Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b1f4a6f-f707-33bb-9e9c-12824f0bae45.roa
File: 3b1f4a6f-f707-33bb-9e9c-12824f0bae45.roa (raw, json)
Hash identifier: u2sUQ+YMcSewUbZ1+D1/0QMUsY0ATxWTfuVhK7z6Hvg=
Subject key identifier: 0B:82:7C:93:31:4C:43:4E:6C:5F:20:9C:07:76:C6:15:A4:0E:17:C9
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844F5CA9EAFA18973695090B680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b1f4a6f-f707-33bb-9e9c-12824f0bae45.roa
Signing time: Wed 21 Feb 2024 02:00:25 +0000
ROA not before: Wed 21 Feb 2024 02:00:25 +0000
ROA not after: Tue 21 May 2024 01:00:25 +0000
asID: 3257
IP address blocks: 142.111.165.0/24 maxlen: 24
142.111.166.0/24 maxlen: 24
142.111.163.0/24 maxlen: 24
142.111.164.0/24 maxlen: 24
142.111.132.0/24 maxlen: 24
142.111.138.0/24 maxlen: 24
107.187.125.0/24 maxlen: 24
136.0.48.0/24 maxlen: 24
107.165.207.0/24 maxlen: 24
107.165.225.0/24 maxlen: 24
107.165.191.0/24 maxlen: 24
107.165.204.0/24 maxlen: 24
107.165.183.0/24 maxlen: 24
107.165.188.0/24 maxlen: 24
142.111.251.0/24 maxlen: 24
142.111.209.0/24 maxlen: 24
142.111.179.0/24 maxlen: 24
45.39.161.0/24 maxlen: 24
142.252.138.0/24 maxlen: 24
142.252.148.0/22 maxlen: 24
142.111.200.0/24 maxlen: 24
142.252.192.0/22 maxlen: 24
142.252.209.0/24 maxlen: 24
142.111.196.0/24 maxlen: 24
142.252.38.0/24 maxlen: 24
142.111.198.0/24 maxlen: 24
142.252.60.0/22 maxlen: 24
142.111.185.0/24 maxlen: 24
142.252.89.0/24 maxlen: 24
142.111.195.0/24 maxlen: 24
142.252.117.0/24 maxlen: 24
23.230.115.0/24 maxlen: 24
23.27.8.0/24 maxlen: 24
23.230.1.0/24 maxlen: 24
23.230.64.0/24 maxlen: 24
23.230.121.0/24 maxlen: 24
23.230.186.0/24 maxlen: 24
23.230.234.0/24 maxlen: 24
45.38.206.0/24 maxlen: 24
172.121.141.0/24 maxlen: 24
172.121.156.0/24 maxlen: 24
172.121.160.0/20 maxlen: 24
172.121.192.0/19 maxlen: 24
166.88.181.0/24 maxlen: 24
166.88.212.0/24 maxlen: 24
172.120.26.0/24 maxlen: 24
23.230.235.0/24 maxlen: 24
172.121.109.0/24 maxlen: 24
172.121.232.0/24 maxlen: 24
172.121.236.0/22 maxlen: 24
45.38.234.0/24 maxlen: 24
68.68.96.0/24 maxlen: 24
166.88.45.0/24 maxlen: 24
107.165.143.0/24 maxlen: 24
107.165.152.0/24 maxlen: 24
107.165.128.0/24 maxlen: 24
107.165.134.0/24 maxlen: 24
104.165.105.0/24 maxlen: 24
104.165.199.0/24 maxlen: 24
68.68.107.0/24 maxlen: 24
68.68.108.0/24 maxlen: 24
107.165.166.0/24 maxlen: 24
45.39.174.0/24 maxlen: 24
45.39.77.0/24 maxlen: 24
45.39.95.0/24 maxlen: 24
45.39.39.0/24 maxlen: 24
45.39.66.0/24 maxlen: 24
45.38.251.0/24 maxlen: 24
107.186.144.0/24 maxlen: 24
