Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bf7f10d-13f5-3e74-89ef-1547c3b9c05b.roa
File: 3bf7f10d-13f5-3e74-89ef-1547c3b9c05b.roa (raw, json)
Hash identifier: 9dZBNpfqENeGXTRIUhN8ChSc39TUuII41NcsAj4pbvA=
Subject key identifier: D1:00:7B:12:78:94:77:B8:E7:CA:34:8E:35:B5:98:73:A4:DF:49:63
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583B6C8A3EBD59601FD80E586180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bf7f10d-13f5-3e74-89ef-1547c3b9c05b.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Tue 02 Jan 2024 05:00:00 +0000
asID: 3257
IP address blocks: 107.186.144.0/24 maxlen: 24
142.111.166.0/24 maxlen: 24
142.252.60.0/22 maxlen: 24
107.187.33.0/24 maxlen: 24
107.165.207.0/24 maxlen: 24
107.165.191.0/24 maxlen: 24
104.165.199.0/24 maxlen: 24
104.165.105.0/24 maxlen: 24
68.68.107.0/24 maxlen: 24
68.68.108.0/24 maxlen: 24
68.68.96.0/24 maxlen: 24
45.39.161.0/24 maxlen: 24
45.39.77.0/24 maxlen: 24
45.39.39.0/24 maxlen: 24
45.39.66.0/24 maxlen: 24
45.38.234.0/24 maxlen: 24
45.38.206.0/24 maxlen: 24
23.230.234.0/24 maxlen: 24
23.230.235.0/24 maxlen: 24
23.230.121.0/24 maxlen: 24
23.230.186.0/24 maxlen: 24
23.230.64.0/24 maxlen: 24
23.27.8.0/24 maxlen: 24
23.230.1.0/24 maxlen: 24
23.230.115.0/24 maxlen: 24
45.38.251.0/24 maxlen: 24
45.39.95.0/24 maxlen: 24
45.39.174.0/24 maxlen: 24
107.165.128.0/24 maxlen: 24
107.165.134.0/24 maxlen: 24
107.165.143.0/24 maxlen: 24
107.165.152.0/24 maxlen: 24
107.165.166.0/24 maxlen: 24
107.165.183.0/24 maxlen: 24
107.165.188.0/24 maxlen: 24
107.165.204.0/24 maxlen: 24
107.165.225.0/24 maxlen: 24
107.187.125.0/24 maxlen: 24
136.0.48.0/24 maxlen: 24
142.111.132.0/24 maxlen: 24
142.111.138.0/24 maxlen: 24
142.111.163.0/24 maxlen: 24
142.252.148.0/22 maxlen: 24
172.121.160.0/20 maxlen: 24
142.252.192.0/22 maxlen: 24
142.252.209.0/24 maxlen: 24
166.88.45.0/24 maxlen: 24
166.88.181.0/24 maxlen: 24
166.88.212.0/24 maxlen: 24
172.120.26.0/24 maxlen: 24
172.121.109.0/24 maxlen: 24
172.121.141.0/24 maxlen: 24
172.121.156.0/24 maxlen: 24
172.121.192.0/19 maxlen: 24
172.121.236.0/22 maxlen: 24
172.121.232.0/24 maxlen: 24
142.252.89.0/24 maxlen: 24
142.252.117.0/24 maxlen: 24
142.252.138.0/24 maxlen: 24
142.252.38.0/24 maxlen: 24
142.111.251.0/24 maxlen: 24
142.111.209.0/24 maxlen: 24
142.111.200.0/24 maxlen: 24
142.111.198.0/24 maxlen: 24
142.111.195.0/24 maxlen: 24
142.111.196.0/24 maxlen: 24
142.111.179.0/24 maxlen: 24
142.111.185.0/24 maxlen: 24
142.111.165.0/24 maxlen: 24
142.111.164.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:6c:8a:3e:bd:59:60:1f:d8:0e:58:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Jan 2 05:00:00 2024 GMT
Subject: CN=2768419c-b96c-47de-8c51-d0a158c7fe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:b4:66:e0:fe:c2:9c:66:ab:1d:4b:67:40:
56:45:2f:4d:1f:30:aa:d2:b1:d5:31:58:fc:07:f3:
46:2c:c6:dd:f3:70:b3:64:16:90:86:68:b1:4d:b2:
