
88:3b:cf:24:ac:a1:c4:75:ea:59:ff:12:22:38:65:
db:86:78:ef:f0:19:b9:15:89:a9:a9:a4:2f:e9:47:
85:dc:f2:e8:b1:ca:9b:26:67:a3:05:ff:6f:0e:b3:
8c:64:c8:8a:50:14:8d:84:32:e9:57:86:0a:47:97:
31:e2:74:cf:06:b0:ac:e9:89:dc:72:25:34:a6:15:
af:e0:4e:e5:ef:9a:ab:c3:07:db:5b:2f:81:10:23:
1e:4b:6b:f6:a2:c6:6d:f1:33:31:42:b8:72:87:4b:
9f:28:f0:00:48:39:77:2e:13:77:e1:e2:1e:f0:89:
b3:5d:ad:3c:91:8c:ab:be:5f:a2:a9:38:ba:bb:cd:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:04:E4:A6:01:D3:EB:7C:B2:A0:71:BD:0A:4A:D4:89:EC:9B:B6:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/07b2b880-6efe-3d47-a2ac-79b1e7ab303c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.240.0/24
45.39.72.0/24
166.88.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:24:49:90:0d:e0:5f:ea:2b:80:ce:8b:95:4b:5f:c4:0e:0d:
8f:33:7d:d6:2d:6b:d8:15:1e:99:01:c1:0c:04:e5:c6:32:87:
81:fc:cc:dc:37:ff:d6:ce:d7:d8:4d:0b:56:10:bf:66:e0:6a:
5c:d1:90:69:f1:4a:06:19:8b:76:5e:e6:6b:ea:7a:c0:1a:ac:
df:69:af:26:e3:b0:5d:fc:81:95:d1:95:55:84:13:14:de:18:
d2:01:32:7a:9b:48:5b:78:34:31:e9:99:28:b2:e6:c8:7f:f3:
28:56:f0:7e:d0:4b:cb:ef:d1:87:4c:81:8b:8a:19:83:89:f1:
10:27:c2:8e:7b:6d:29:3b:f0:c1:d4:73:16:1a:0b:32:6c:3a:
68:01:4f:ce:4a:2b:15:b1:0a:d7:65:ab:4a:ce:b2:81:fa:f2:
de:a3:fa:94:1e:56:fd:cb:40:91:a3:19:25:18:5f:04:e0:a9:
e7:48:ea:0b:e7:81:f1:20:d2:5d:bf:d1:ab:a1:05:a8:8b:1e:
2c:ab:32:95:a1:cd:f5:95:ac:63:36:fd:4a:31:ad:b5:73:9f:
d6:4e:27:d5:f3:b1:54:bd:49:19:32:07:1f:ca:df:87:1c:c6:
63:34:cd:d8:dc:fc:26:59:95:60:21:83:1f:cb:7e:71:41:38:
2c:2d:ce:0f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWES/WlJUqKjFmU9mMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDIwMTE0MDAzMFoXDTI0MDUwMTEzMDAzMFowLzEtMCsGA1UEAxMk
ZWNhNDJkYjEtZGQwNC00ZGNhLTk4MjMtODFlNzczN2MxNWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJY/ZHUfrD5oi5OgiPxsfATAG3IgAFDI7HWB
AOGT4F6Xu8phc+RsaXSjg1YAhKU8vgRF9idqmbeeU2z7nhXOjgQGmmLx55pfxqrd
dq6UALyGjQTkLoLIgl2devm1otHNm2pFcM1jEau2oNXlc8/aieMnH5SS7zaIO88k
rKHEdepZ/xIiOGXbhnjv8Bm5FYmpqaQv6UeF3PLoscqbJmejBf9vDrOMZMiKUBSN
hDLpV4YKR5cx4nTPBrCs6YncciU0phWv4E7l75qrwwfbWy+BECMeS2v2osZt8TMx
Qrhyh0ufKPAASDl3LhN34eIe8ImzXa08kYyrvl+iqTi6u82F2QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFO4E5KYB0+t8sqBxvQpK1Insm7a5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDdiMmI4ODAtNmVmZS0z
ZDQ3LWEyYWMtNzliMWU3YWIzMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAFxvwAwQA
LSdIAwQAplj0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEIkSZAN4F/qK4DOi5VLX8QODY8zfdYta9gVHpkB
wQwE5cYyh4H8zNw3/9bO19hNC1YQv2bgalzRkGnxSgYZi3Ze5mvqesAarN9prybj
sF38gZXRlVWEExTeGNIBMnqbSFt4NDHpmSiy5sh/8yhW8H7QS8vv0YdMgYuKGYOJ
8RAnwo57bSk78MHUcxYaCzJsOmgBT85KKxWxCtdlq0rOsoH68t6j+pQeVv3LQJGj
GSUYXwTgqedI6gvngfEg0l2/0auhBaiLHiyrMpWhzfWVrGM2/UoxrbVzn9ZOJ9Xz
sVS9SRkyBx/K34ccxmM0zdjc/CZZlWAhgx/LfnFBOCwtzg8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:17 2024 by rpki-client on console-fra.rpki-client.org