Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bbad9a4-14a0-36b3-8965-fc88c634f579.roa
File: 3bbad9a4-14a0-36b3-8965-fc88c634f579.roa (raw, json)
Hash identifier: SLvJkDY2AC8ShrbgUQ7C+/8LELLJZ/5rcQkMbKru6mM=
Subject key identifier: CE:E1:FF:80:22:C2:1A:41:BF:53:8F:18:D0:31:B4:FD:D5:C2:9F:8B
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841FA85FC34B9D17BF6E9F50F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bbad9a4-14a0-36b3-8965-fc88c634f579.roa
Signing time: Tue 23 May 2023 16:20:23 +0000
ROA not before: Tue 23 May 2023 16:20:23 +0000
ROA not after: Mon 21 Aug 2023 16:20:23 +0000
asID: 1239
IP address blocks: 107.164.146.0/24 maxlen: 24
107.164.207.0/24 maxlen: 24
107.164.213.0/24 maxlen: 24
107.165.176.0/24 maxlen: 24
107.165.219.0/24 maxlen: 24
166.88.173.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:fa:85:fc:34:b9:d1:7b:f6:e9:f5:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 23 16:20:23 2023 GMT
Not After : Aug 21 16:20:23 2023 GMT
Subject: CN=994b1fc5-ce96-449c-9970-06dd55bf8e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:a7:0f:0c:be:08:9f:22:32:d4:c6:5c:98:
98:e2:23:4e:29:3c:9b:04:ab:7b:20:b3:0c:1a:4b:
94:c4:a6:6d:16:58:21:3b:e6:47:4c:43:a6:4c:f0:
11:74:1c:7b:f3:f5:2f:f0:4f:66:b2:6c:dd:de:9d:
7a:fc:b6:76:83:f9:74:76:88:97:0b:c5:21:e3:f5:
de:ef:ee:9d:57:13:95:aa:1e:c3:13:ef:73:ce:42:
84:ff:11:d4:9b:e9:bc:1a:8e:9f:e3:cf:2f:52:7b:
52:b1:ae:19:8e:26:f2:24:12:ef:d6:8c:df:4b:19:
80:f3:a3:42:db:59:ca:d7:23:f1:39:e4:54:1d:2c:
f9:6b:2f:c9:f8:c4:9b:32:46:7c:93:04:52:f2:46:
e7:ee:26:de:04:55:35:cc:ef:a4:15:80:e8:ae:00:
1e:7d:30:94:56:6c:30:d1:0e:90:f2:0b:b3:76:27:
34:4a:72:e9:9b:ec:ce:2c:d3:4b:33:3e:70:91:0e:
0b:d1:18:a7:85:dd:44:41:da:23:c8:35:f1:fb:85:
ee:ff:0c:12:72:c4:6c:54:c5:f6:44:1c:e0:ac:b4:
f3:23:ea:43:4e:ee:fe:51:a0:42:63:47:a1:dd:ff:
a1:98:88:67:88:a1:19:9e:49:2f:4c:1f:f3:81:c9:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E1:FF:80:22:C2:1A:41:BF:53:8F:18:D0:31:B4:FD:D5:C2:9F:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bbad9a4-14a0-36b3-8965-fc88c634f579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
107.164.146.0/24
107.164.207.0/24
107.164.213.0/24
107.165.176.0/24
107.165.219.0/24
166.88.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:e1:b5:2c:67:da:dc:60:2e:b4:23:77:f7:f4:01:dd:76:1f:
32:4f:39:7d:70:0f:66:55:86:c4:b2:5d:72:09:a2:21:28:93:
4a:dc:f4:66:33:c5:40:76:8e:9a:e2:e4:a0:9b:e9:80:6e:6c:
47:04:ef:d0:ac:6f:5a:1a:33:5b:eb:06:8d:9b:f1:1e:fb:a6:
59:04:f4:88:84:a8:bf:a5:92:6d:b2:3f:a0:96:8f:2d:c7:2b:
f1:3f:c4:82:e4:1d:8e:1f:cb:27:d3:5f:d0:d5:ff:19:87:d2:
3e:21:ed:80:76:24:3e:70:36:0b:81:6c:3a:bd:9a:ab:f1:9c:
3f:94:d5:46:cc:58:4c:f2:6e:9c:b2:a1:e2:95:cf:26:d3:0a:
bd:c6:44:e4:26:92:0e:60:e0:c4:d8:6a:45:6f:32:14:64:c0:
52:cd:98:ff:c6:c3:06:7c:01:99:b1:52:be:14:e9:00:45:38:
53:fa:ec:d4:ac:8d:9b:43:81:90:97:a3:a9:bd:d8:05:cc:c0:
73:7a:b2:41:7d:67:31:a3:35:cf:c9:03:de:19:44:3d:bf:5e:
26:e6:27:14:7e:1a:c3:7a:72:97:dd:68:57:d1:10:53:4b:6a:
5a:94:2f:a4:e7:58:f7:0c:74:f9:f6:0d:8a:05:07:14:a5:01:
54:53:d1:71
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEH6hfw0udF79un1DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIzMDUyMzE2MjAyM1oXDTIzMDgyMTE2MjAyM1owLzEtMCsGA1UEAxMk
OTk0YjFmYzUtY2U5Ni00NDljLTk5NzAtMDZkZDU1YmY4ZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LanDwy+CJ8iMtTGXJiY4iNOKTybBKt7ILMM
GkuUxKZtFlghO+ZHTEOmTPARdBx78/Uv8E9msmzd3p16/LZ2g/l0doiXC8Uh4/Xe
7+6dVxOVqh7DE+9zzkKE/xHUm+m8Go6f488vUntSsa4ZjibyJBLv1ozfSxmA86NC
21nK1yPxOeRUHSz5ay/J+MSbMkZ8kwRS8kbn7ibeBFU1zO+kFYDorgAefTCUVmww
0Q6Q8guzdic0SnLpm+zOLNNLMz5wkQ4L0Rinhd1EQdojyDXx+4Xu/wwScsRsVMX2
RBzgrLTzI+pDTu7+UaBCY0eh3f+hmIhniKEZnkkvTB/zgcn4uwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFM7h/4AiwhpBv1OPGNAxtP3Vwp+LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2JiYWQ5YTQtMTRhMC0z
NmIzLTg5NjUtZmM4OGM2MzRmNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAa6SSAwQA
a6TPAwQAa6TVAwQAa6WwAwQAa6XbAwQAplitMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADfhtSxn2txgLrQj
d/f0Ad12HzJPOX1wD2ZVhsSyXXIJoiEok0rc9GYzxUB2jpri5KCb6YBubEcE79Cs
b1oaM1vrBo2b8R77plkE9IiEqL+lkm2yP6CWjy3HK/E/xILkHY4fyyfTX9DV/xmH
0j4h7YB2JD5wNguBbDq9mqvxnD+U1UbMWEzybpyyoeKVzybTCr3GROQmkg5g4MTY
akVvMhRkwFLNmP/GwwZ8AZmxUr4U6QBFOFP67NSsjZtDgZCXo6m92AXMwHN6skF9
ZzGjNc/JA94ZRD2/XibmJxR+GsN6cpfdaFfREFNLalqUL6TnWPcMdPn2DYoFBxSl
AVRT0XE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:21 2024 by rpki-client on console-fra.rpki-client.org