14:ce:bc:b9:db:0b:08:1d:0b:fa:1f:66:7f:10:f1:
9c:7e:05:36:c1:b9:04:2c:98:75:a5:8a:cb:8d:2a:
34:b0:72:01:d4:86:2c:56:41:b0:94:e0:e3:5f:36:
05:d3:d8:b4:e5:0c:af:1a:aa:ef:7b:00:6a:47:5e:
a2:07:55:ee:78:4e:24:ba:a3:d5:55:1b:19:bd:06:
b4:25:80:5e:18:af:7b:99:76:b9:2d:3e:b5:bc:fa:
c7:22:3d:a0:ed:1a:de:26:bd:00:89:4c:da:e0:d0:
b5:42:66:09:33:32:1c:ba:e8:50:57:ce:50:ad:2b:
db:41:4d:97:c2:f3:11:72:80:b1:71:5e:b2:84:20:
5f:43:e3:08:d0:e7:ec:d0:33:f2:b7:71:69:ab:88:
24:12:1e:dc:7b:ec:de:87:fb:5d:78:f3:5e:70:b1:
ba:b4:5a:95:94:33:b1:47:9b:c4:76:01:f8:a3:ad:
f4:d9:46:53:64:1d:44:51:1b:de:cf:dd:18:03:9a:
81:1f:0e:5f:9b:f4:d7:f8:47:ac:d9:6c:30:d5:08:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:7B:12:78:94:77:B8:E7:CA:34:8E:35:B5:98:73:A4:DF:49:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bf7f10d-13f5-3e74-89ef-1547c3b9c05b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.8.0/24
23.230.1.0/24
23.230.64.0/24
23.230.115.0/24
23.230.121.0/24
23.230.186.0/24
23.230.234.0/23
45.38.206.0/24
45.38.234.0/24
45.38.251.0/24
45.39.39.0/24
45.39.66.0/24
45.39.77.0/24
45.39.95.0/24
45.39.161.0/24
45.39.174.0/24
68.68.96.0/24
68.68.107.0-68.68.108.255
104.165.105.0/24
104.165.199.0/24
107.165.128.0/24
107.165.134.0/24
107.165.143.0/24
107.165.152.0/24
107.165.166.0/24
107.165.183.0/24
107.165.188.0/24
107.165.191.0/24
107.165.204.0/24
107.165.207.0/24
107.165.225.0/24
107.186.144.0/24
107.187.33.0/24
107.187.125.0/24
136.0.48.0/24
142.111.132.0/24
142.111.138.0/24
142.111.163.0-142.111.166.255
142.111.179.0/24
142.111.185.0/24
142.111.195.0-142.111.196.255
142.111.198.0/24
142.111.200.0/24
142.111.209.0/24
142.111.251.0/24
142.252.38.0/24
142.252.60.0/22
142.252.89.0/24
142.252.117.0/24
142.252.138.0/24
142.252.148.0/22
142.252.192.0/22
142.252.209.0/24
166.88.45.0/24
166.88.181.0/24
166.88.212.0/24
172.120.26.0/24
172.121.109.0/24
172.121.141.0/24
172.121.156.0/24
172.121.160.0/20
172.121.192.0/19
172.121.232.0/24
172.121.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:c0:75:98:5b:fd:0d:a8:ff:32:75:ad:1d:99:51:48:7a:35:
ce:89:e4:a1:97:c9:0b:7c:f1:73:03:86:0b:09:ec:cc:fe:31:
20:5e:b5:d6:99:89:ea:bc:93:28:4f:49:05:7c:4c:6f:2e:51:
71:4f:92:f3:92:d0:7a:2b:2d:d5:92:b3:cf:a8:9e:33:84:30:
14:f4:e7:06:96:1b:20:54:e4:99:a0:5b:5c:7a:c8:16:3a:5e:
6b:3e:5c:12:fc:78:23:d8:9f:ee:7e:2c:70:27:c2:00:1e:ad:
c3:be:85:d8:76:63:58:9e:a0:ec:b4:bd:6e:c0:c2:c9:0d:6b:
00:8c:42:2c:59:f1:55:34:75:85:72:1e:08:13:d6:12:f4:49:
01:ea:f5:7c:88:af:25:da:29:bd:78:ff:a9:ab:40:f0:d6:f3:
d5:e9:e1:62:e2:51:d4:77:3d:5c:5a:46:90:e3:59:1a:3a:9c:
d3:4a:5d:49:52:12:e7:5b:a8:42:94:d9:90:7d:00:17:a9:19:
30:49:98:4e:48:0b:17:e8:60:76:29:81:50:58:f9:08:3c:76:
5b:ff:6b:a5:df:bc:0c:05:26:e3:20:9f:24:6b:f6:65:bd:2d:
58:fb:1b:0a:a5:9e:28:a0:4e:cb:af:31:ed:90:76:c8:3b:ab:
d1:67:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:21 2024 by rpki-client on console-fra.rpki-client.org