Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d865200-1919-332d-a5af-d03837c773cf.roa
File: 1d865200-1919-332d-a5af-d03837c773cf.roa (raw, json)
Hash identifier: CNflmMIcqqyddx7ebdW2Dvkqrkmb1BDog2noZIDqIxs=
Subject key identifier: 93:0D:92:F1:91:18:73:D5:B9:5A:05:EF:CB:DF:28:BF:C7:BB:34:05
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285845136C8EA91EE57AB6C2881E40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d865200-1919-332d-a5af-d03837c773cf.roa
Signing time: Sat 02 Mar 2024 16:45:10 +0000
ROA not before: Sat 02 Mar 2024 16:45:10 +0000
ROA not after: Fri 31 May 2024 15:45:10 +0000
asID: 1239
IP address blocks: 23.27.184.0/24 maxlen: 24
23.230.11.0/24 maxlen: 24
45.38.44.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:13:6c:8e:a9:1e:e5:7a:b6:c2:88:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 2 16:45:10 2024 GMT
Not After : May 31 15:45:10 2024 GMT
Subject: CN=9ed4f281-6b77-41fe-bd8a-870e7fedd045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:b7:62:2d:26:1d:2b:f7:d1:2c:a7:45:a4:
be:cb:40:50:18:7b:ac:b6:7d:34:79:8c:71:d2:b6:
fc:07:97:9f:d4:a4:fd:b2:9e:3c:ba:55:c6:fb:46:
a3:62:0d:5b:cb:1a:40:98:e4:3f:05:e3:26:b0:75:
96:8c:f7:72:47:9e:35:91:10:2c:52:23:7a:7d:9f:
9d:e9:3b:9c:05:dc:34:35:81:1a:6f:ec:fe:59:93:
5e:9c:88:1c:27:c7:d6:4f:53:69:fc:d2:5f:e8:dd:
02:fc:b8:fc:57:68:28:fe:f4:66:eb:fc:fd:47:ac:
9a:e8:63:d4:f9:48:76:bf:32:fa:ee:70:2a:42:6e:
58:68:dd:74:ab:66:7a:ab:e3:44:99:22:19:dc:d0:
f2:d4:ad:4f:a5:3a:2a:ca:e5:10:f8:b8:77:03:11:
58:14:c1:a8:bf:f3:29:b8:6d:d8:97:7c:d7:d8:19:
fc:cd:a5:04:51:a8:08:8c:dc:d3:15:18:e4:33:0a:
4f:b9:67:7b:f5:f5:42:2f:23:9a:7d:80:80:7f:f5:
fd:72:a9:14:90:8f:b9:20:4f:bd:5f:ba:2c:97:f2:
08:39:76:32:60:bd:8b:cb:19:59:b4:16:06:f2:11:
72:12:c2:2f:e9:e7:cd:8d:ad:18:f9:1b:38:21:ae:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:92:F1:91:18:73:D5:B9:5A:05:EF:CB:DF:28:BF:C7:BB:34:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d865200-1919-332d-a5af-d03837c773cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.184.0/24
23.230.11.0/24
45.38.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:fd:0b:7b:20:68:64:5e:0e:0b:a2:82:dd:6d:df:43:5d:a0:
9d:b1:10:08:db:27:ff:f5:74:59:01:1a:a5:ee:7f:08:6a:a1:
56:69:91:e3:83:c7:0a:f9:80:ab:dd:ab:2a:51:ff:31:5d:1e:
10:82:78:06:4b:9c:64:c2:09:bb:f9:bd:7a:06:ac:c3:3c:6e:
f4:15:9e:2d:01:15:ac:00:32:94:bd:36:b7:e0:6c:c5:df:70:
9b:40:b2:9e:03:48:7c:80:03:82:9c:75:a6:69:4c:b1:5c:59:
cd:9f:32:98:4d:3e:da:09:b6:0e:ba:4d:5d:80:30:9e:1f:5f:
b0:d9:8c:fd:31:0c:c6:ad:ed:67:3c:a6:78:c6:51:cc:8a:cd:
ee:f2:31:b7:06:f7:59:00:8f:b4:5d:47:26:9e:f9:50:dd:75:
1d:7d:58:9b:c0:b2:94:1a:ab:d6:72:a2:2e:b1:c9:68:9e:85:
0a:c9:9c:4f:04:41:04:a3:5f:4f:32:9b:5f:a9:77:a3:17:c9:
81:45:eb:b2:fc:d8:c4:be:71:cd:e2:2d:e8:ba:1f:29:59:0e:
0d:64:b2:7f:28:84:ba:b4:0e:14:b2:a9:76:00:08:c7:50:48:
ed:6f:c9:58:7d:b1:e8:2e:b7:84:6e:81:53:4f:22:8e:c7:0b:
6e:d8:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org