107.187.33.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:f5:ca:9e:af:a1:89:73:69:50:90:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 21 02:00:25 2024 GMT
Not After : May 21 01:00:25 2024 GMT
Subject: CN=70417653-61f9-4bb3-98e5-4067df8961c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:77:b5:ce:a0:01:9f:93:3a:b4:ed:20:77:
e8:a4:f3:f9:f3:ba:76:ee:c0:f8:93:b6:f8:86:44:
d5:62:e8:06:0f:40:d8:29:35:11:9e:99:46:81:58:
d5:5b:c3:e6:89:20:11:14:5a:e4:17:d1:3a:0b:33:
15:ee:78:5c:23:17:e8:0c:7f:0b:e9:5b:75:8c:01:
ea:1a:9b:ab:78:38:a2:8d:f5:b8:bf:b5:72:d7:1f:
15:30:25:24:92:e5:58:17:82:1f:44:64:6c:43:4f:
2f:62:b1:ef:f0:3b:ea:25:f4:aa:72:be:4c:40:04:
53:10:eb:d1:19:f1:ed:78:34:9d:c3:8d:7b:26:54:
3f:86:f3:d1:06:74:1d:2f:6c:ef:e8:8b:06:d1:28:
31:da:9c:39:0a:6b:2c:98:03:f7:9b:e0:11:8f:79:
7e:ec:f2:19:bc:ef:43:16:5c:1d:5c:9d:eb:e8:31:
35:58:1d:61:4c:a6:d5:d6:86:fe:83:cd:c3:d3:d0:
f9:e8:0d:61:9e:8f:1b:e2:c7:ec:f8:c9:de:14:81:
b0:a3:36:01:7b:2f:a1:48:de:63:84:2f:52:66:6e:
41:40:5f:70:3d:04:61:7f:af:ea:93:62:00:2b:b9:
25:b7:7a:ae:da:34:2a:38:a0:f8:70:61:df:d2:56:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:7C:93:31:4C:43:4E:6C:5F:20:9C:07:76:C6:15:A4:0E:17:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b1f4a6f-f707-33bb-9e9c-12824f0bae45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.8.0/24
23.230.1.0/24
23.230.64.0/24
23.230.115.0/24
23.230.121.0/24
23.230.186.0/24
23.230.234.0/23
45.38.206.0/24
45.38.234.0/24
45.38.251.0/24
45.39.39.0/24
45.39.66.0/24
45.39.77.0/24
45.39.95.0/24
45.39.161.0/24
45.39.174.0/24
68.68.96.0/24
68.68.107.0-68.68.108.255
104.165.105.0/24
104.165.199.0/24
107.165.128.0/24
107.165.134.0/24
107.165.143.0/24
107.165.152.0/24
107.165.166.0/24
107.165.183.0/24
107.165.188.0/24
107.165.191.0/24
107.165.204.0/24
107.165.207.0/24
107.165.225.0/24
107.186.144.0/24
107.187.33.0/24
107.187.125.0/24
136.0.48.0/24
142.111.132.0/24
142.111.138.0/24
142.111.163.0-142.111.166.255
142.111.179.0/24
142.111.185.0/24
142.111.195.0-142.111.196.255
142.111.198.0/24
142.111.200.0/24
142.111.209.0/24
142.111.251.0/24
142.252.38.0/24
142.252.60.0/22
142.252.89.0/24
142.252.117.0/24
142.252.138.0/24
142.252.148.0/22
142.252.192.0/22
142.252.209.0/24
166.88.45.0/24
166.88.181.0/24
166.88.212.0/24
172.120.26.0/24
172.121.109.0/24
172.121.141.0/24
172.121.156.0/24
172.121.160.0/20
172.121.192.0/19
172.121.232.0/24
172.121.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ad:0b:ac:27:2e:80:5b:9b:20:35:2d:a2:5c:49:12:ca:fe:
7d:bb:1d:ed:1e:09:de:e4:8a:70:d1:ae:5b:23:2b:23:3c:19:
