Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f08c53c-bd78-3973-bfc3-a98c9fa48c52.roa
File: 3f08c53c-bd78-3973-bfc3-a98c9fa48c52.roa (raw, json)
Hash identifier: VfcQd9cRSA2HR9C8dTQDS5jMfBzRc6wxaqdnMRbJVqE=
Subject key identifier: BB:D8:07:07:EB:D9:F7:85:9A:39:AB:B4:9D:01:D0:69:8A:B0:50:CD
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583D45E9059C1DF94F6525F0EB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f08c53c-bd78-3973-bfc3-a98c9fa48c52.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Wed 19 Jun 2024 04:00:00 +0000
asID: 3257
IP address blocks: 23.27.222.0/24 maxlen: 24
23.230.74.0/24 maxlen: 24
23.230.177.0/24 maxlen: 24
23.230.197.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:45:e9:05:9c:1d:f9:4f:65:25:f0:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Jun 19 04:00:00 2024 GMT
Subject: CN=26ab650b-a759-4309-9d4d-4378a3424ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:6e:7c:08:77:7a:95:3b:c4:f2:c5:73:1b:
55:32:b9:47:65:d9:42:cc:61:6f:09:2c:ed:d6:48:
6a:cc:4c:49:2b:63:6e:69:6a:74:66:e6:a7:0b:cd:
42:6d:b1:9a:2b:8b:f3:81:01:4a:87:9c:3e:06:a1:
71:70:c9:12:e0:e7:e4:71:04:72:75:99:9c:47:19:
ae:79:1d:06:85:80:79:b3:b9:8f:41:59:48:31:5f:
9c:3b:0d:9e:67:67:58:48:c8:04:c9:af:40:4c:27:
8e:02:30:43:61:39:72:02:3b:b5:ea:cb:02:cf:0a:
13:03:31:4c:3c:e1:ea:f2:b2:b2:15:93:5a:20:90:
c2:a3:bf:3a:70:75:3e:b1:b3:97:e6:25:76:43:fa:
9c:f0:34:7f:e0:d2:cb:73:30:4a:ff:7e:f3:1a:a9:
cd:20:f8:11:2c:4b:8b:fd:05:b4:05:df:17:40:84:
85:b3:44:b9:1e:09:fe:d2:02:d0:46:c7:c2:34:cb:
54:de:05:b3:57:72:e4:db:5b:25:0d:01:00:1f:6e:
03:cc:0b:6d:83:9c:60:8d:d6:56:46:80:1c:bf:3c:
26:8d:29:47:4a:84:cb:d0:7f:14:48:02:ef:d8:14:
d8:e9:7e:ae:61:f2:3f:35:86:cd:7b:81:e4:b4:65:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:07:07:EB:D9:F7:85:9A:39:AB:B4:9D:01:D0:69:8A:B0:50:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f08c53c-bd78-3973-bfc3-a98c9fa48c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.222.0/24
23.230.74.0/24
23.230.177.0/24
23.230.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:42:66:09:15:26:ce:1f:e7:55:c5:b7:96:6a:f3:de:0b:fc:
c6:41:62:0c:fe:32:bd:93:e6:20:e7:0a:71:56:96:8b:26:42:
ad:48:0d:15:a3:85:7f:aa:6f:d8:d0:69:6b:5a:b6:2d:bc:d9:
60:71:da:88:91:4f:8d:42:dc:38:c0:5a:78:10:0e:f0:a4:63:
ef:d5:c1:0d:b2:29:2d:57:c7:22:d5:23:8e:40:6e:db:cc:6f:
44:1c:f0:9c:4d:9f:0f:fb:d3:07:6a:6c:01:83:25:8c:b5:12:
72:0d:17:c4:f2:3e:09:c7:d2:4e:7f:65:0c:b1:79:21:45:ed:
b9:0b:9d:88:93:27:ae:da:5a:d6:8a:e1:28:b3:8a:d8:cb:0f:
96:08:a0:61:68:ee:cc:cd:04:6d:46:e5:1f:eb:d6:0e:2f:ba:
57:23:48:14:d2:1c:5f:31:0d:c2:06:b9:5e:f2:1a:c7:74:94:
2d:2b:a9:f5:de:29:9d:4d:b0:39:69:8c:cb:41:c5:4d:30:26:
af:1b:4a:36:03:e6:75:a1:3c:6b:79:48:1d:28:75:7a:da:d4:
31:0e:9a:bf:ca:25:17:95:ca:d0:57:ad:7e:af:6b:e7:03:c6:
33:fc:6f:5c:93:27:e5:4c:d1:53:42:d6:2a:bc:25:a3:4b:92:
49:0b:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:21 2024 by rpki-client on console-fra.rpki-client.org