Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fbca536-7787-3d5a-80f1-3670359b0687.roa
File: 3fbca536-7787-3d5a-80f1-3670359b0687.roa (raw, json)
Hash identifier: 58gWKXVyRlfF33QL/PENxuQ+/o0SNtsXXi+qvhK432k=
Subject key identifier: 84:19:94:9B:55:68:97:FA:2A:0C:35:DA:8B:44:AB:81:B0:53:94:CD
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841CB5006263538DC886AB56C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fbca536-7787-3d5a-80f1-3670359b0687.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Fri 08 Aug 2025 04:00:00 +0000
asID: 18530
IP address blocks: 23.27.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:cb:50:06:26:35:38:dc:88:6a:b5:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 8 04:00:00 2025 GMT
Subject: CN=884b4dac-5dc8-489a-9592-7d4ad80224f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:18:ba:55:14:3e:8b:4b:d3:73:8a:31:e1:
f8:b4:1e:97:ab:36:d0:dc:1d:47:29:c2:50:64:95:
fb:bf:dd:17:a5:97:51:34:d8:c1:99:79:b2:8c:33:
af:cc:2e:c4:bc:07:0e:36:fd:c0:7d:51:26:70:42:
d4:cc:19:d7:7e:4a:65:fb:4e:56:2d:61:67:b9:18:
08:f6:4f:88:b2:67:a9:90:48:ba:fe:36:ab:d4:6a:
b6:4d:6e:70:47:bb:f5:f4:93:94:48:60:1e:31:ae:
41:2f:2a:bd:07:46:9d:45:96:69:dd:12:59:8d:c4:
e3:78:db:59:00:78:91:f1:34:83:fb:29:a8:93:52:
91:5a:94:74:de:c7:19:6c:e6:f4:4c:92:19:e8:bf:
a5:ba:70:f9:54:08:22:31:ba:89:93:d1:13:23:9b:
bd:89:a8:00:a9:19:75:8b:5e:cc:61:c3:cc:b8:e2:
2a:66:ae:97:58:66:eb:f3:54:c2:b6:61:d9:d7:fb:
8e:ff:44:7c:a7:42:b0:12:03:35:90:17:e7:cd:b8:
3b:fb:89:24:9f:fe:50:f0:a9:45:79:36:c1:d2:38:
c1:82:ae:4d:ee:74:ef:62:dc:52:d2:df:e3:b1:cd:
b4:64:31:c0:3b:06:ef:ea:59:7c:c0:d0:38:46:1d:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:94:9B:55:68:97:FA:2A:0C:35:DA:8B:44:AB:81:B0:53:94:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fbca536-7787-3d5a-80f1-3670359b0687.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:6e:8f:8d:0b:5a:e1:47:a2:b6:df:c7:9f:49:25:17:35:9d:
a8:16:b9:99:f7:33:78:65:ae:86:5a:14:49:90:59:71:e8:d1:
37:2a:f0:71:4b:af:50:0a:70:08:3a:be:ae:43:99:85:15:76:
bd:10:78:8e:fb:80:57:62:51:28:49:ed:ae:16:69:94:64:59:
92:6b:b9:ed:ce:61:ff:ef:0f:8d:65:66:23:05:b2:58:3e:ff:
89:0d:b6:33:92:7e:9d:67:ca:93:54:ba:24:78:fa:87:f3:28:
45:aa:14:f6:c5:07:85:36:87:99:37:57:b1:30:7b:a9:eb:16:
b6:f3:a3:46:15:d8:e6:b4:70:52:cf:9b:c4:d8:9c:33:79:1d:
dd:67:ee:b4:db:b0:6f:ab:8d:90:a9:e2:ab:9e:97:30:0c:6e:
9b:f4:4f:e6:ff:26:fa:75:23:9e:7e:e3:7c:1f:ea:eb:5e:08:
4b:99:51:ee:02:63:07:53:42:79:db:d5:a6:75:2b:26:20:7d:
5c:bf:24:ce:6d:4f:1b:53:e1:63:32:52:39:ff:25:40:9a:8a:
20:42:50:31:49:b0:31:cc:1b:b6:bb:6a:af:38:21:c1:c0:a1:
26:1f:8b:e8:71:fb:cc:f5:13:af:48:97:1c:b9:61:93:ef:b7:
85:e2:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org