36:4c:48:5b:3f:68:4b:6d:0f:d0:9f:74:ec:0f:b9:43:f9:92:
04:99:ca:70:07:9f:56:3e:05:a3:4f:92:cf:ed:20:b9:13:c3:
e7:05:80:45:40:cb:4e:31:3a:53:d1:c2:6b:ad:e1:b3:e2:5b:
9e:06:74:ef:e5:cb:56:87:96:b4:90:b3:03:98:d1:f3:0c:63:
00:e1:74:3b:c8:ef:9a:28:c1:53:f3:23:c4:45:3c:72:f6:49:
97:fb:85:c0:d8:01:ed:b3:59:6e:56:d4:59:df:d1:1c:2c:74:
13:21:6a:21:12:e3:be:c7:aa:6a:9d:22:fe:e2:b4:ee:0d:ac:
c1:2b:50:38:79:33:9c:bb:ad:1a:2f:e6:26:cd:ac:a1:0b:a3:
88:56:65:a1:de:ed:92:1d:74:2f:98:51:f6:f8:b8:8b:71:b9:
04:fa:4b:be:36:0d:72:24:3d:12:19:42:fe:e9:b7:5b:b0:de:
b0:d9:49:80:16:bf:cd:02:05:cd:f6:67:de:5d:2e:44:e4:e1:
c5:13:2d:85:38:2d:21:7d:01:18:98:fb:3a:c5:25:66:53:eb:
ed:20:d5:8c
-----BEGIN CERTIFICATE-----
MIIH3zCCBsegAwIBAgIUAQ0Mn0MoWET1yp6voYlzaVCQtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk
NzA0MTc2NTMtNjFmOS00YmIzLTk4ZTUtNDA2N2RmODk2MWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ13tc6gAZ+TOrTtIHfopPP587p27sD4k7b4
hkTVYugGD0DYKTURnplGgVjVW8PmiSARFFrkF9E6CzMV7nhcIxfoDH8L6Vt1jAHq
GpureDiijfW4v7Vy1x8VMCUkkuVYF4IfRGRsQ08vYrHv8DvqJfSqcr5MQARTEOvR
GfHteDSdw417JlQ/hvPRBnQdL2zv6IsG0Sgx2pw5CmssmAP3m+ARj3l+7PIZvO9D
FlwdXJ3r6DE1WB1hTKbV1ob+g83D09D56A1hno8b4sfs+MneFIGwozYBey+hSN5j
hC9SZm5BQF9wPQRhf6/qk2IAK7klt3qu2jQqOKD4cGHf0lbZ5QIDAQABo4IE8TCC
BO0wHQYDVR0OBBYEFAuCfJMxTENObF8gnAd2xhWkDhfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2IxZjRhNmYtZjcwNy0z
M2JiLTllOWMtMTI4MjRmMGJhZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIIBuQYIKwYBBQUHAQcBAf8EggGoMIIBpDCCAaAEAgABMIIB
mAMEABcbCAMEABfmAQMEABfmQAMEABfmcwMEABfmeQMEABfmugMEARfm6gMEAC0m
zgMEAC0m6gMEAC0m+wMEAC0nJwMEAC0nQgMEAC0nTQMEAC0nXwMEAC0noQMEAC0n
rgMEAEREYDAMAwQARERrAwQARERsAwQAaKVpAwQAaKXHAwQAa6WAAwQAa6WGAwQA
a6WPAwQAa6WYAwQAa6WmAwQAa6W3AwQAa6W8AwQAa6W/AwQAa6XMAwQAa6XPAwQA
a6XhAwQAa7qQAwQAa7shAwQAa7t9AwQAiAAwAwQAjm+EAwQAjm+KMAwDBACOb6MD
BACOb6YDBACOb7MDBACOb7kwDAMEAI5vwwMEAI5vxAMEAI5vxgMEAI5vyAMEAI5v
0QMEAI5v+wMEAI78JgMEAo78PAMEAI78WQMEAI78dQMEAI78igMEAo78lAMEAo78
wAMEAI780QMEAKZYLQMEAKZYtQMEAKZY1AMEAKx4GgMEAKx5bQMEAKx5jQMEAKx5
nAMEBKx5oAMEBax5wAMEAKx56AMEAqx57DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADrQusJy6AW5sgNS2i
XEkSyv59ux3tHgne5Ipw0a5bIysjPBk2TEhbP2hLbQ/Qn3TsD7lD+ZIEmcpwB59W
PgWjT5LP7SC5E8PnBYBFQMtOMTpT0cJrreGz4lueBnTv5ctWh5a0kLMDmNHzDGMA
4XQ7yO+aKMFT8yPERTxy9kmX+4XA2AHts1luVtRZ39EcLHQTIWohEuO+x6pqnSL+
4rTuDazBK1A4eTOcu60aL+YmzayhC6OIVmWh3u2SHXQvmFH2+LiLcbkE+ku+Ng1y
JD0SGUL+6bdbsN6w2UmAFr/NAgXN9mfeXS5E5OHFEy2FOC0hfQEYmPs6xSVmU+vt
INWM
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org