Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14284ae9-b251-3b43-96d5-a321279b6605.roa
File: 14284ae9-b251-3b43-96d5-a321279b6605.roa (raw, json)
Hash identifier: mlKbg4wLQVt81QX2J+0kH7gnL5s5E9XAV/m5xiM5Xm4=
Subject key identifier: 49:14:E4:44:84:30:E5:C4:EA:B4:C8:4C:EA:70:39:29:48:BC:66:CC
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583CE5F525900CC8A3727F2D6B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14284ae9-b251-3b43-96d5-a321279b6605.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Thu 16 May 2024 04:00:00 +0000
asID: 11404
IP address blocks: 23.230.163.0/24 maxlen: 24
23.27.254.0/24 maxlen: 24
23.230.73.0/24 maxlen: 24
23.27.118.0/24 maxlen: 24
23.27.9.0/24 maxlen: 24
23.27.31.0/24 maxlen: 24
23.27.45.0/24 maxlen: 24
23.27.232.0/24 maxlen: 24
23.230.43.0/24 maxlen: 24
23.230.76.0/24 maxlen: 24
23.230.166.0/24 maxlen: 24
23.230.228.0/24 maxlen: 24
45.38.43.0/24 maxlen: 24
45.38.208.0/24 maxlen: 24
45.38.238.0/24 maxlen: 24
45.39.208.0/24 maxlen: 24
45.39.232.0/24 maxlen: 24
50.117.49.0/24 maxlen: 24
50.118.175.0/24 maxlen: 24
50.118.217.0/24 maxlen: 24
104.164.161.0/24 maxlen: 24
104.164.178.0/24 maxlen: 24
104.164.182.0/24 maxlen: 24
104.164.216.0/24 maxlen: 24
104.164.220.0/24 maxlen: 24
104.164.221.0/24 maxlen: 24
104.165.17.0/24 maxlen: 24
104.165.82.0/24 maxlen: 24
104.165.94.0/24 maxlen: 24
104.165.116.0/24 maxlen: 24
104.165.207.0/24 maxlen: 24
104.165.234.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:f5:25:90:0c:c8:a3:72:7f:2d:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : May 16 04:00:00 2024 GMT
Subject: CN=96a54c37-9f42-4b06-884c-d61e2d797565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:b9:b1:f3:e1:64:ab:c3:5b:2d:ed:0b:96:
91:ee:9a:25:08:fa:26:b6:a6:a7:ee:6b:97:be:41:
c7:0f:04:d5:d3:88:d8:0d:b0:48:49:d2:fc:c2:43:
bd:4b:88:58:1d:63:76:70:c8:a4:0c:ba:1c:a3:be:
33:7f:f0:6d:a0:72:74:b7:e2:63:85:10:a7:0c:c3:
9a:ce:99:4f:61:04:06:0d:e3:14:9b:c8:c9:05:e0:
8e:1d:ac:f7:80:bb:70:3f:a4:28:ab:73:9a:ad:a0:
92:86:ab:b5:7b:b8:e1:56:62:b2:97:14:3b:8e:69:
09:61:8d:07:01:c9:c0:36:82:53:0c:b8:d8:84:30:
87:c8:da:00:fd:b1:11:91:e8:e3:9e:d0:e5:1f:ef:
5c:4d:9a:98:43:5a:0c:76:d3:f6:7e:99:d3:a8:a1:
ff:fb:71:1a:14:0d:27:50:4f:6d:b3:88:06:d3:40:
87:ef:56:aa:38:3a:16:41:34:0c:4e:03:4c:09:a6:
48:4c:97:67:b6:9c:d1:2d:85:8a:b6:01:99:cd:4e:
f3:92:b1:d6:5e:e6:5a:5f:a0:e1:8a:1b:e6:7b:6a:
9a:89:7c:82:4c:f9:f7:e2:15:47:07:5b:21:d5:8a:
6a:54:1f:64:d9:51:57:c4:a9:68:15:17:10:7b:54:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:E4:44:84:30:E5:C4:EA:B4:C8:4C:EA:70:39:29:48:BC:66:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14284ae9-b251-3b43-96d5-a321279b6605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.9.0/24
23.27.31.0/24
23.27.45.0/24
23.27.118.0/24
23.27.232.0/24
23.27.254.0/24
23.230.43.0/24
23.230.73.0/24
23.230.76.0/24
23.230.163.0/24
23.230.166.0/24
23.230.228.0/24
45.38.43.0/24
45.38.208.0/24
45.38.238.0/24
45.39.208.0/24
45.39.232.0/24
50.117.49.0/24
50.118.175.0/24
50.118.217.0/24
104.164.161.0/24
104.164.178.0/24
104.164.182.0/24
104.164.216.0/24
104.164.220.0/23
104.165.17.0/24
104.165.82.0/24
104.165.94.0/24
104.165.116.0/24
104.165.207.0/24
104.165.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d4:df:56:f5:32:07:43:86:1a:22:55:bf:bc:36:1e:04:63:
a5:67:ff:32:ec:d5:cc:ac:db:7d:78:82:28:3f:ab:d2:a8:f9:
3f:c1:40:8e:1e:1c:f3:c9:10:a8:76:63:d3:d9:10:62:1a:b5:
c0:f2:74:63:d2:0d:f2:4f:79:12:e0:59:0f:22:5c:43:54:20:
cd:2e:5c:50:c2:e7:26:26:8f:82:b2:1b:e3:5e:f9:0a:b6:b1:
35:a2:e3:e0:1e:51:ea:80:03:33:d5:c3:03:50:3b:a7:f6:60:
12:c7:3d:d7:73:56:ae:5b:23:74:14:60:71:dc:36:48:46:4c:
af:1b:c4:6e:ec:17:0c:a0:b3:68:38:c6:6e:25:29:6a:da:e8:
be:1d:92:65:48:c6:61:f8:5c:6b:2b:45:c3:05:cf:fe:45:d1:
70:c3:ac:e3:a9:f3:b4:e6:85:71:57:ee:6c:d1:69:dc:83:03:
0b:e5:ac:62:1b:9d:ff:a2:b9:79:71:44:2e:5f:fc:21:35:d1:
fb:2b:ae:ef:38:f1:31:42:7a:3e:8a:c2:6b:8e:fc:dc:0c:21:
5f:05:29:88:fa:c3:0c:16:f9:87:fe:69:51:09:e8:79:9e:f3:
3b:30:16:5c:39:cb:61:e0:11:22:4c:a2:4a:b8:93:9a:a5:e3:
39:7d:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:03 2024 by rpki-client on console-ams.rpki-client.org