Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d8fc9ae-51e7-34d5-a668-09e3770e62af.roa
File: 1d8fc9ae-51e7-34d5-a668-09e3770e62af.roa (raw, json)
Hash identifier: EmK6vglsri5qRmjEhKwAGMs+FJLpofIkWy0pPnxl+Os=
Subject key identifier: 72:0C:5D:2D:AE:B5:1D:92:09:76:EB:58:3A:55:18:2F:8F:BE:23:06
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858416D0686D184C8361528377A98
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d8fc9ae-51e7-34d5-a668-09e3770e62af.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Sat 05 Jul 2025 04:00:00 +0000
asID: 54252
IP address blocks: 142.111.147.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:6d:06:86:d1:84:c8:36:15:28:37:7a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 5 04:00:00 2025 GMT
Subject: CN=886628a9-a324-44b4-b282-8cfb17d66071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:70:da:32:fe:10:72:c4:e2:8d:79:d0:6c:
fd:39:18:a7:6e:42:39:85:84:2d:c1:58:7e:c8:70:
0c:f1:29:0c:f4:cb:70:3b:d1:bd:57:03:6c:30:91:
54:54:b3:b7:b4:11:ab:d4:3b:01:fd:ae:37:3a:56:
74:02:0b:bc:e7:be:9f:45:2c:78:8d:4a:87:32:16:
50:21:4c:81:9f:7b:1c:be:2d:88:d8:f8:bf:4c:8f:
7e:53:88:a0:9e:8d:95:1a:08:af:da:7b:04:4c:7c:
f7:f9:07:12:a5:c5:62:ff:7c:41:38:1a:18:74:6d:
fd:6a:b9:fb:3e:cb:64:af:3b:31:60:e3:4f:01:48:
09:30:95:fd:2c:b7:9e:f9:e3:5b:a0:21:d3:0b:46:
ff:d3:65:cd:06:1a:de:a8:89:a1:57:d7:5a:88:e7:
a1:bd:22:7a:f3:cf:0a:df:6c:03:23:a1:1a:fc:ba:
99:f5:4f:02:f6:57:d1:37:74:d5:63:c9:ec:39:98:
f9:6d:8d:f8:1c:11:8b:ec:28:29:82:ee:9f:88:70:
59:06:b2:be:c0:30:6d:1b:f3:56:3d:9e:08:44:08:
fc:a2:cb:e5:96:0b:a5:0b:42:42:d6:dc:ef:3c:1e:
ae:a2:e6:0b:7a:88:fd:2e:39:d7:9c:1d:7f:7d:fc:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:5D:2D:AE:B5:1D:92:09:76:EB:58:3A:55:18:2F:8F:BE:23:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d8fc9ae-51e7-34d5-a668-09e3770e62af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:8b:2d:af:61:f1:c8:e6:07:b4:0c:c5:e5:3d:01:bf:87:31:
fe:75:af:e5:16:0a:89:f7:2c:ed:a1:4a:c4:7f:da:61:46:1b:
56:de:76:51:f4:1a:22:78:a5:b8:66:e0:63:6c:87:ae:c6:bf:
30:79:33:ef:c2:df:f0:97:a8:72:23:60:1e:34:63:e2:06:40:
e3:8a:93:ca:be:c2:08:ee:fb:9e:8c:1c:49:f2:38:d0:4c:10:
d7:db:38:fe:70:a7:11:16:26:61:25:be:ff:6a:56:71:5a:a2:
d6:da:f7:4f:6c:73:77:8f:e9:27:8e:8f:a4:ee:e2:6d:0d:a8:
e1:70:a7:ca:89:f3:a3:c7:c5:98:94:48:03:ad:51:ae:9b:45:
06:1f:99:ca:91:0f:a2:90:cb:e7:37:80:37:b3:70:7a:7b:a5:
ce:d4:86:3f:15:c5:2c:68:e9:9c:6a:9b:fe:47:c5:42:4f:45:
9c:8c:97:ac:49:68:97:13:0a:69:78:39:0e:ee:b1:40:b1:db:
39:1d:7c:53:2b:a3:da:bc:43:18:4f:59:24:9f:99:4e:b1:11:
57:1e:52:ae:d4:1c:7b:87:a0:9a:a5:41:3b:26:ad:42:a3:ef:
21:42:b4:43:16:0d:5e:c3:60:46:2b:75:f4:47:68:0d:0a:a1:
f0:6c:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:03 2024 by rpki-client on console-ams.rpki-client.org