Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25080b31-ce64-3bde-97b0-a7a13cfa10ab.roa
File: 25080b31-ce64-3bde-97b0-a7a13cfa10ab.roa (raw, json)
Hash identifier: +Z7vUS/RNn2pSuDKzfwOdaVJRvnEd+UBO0sPg3u0BRI=
Subject key identifier: 01:7D:2D:CD:8D:0D:C5:49:AF:02:E3:6C:59:C0:7C:F9:1E:F3:BB:B8
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583D1A975CC12297D8968AC0ED28
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25080b31-ce64-3bde-97b0-a7a13cfa10ab.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Tue 04 Jun 2024 04:00:00 +0000
asID: 136787
IP address blocks: 166.88.163.0/24 maxlen: 24
166.88.172.0/24 maxlen: 24
23.27.44.0/24 maxlen: 24
45.38.128.0/24 maxlen: 24
50.117.77.0/24 maxlen: 24
50.118.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1a:97:5c:c1:22:97:d8:96:8a:c0:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Jun 4 04:00:00 2024 GMT
Subject: CN=cbb5f6fb-fed4-4c07-b1f3-d9823d062c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:1f:b5:65:e4:55:57:96:9c:ce:6b:ae:53:
77:a0:6c:31:8a:23:f6:14:b8:94:89:6c:9f:04:f3:
9e:b3:5c:9c:1d:22:32:40:89:87:2c:68:a6:9e:d4:
af:cb:d2:55:ae:e8:c9:3c:ee:9f:94:a3:85:63:e6:
05:dd:98:48:5b:4e:3f:90:92:5b:2f:18:12:82:4a:
b4:79:9c:68:20:9e:86:7d:24:38:64:20:99:68:13:
fe:4c:ea:35:ef:8a:30:80:f0:65:88:cc:2f:75:d1:
45:5a:f7:42:82:5b:1e:58:a3:b6:18:23:c6:18:45:
b9:2d:09:c8:33:18:f0:33:46:24:eb:52:40:70:7e:
5b:f6:7b:e5:99:eb:7a:ed:e0:2d:11:7c:6a:94:3e:
48:7e:5a:58:f4:4a:a0:32:33:de:b7:9f:81:1b:2b:
8f:2a:ae:81:29:a0:08:9e:5f:fd:a7:4b:ae:1a:eb:
b9:24:c3:96:aa:c9:57:a6:6f:54:cc:c7:31:e7:54:
a3:16:f5:20:b2:e0:8a:7d:c4:8f:a4:2b:7a:4b:ab:
19:0a:fe:b0:77:36:ae:f0:0f:90:b0:d2:68:16:e5:
a8:f8:e4:c1:00:52:17:5a:e5:e0:65:4e:d5:ae:ce:
35:a6:bb:c1:d9:a2:b3:8e:a9:a2:0c:3b:1c:d8:8f:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:2D:CD:8D:0D:C5:49:AF:02:E3:6C:59:C0:7C:F9:1E:F3:BB:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25080b31-ce64-3bde-97b0-a7a13cfa10ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.44.0/24
45.38.128.0/24
50.117.77.0/24
50.118.188.0/24
166.88.163.0/24
166.88.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c4:fb:6f:16:42:10:64:3b:e6:70:9e:d9:f9:b1:5f:e5:e6:
ae:8f:7f:ac:63:d8:6b:b7:88:7d:11:7f:be:40:ed:0d:0c:96:
ac:7a:47:1a:50:08:f2:fa:21:a0:58:8f:0b:9f:5b:48:b8:c4:
20:fc:cd:8e:6e:6d:ad:4e:ad:0c:5f:8c:f9:21:6b:06:5f:5e:
43:6f:34:1e:89:f9:80:11:29:a7:1d:1d:30:66:6e:f0:cf:d9:
6b:ac:46:6f:15:96:10:4b:58:35:73:87:00:d0:55:1f:d4:8f:
b7:44:56:21:a3:c5:d6:3a:37:9c:64:19:c6:65:19:e9:c8:57:
0d:dc:1e:d9:ae:fb:ff:c0:f1:82:af:1e:01:ed:9d:50:04:cd:
8d:2a:ba:9b:fa:73:72:e8:d9:33:82:4c:8a:c3:49:90:4f:94:
68:b0:99:da:cf:7c:fb:6c:41:31:64:23:f8:e6:71:8d:4f:d8:
e2:45:cb:e9:e4:1e:90:a8:32:36:81:89:66:83:ef:c5:c8:fc:
81:55:80:38:22:e7:b3:8c:a2:15:4a:71:9f:90:24:20:b3:d8:
8a:d2:f7:35:93:37:8f:61:d3:95:e9:8c:51:c8:8b:5e:c3:05:
94:91:5e:37:be:0e:41:5a:49:1f:77:13:9d:b6:4b:31:88:4a:
d9:02:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:04 2024 by rpki-client on console-ams.rpki-client.org