Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37193448-7567-320a-99c1-39f50553b1da.roa
File: 37193448-7567-320a-99c1-39f50553b1da.roa (raw, json)
Hash identifier: KJ9Pk4iRQhxZKQ+OHdDaYnxaDNp0Rex9+mXJRNlkXbM=
Subject key identifier: FB:50:AD:30:EB:D5:80:DE:72:E1:72:F8:73:A0:88:1F:4A:BA:F5:D5
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583C549CFEA148398A2768D3BC40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37193448-7567-320a-99c1-39f50553b1da.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Mon 25 Mar 2024 04:00:00 +0000
asID: 398252
IP address blocks: 107.187.109.0/24 maxlen: 24
136.0.237.0/24 maxlen: 24
142.111.230.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:54:9c:fe:a1:48:39:8a:27:68:d3:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Mar 25 04:00:00 2024 GMT
Subject: CN=0f8f82f3-dd62-436a-bcbf-7f6d7f4d1a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:f7:8c:dc:e1:a7:aa:ed:88:af:fd:88:1a:
fb:52:b0:0a:31:84:0a:7c:d8:e7:3f:fb:9e:5a:30:
3c:56:6c:9b:6b:e1:ac:9a:6a:bc:53:6a:13:0e:b6:
58:b8:9d:93:86:46:78:19:ee:2b:a7:8a:cb:53:2c:
82:04:a3:f7:b8:4d:51:47:b3:68:e5:33:ae:7d:82:
0b:9d:a8:46:33:a1:60:87:d5:99:53:6a:7e:34:9e:
b8:a0:e2:a3:b5:57:5a:74:81:4a:1a:ec:aa:a6:ab:
62:cc:88:62:c0:42:4e:ff:a8:79:64:81:71:e2:90:
d2:ed:ed:16:5c:0f:f1:a2:a5:1d:df:7d:3f:f5:dc:
57:b1:49:a4:7e:b6:11:b3:42:5c:fd:93:aa:95:ef:
4a:59:fa:e8:04:67:65:68:00:1f:3e:62:25:69:f6:
03:db:6c:e7:e5:a5:a8:fc:38:1a:65:78:9f:f6:f4:
c1:bd:c0:7d:f4:a3:f1:45:e3:a2:08:10:7d:56:f8:
2e:f6:5f:81:48:6e:9b:01:9f:87:f6:2c:b7:a7:a7:
b2:2d:a6:bc:a4:76:b2:9b:5e:78:6f:e6:92:e7:ab:
5a:54:f1:de:62:4e:5e:b4:67:b0:8e:90:66:77:5c:
27:78:d6:36:15:2e:03:05:10:16:aa:fc:68:ff:0d:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:AD:30:EB:D5:80:DE:72:E1:72:F8:73:A0:88:1F:4A:BA:F5:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37193448-7567-320a-99c1-39f50553b1da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
107.187.109.0/24
136.0.237.0/24
142.111.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9a:08:15:c0:3c:58:77:0b:97:c7:32:88:00:03:6c:ea:60:
a3:e5:45:c8:eb:42:b2:d0:08:45:b3:e4:df:26:89:31:ac:6f:
f6:18:e2:01:7b:0e:55:8d:13:1d:25:9c:f2:ee:21:84:10:86:
cc:be:ed:3f:a5:8b:2e:03:d1:b6:c0:40:83:b1:63:50:24:aa:
48:70:a8:5e:6e:fa:6b:de:3e:db:ae:78:ba:87:e1:16:49:45:
b0:dc:36:7c:73:cd:d4:ae:08:51:85:9e:af:0a:b7:41:75:51:
b7:54:5b:41:e2:e0:13:e7:1f:5a:bb:ab:59:1c:68:a7:23:69:
d4:3c:6e:14:3e:98:17:72:17:92:37:0c:49:84:1a:b8:5b:e0:
bb:16:21:61:c1:f4:04:02:89:8d:ba:3b:ee:07:3b:00:67:f8:
32:75:55:d1:d0:9d:b0:d0:49:ec:64:9d:74:0e:c8:ed:de:6c:
35:1a:fe:4e:5a:5f:fc:3b:6f:52:6c:a1:4d:43:27:78:32:64:
f4:5b:0d:82:d9:1d:98:fc:2b:f7:64:bc:03:ef:34:66:ec:69:
66:8a:27:61:35:98:9e:53:57:ab:0e:1e:a8:a6:7e:8e:95:90:
60:24:99:92:d7:84:05:ae:6f:1c:d2:b5:14:31:d9:3a:08:f0:
4e:a5:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:05 2024 by rpki-client on console-ams.rpki-client.org