Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/335d251e-0444-3df2-8966-1c201715c875.roa
File: 335d251e-0444-3df2-8966-1c201715c875.roa (raw, json)
Hash identifier: Lr21GLD9anI1Z2PQFoYZ53UjYWzcPp6XAJbpmqxXOCA=
Subject key identifier: DA:32:93:15:9C:0B:E9:46:93:D0:53:26:A6:19:7A:18:55:BB:33:09
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841CB500D65CF6724F6F7468B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/335d251e-0444-3df2-8966-1c201715c875.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Fri 08 Aug 2025 04:00:00 +0000
asID: 18530
IP address blocks: 23.27.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:cb:50:0d:65:cf:67:24:f6:f7:46:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 8 04:00:00 2025 GMT
Subject: CN=9831157a-c6fc-44fd-8c68-51d1ecf64dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:5d:d1:8c:55:cc:7c:6b:e4:5b:92:3c:76:
0e:b7:06:70:c1:b7:3e:7c:ec:e4:cd:9e:9c:4e:08:
6f:e5:49:5b:fc:bb:4f:8f:4e:72:b8:74:78:0b:82:
35:f6:1e:ab:75:71:0e:a8:a8:5c:65:ae:2e:4d:76:
45:f3:66:b2:d9:81:2c:ea:0d:f4:21:bb:3e:ac:e2:
38:05:2c:ee:34:9e:e2:4b:21:22:bf:60:94:13:4e:
1c:7a:c6:37:5c:90:50:31:b5:13:36:eb:90:6f:46:
d0:37:c3:97:2a:4e:7f:29:1a:d3:4e:3f:42:62:cb:
18:0c:03:f2:ae:41:ca:d7:4d:8c:e2:60:fd:f1:9f:
29:45:b9:60:bd:df:6a:86:36:54:de:0d:75:51:a4:
69:81:14:91:5b:21:5a:c7:a0:9d:77:8f:02:96:2d:
e0:a1:38:fb:0a:e6:95:b9:84:c9:bb:52:4d:e7:34:
dd:a6:ea:a5:31:d3:8a:a3:72:75:b2:08:0f:36:fd:
d9:fa:31:6b:16:06:65:73:be:d0:92:96:f6:9b:1a:
07:5e:41:d4:9d:cf:3b:8e:42:74:ad:21:4f:31:d8:
2e:d4:42:f6:14:a5:36:d5:f2:80:f5:16:11:fd:1b:
fd:a6:2f:2c:7a:5a:30:3a:2b:b8:89:f4:12:6e:22:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:93:15:9C:0B:E9:46:93:D0:53:26:A6:19:7A:18:55:BB:33:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/335d251e-0444-3df2-8966-1c201715c875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:01:57:7b:a5:36:f4:41:c1:15:22:03:94:6d:18:e2:da:c3:
7a:b4:70:71:04:c3:ed:4e:12:bb:8c:70:39:e4:32:bf:e3:73:
7c:06:4e:7f:4f:80:f0:8d:32:55:6c:e3:5e:c2:7e:90:0a:af:
5c:a5:1e:ac:7b:47:97:6f:0d:78:f1:c1:75:42:01:37:09:83:
b7:a8:71:d8:c1:6d:70:c9:cf:2e:d4:f0:6b:de:5c:7e:76:81:
89:16:3c:23:06:43:a1:1a:c3:44:f8:5c:d9:0e:2b:de:34:0a:
22:03:c6:bd:fa:58:ec:55:5b:a5:94:7b:44:51:4b:e2:92:94:
b8:99:49:d0:02:e8:3c:4a:34:f3:42:42:07:2d:56:1f:89:a7:
b7:ea:3b:09:5c:ad:9a:b4:8f:fe:da:87:bd:e7:1b:4b:2a:ac:
24:c8:63:7d:2c:01:0d:6d:dc:48:da:5d:26:56:b3:ff:f5:5c:
d9:75:66:d6:3f:e5:80:78:52:16:ed:d8:5f:73:35:b3:71:0f:
62:23:3f:54:ef:41:15:63:2c:4c:06:ad:24:17:3e:82:a7:23:
5f:c5:52:4e:5e:d8:40:f3:da:1c:3c:e8:81:f3:64:51:1c:f9:
51:ce:64:30:83:4c:a3:4f:3a:84:94:67:8e:05:90:88:5d:d0:
40:b7:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:20 2024 by rpki-client on console-fra.rpki-client.org