Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d1e8a35-a8ef-3d87-ae19-45fd72ba8825.roa
File: 3d1e8a35-a8ef-3d87-ae19-45fd72ba8825.roa (raw, json)
Hash identifier: jmbd00Lt7Azt/TfTGLyau72QSB1bGjBvnQkIoBP5RuQ=
Subject key identifier: 80:1A:BD:AD:DC:FA:D3:7A:D1:60:6D:70:87:15:2E:CE:EE:AA:4A:79
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844AFFF83FCB9AACEE2BDAE97E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d1e8a35-a8ef-3d87-ae19-45fd72ba8825.roa
Signing time: Sat 27 Jan 2024 02:00:25 +0000
ROA not before: Sat 27 Jan 2024 02:00:25 +0000
ROA not after: Fri 26 Apr 2024 01:00:25 +0000
asID: 149440
IP address blocks: 172.120.89.0/24 maxlen: 24
172.120.13.0/24 maxlen: 24
142.111.135.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:af:ff:83:fc:b9:aa:ce:e2:bd:ae:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 27 02:00:25 2024 GMT
Not After : Apr 26 01:00:25 2024 GMT
Subject: CN=2b56a6eb-b653-4057-a811-c9dbd36da338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:d6:fa:66:38:4f:a1:51:de:c5:35:de:a0:
9b:33:c8:99:42:d7:cf:5d:dc:27:ad:47:a9:22:17:
89:9f:6a:73:05:4f:86:47:3a:ed:50:97:38:85:e8:
d2:6f:1a:66:b5:7a:15:b0:86:0c:2e:dc:f8:30:7a:
3d:db:8b:e1:dd:64:9d:54:d9:3c:dc:ac:4f:47:0c:
d5:bd:9c:0d:2e:64:cb:c9:1f:29:5e:45:b7:d9:39:
5c:35:2b:f2:76:68:5a:3e:0f:f7:24:fe:ae:d1:21:
1b:f5:bc:3a:23:cb:b8:18:29:cc:f0:09:c8:91:d9:
b7:85:59:46:fb:23:4e:58:28:93:7b:31:ad:94:99:
69:e2:67:e7:c9:1c:c0:2c:ac:e7:ed:dd:f1:a5:7d:
6f:49:57:98:6a:ae:61:6c:96:07:60:98:47:34:d8:
b6:96:68:ec:07:ee:08:1f:00:fe:d4:5d:e1:ac:78:
79:66:b9:6b:1d:3d:e4:01:e5:de:68:bf:47:9e:9f:
87:2e:86:76:2d:4e:47:e2:c7:80:99:86:ef:a9:c8:
9d:11:50:22:db:73:48:b3:25:3c:5f:f5:0e:4c:6a:
40:b4:b1:8b:e3:2f:fc:58:d6:92:59:ad:88:53:fb:
b1:b7:03:70:3f:5e:ca:4a:20:8a:f2:fb:3c:ad:56:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:BD:AD:DC:FA:D3:7A:D1:60:6D:70:87:15:2E:CE:EE:AA:4A:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d1e8a35-a8ef-3d87-ae19-45fd72ba8825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.135.0/24
172.120.13.0/24
172.120.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:65:ab:37:e1:fd:6e:31:04:e5:5d:b7:ab:20:d0:12:c2:49:
c2:eb:65:ab:1f:21:3b:b8:f8:9c:b0:89:a5:e9:ed:15:a7:19:
a5:09:55:0d:bc:35:49:dd:a7:21:f3:43:d2:2e:ac:f5:5e:96:
d8:0d:cc:46:7d:28:25:cb:f7:e0:28:50:ba:23:6d:70:aa:b8:
86:76:6c:92:60:7d:38:8d:ec:0c:8c:dd:7b:6e:fc:75:37:69:
be:aa:bf:08:6e:a2:f4:a3:09:45:fc:7a:2b:eb:83:a1:c2:1c:
b7:1b:33:cf:b0:10:e5:eb:19:e4:93:7b:d9:02:ad:e4:a0:6f:
b8:13:67:ef:f2:eb:8d:5f:43:4a:8a:8c:43:31:3b:04:85:e1:
4c:31:43:5e:b0:61:22:60:2c:5c:3b:b7:9d:05:09:76:9a:cf:
fa:f3:d4:86:6c:02:9a:ed:b5:64:38:28:70:c4:44:93:6a:29:
fd:af:c8:72:4d:14:17:0e:72:c3:00:7c:63:c3:ce:1b:ba:d9:
0b:3b:d8:2e:e2:3c:a6:65:3c:b3:52:61:cc:1b:f5:48:94:c2:
f8:1d:dc:d1:0e:98:3a:b0:44:d9:bd:5d:7f:2d:ff:eb:ec:14:
a5:d7:35:89:01:67:07:99:3f:d2:4b:05:a6:4b:4e:d5:3a:98:
73:25:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org