Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/265ae29e-bc3f-39fe-ad3b-df0db014d0ca.roa
File: 265ae29e-bc3f-39fe-ad3b-df0db014d0ca.roa (raw, json)
Hash identifier: 0u9t9o1tYAkaFVRhF1D3cQfba5PELx97tBLi0uVOAZ8=
Subject key identifier: EB:B4:B4:0B:C6:81:DE:B5:47:A9:60:4C:64:3B:95:4C:0B:3D:0D:5B
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844D7151ACB43EFEDAAEA0360A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/265ae29e-bc3f-39fe-ad3b-df0db014d0ca.roa
Signing time: Sat 10 Feb 2024 02:00:26 +0000
ROA not before: Sat 10 Feb 2024 02:00:26 +0000
ROA not after: Fri 10 May 2024 01:00:26 +0000
asID: 18978
IP address blocks: 136.0.77.0/24 maxlen: 24
45.38.24.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d7:15:1a:cb:43:ef:ed:aa:ea:03:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 02:00:26 2024 GMT
Not After : May 10 01:00:26 2024 GMT
Subject: CN=59b99860-39e5-406e-bf75-d0e9a8b2a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:49:40:f6:45:26:54:87:81:24:14:8d:db:
c1:f0:ec:74:56:30:b4:b1:a5:2c:dc:ea:34:30:2b:
13:27:bf:fd:b2:3a:3a:0a:0e:3e:42:ec:24:c6:82:
4e:ea:1f:6b:09:7e:99:67:76:08:50:8b:26:08:90:
e9:a7:4e:e9:2c:5b:cb:5d:70:30:c0:67:99:f3:64:
d5:80:b2:9a:64:54:6f:03:06:a5:9e:de:ec:04:14:
e3:3a:eb:f6:d2:cb:19:35:84:00:af:00:31:a5:b6:
30:cc:d8:5b:87:22:c3:b0:86:3f:29:94:5f:48:a0:
d5:fd:64:3f:15:03:59:88:e7:0b:28:06:2b:44:d9:
0c:e9:c5:98:2d:be:6a:04:6d:55:b9:47:cc:a0:92:
8d:36:b8:cc:e0:58:a9:9d:f8:12:8a:04:db:dd:5c:
c1:13:5f:35:65:a3:94:ee:b1:10:01:7c:f4:81:9b:
20:82:ef:21:6f:48:41:c9:af:66:ae:60:52:df:f2:
6a:7a:c3:1b:bd:02:e5:da:8b:df:18:5d:07:c4:5a:
d0:cf:72:c9:13:9f:5e:7b:cf:96:df:83:a0:d5:ba:
4a:48:a5:fb:99:04:66:e9:5a:c4:61:74:3a:78:e2:
69:2f:54:c1:d1:43:09:26:45:7b:8c:6c:f0:90:27:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:B4:0B:C6:81:DE:B5:47:A9:60:4C:64:3B:95:4C:0B:3D:0D:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/265ae29e-bc3f-39fe-ad3b-df0db014d0ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.24.0/24
136.0.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:82:1d:9e:48:bc:21:6d:14:a5:c0:e9:ba:0c:f9:d2:3d:f0:
61:dd:83:1a:b0:3b:57:46:27:e8:f9:32:d4:09:7c:1a:8f:cd:
92:2c:fb:6b:c7:1c:3d:33:24:40:88:41:de:a1:7b:97:d5:a9:
f8:13:11:48:cb:b5:15:60:6c:1d:de:64:d9:f1:c3:b4:38:3d:
7a:32:09:84:fa:b2:26:34:c4:fe:87:f5:ad:9b:23:dc:7a:0e:
3a:f1:bf:ee:c7:d8:74:04:40:fe:6e:a6:a2:a9:61:52:1a:2e:
09:cc:94:21:0d:1b:df:bd:1a:56:ca:6a:24:b5:94:ec:74:86:
dd:a5:a9:2d:9c:67:8e:49:b6:a2:1e:63:12:71:ff:5e:e7:70:
8e:f1:eb:44:ab:92:b3:ea:ac:f7:f6:4c:51:52:da:29:28:28:
ff:c9:b8:8c:74:dc:3d:b1:63:07:1d:f4:23:7c:68:0a:69:b4:
54:8a:27:74:87:4b:c5:30:6a:fe:94:27:b7:cf:bf:f3:40:f4:
3c:f4:42:26:29:a6:13:09:f3:be:af:1c:e3:53:47:07:4f:3b:
4d:d0:9a:2c:b1:a0:98:0c:4b:d0:e2:39:be:b3:f5:dd:ec:18:
1f:ed:00:02:d7:8d:9d:be:c9:0e:2f:96:31:23:f4:3c:12:b9:
eb:0f:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org