Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0946fef9-19b4-3778-93a8-abeafd480def.roa
File: 0946fef9-19b4-3778-93a8-abeafd480def.roa (raw, json)
Hash identifier: yJOcszXxbQgwow5UKE2rLRVPIln4+9u/EQ2vepuk5ek=
Subject key identifier: 10:C0:79:A7:7B:78:A8:06:FB:01:96:23:CE:45:4B:D2:02:DF:91:61
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285840A34782E443D0701C12FC5D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0946fef9-19b4-3778-93a8-abeafd480def.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Thu 24 Apr 2025 04:00:00 +0000
asID: 1239
IP address blocks: 23.27.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a3:47:82:e4:43:d0:70:1c:12:fc:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Apr 24 04:00:00 2025 GMT
Subject: CN=5d67b2ea-a28e-4b64-800f-04bf19716b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:fa:cc:22:7f:65:f2:0d:12:e3:4f:07:99:
4e:d1:e7:00:0c:1e:6a:1d:19:c4:cc:6b:15:52:b9:
d3:b0:8e:31:71:19:d8:e3:1f:e9:fa:83:c7:2f:be:
1b:38:18:c0:ea:6b:71:d8:86:95:1f:97:1f:4b:24:
78:f7:82:c3:5a:dd:82:be:2f:a8:83:86:5b:dc:40:
90:b9:9c:90:bf:f9:38:81:f4:8c:04:7d:d1:1d:75:
da:0e:03:dd:fb:9c:c3:02:d4:eb:2c:0d:0a:7d:42:
a0:92:72:c5:81:e4:a6:5e:56:96:d8:eb:49:b3:44:
f6:27:eb:ca:53:f2:25:2a:26:36:90:c5:c7:e4:d0:
59:a3:b5:3c:77:25:da:bd:e7:2b:7d:dd:15:00:34:
42:24:8d:93:32:df:a0:4c:fd:95:11:f4:03:85:72:
6a:1e:91:7a:64:f3:77:da:c5:cd:38:cf:9a:a3:1d:
73:55:8a:6b:9b:35:de:c6:bf:2e:a3:97:69:6a:a5:
65:59:0c:af:d3:b5:83:e0:55:ef:7c:db:54:ee:94:
d6:87:44:69:a6:91:14:95:db:f0:00:c0:6b:de:37:
48:41:cf:fb:68:ab:0d:41:31:ad:a5:c7:20:fb:7c:
6b:c2:75:ce:8a:d3:16:ca:f5:30:0c:d4:81:22:6f:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C0:79:A7:7B:78:A8:06:FB:01:96:23:CE:45:4B:D2:02:DF:91:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0946fef9-19b4-3778-93a8-abeafd480def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:1f:06:01:a7:93:a9:dd:90:b5:95:36:db:1d:d3:f3:9a:4e:
78:5e:ab:5b:a3:75:92:7e:a4:8c:68:9d:d0:84:dc:93:38:c5:
e1:1a:88:ad:d8:a2:63:59:a7:4f:de:8e:cd:66:35:64:55:21:
04:fb:dd:a6:04:6d:75:ac:21:c8:f1:fe:25:ee:47:2f:fb:9a:
fb:4f:9e:28:a8:df:98:cd:d3:76:b6:3c:c1:67:f0:26:b0:c0:
8c:31:ec:94:b5:26:c8:26:f8:76:6b:bf:52:bd:8a:f3:54:3c:
9a:b2:fc:a5:73:2f:53:ce:fb:32:08:f7:21:28:46:ff:a6:2a:
cf:ec:2a:77:0f:b9:fd:15:51:30:f2:0e:da:01:79:6c:a8:13:
0a:cb:4a:4f:63:73:e0:d7:cc:82:a5:24:0d:45:3f:de:42:d5:
f5:51:6d:e8:bb:53:51:5d:81:ad:9e:5e:43:29:79:24:5a:1d:
b0:d2:a1:28:41:60:dd:79:7f:86:4d:bb:4a:17:05:f9:e6:e4:
0b:0c:e6:5c:52:7c:b5:dc:14:41:ab:16:0b:02:09:e2:cc:7c:
15:57:f5:fb:f5:99:80:4e:a8:11:7b:82:18:46:65:5f:da:6c:
41:03:06:87:39:c2:b6:23:e0:71:4f:55:ed:8f:a5:2a:e9:3a:
78:68:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:02 2024 by rpki-client on console-ams.rpki-client.org