Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45c9f42d-1744-38a5-a9c1-0049cce877eb.roa
File: 45c9f42d-1744-38a5-a9c1-0049cce877eb.roa (raw, json)
Hash identifier: c7SoSm9Q+NvlQjcXTOnDvX1fTuGY0qxRqh940uzR7cs=
Subject key identifier: CE:0E:68:C5:FF:19:64:CE:11:E6:40:B6:4D:90:95:EF:01:D8:C0:87
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841163F78E446D013C26CD89320
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45c9f42d-1744-38a5-a9c1-0049cce877eb.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 04 Jun 2025 04:00:00 +0000
asID: 1239
IP address blocks: 136.0.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:16:3f:78:e4:46:d0:13:c2:6c:d8:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jun 4 04:00:00 2025 GMT
Subject: CN=68a1c056-2abe-4112-993e-3f072e2524a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:da:87:c1:2e:98:91:14:57:bd:66:a2:c9:
42:97:49:cc:2a:0e:7b:db:f2:04:68:53:55:1e:b1:
fc:55:fd:96:5b:bb:bc:29:17:c0:11:2d:7e:20:96:
3e:44:fa:79:2e:8e:2c:ca:45:30:68:72:b2:58:7a:
34:00:aa:7a:fd:b7:d3:34:cc:4d:5d:6e:3f:ad:31:
a7:a2:9c:f0:ab:7f:b0:d9:1a:09:63:fc:6c:ff:dc:
18:1c:a8:b0:de:4b:6c:94:8d:93:d2:7e:95:b0:b8:
c4:bf:f6:07:26:1c:2f:ca:d6:ba:26:37:59:0b:d6:
c5:25:2b:e8:01:a8:0c:38:05:57:15:a8:10:65:c2:
c8:50:6f:2d:4c:72:99:4d:67:31:3e:59:ae:73:45:
17:52:c4:4f:38:6d:a1:81:5e:19:69:21:6b:51:c5:
7a:6f:e2:cd:8c:3a:27:2f:e3:89:1b:aa:8f:2c:11:
29:5e:b4:5c:97:64:ba:02:e0:2d:ee:4e:87:1e:ff:
73:53:4c:df:35:34:68:d3:3c:b9:9b:20:d7:5d:cb:
d3:c1:80:82:81:f6:e8:76:e6:4f:12:cc:45:cf:4e:
74:1b:1d:01:62:5e:51:57:57:39:69:d2:50:8f:ae:
1b:0c:54:53:1a:be:a6:51:07:df:93:f9:9b:be:d1:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:68:C5:FF:19:64:CE:11:E6:40:B6:4D:90:95:EF:01:D8:C0:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45c9f42d-1744-38a5-a9c1-0049cce877eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c9:7a:20:57:a3:ff:4c:43:94:5d:14:93:1b:fa:9e:41:c4:
fc:9d:79:95:67:10:70:df:1f:64:06:92:25:60:8c:91:db:ad:
44:c3:c8:7e:f6:18:85:b3:d4:a0:35:85:95:ba:5e:d4:35:ce:
65:2f:04:45:8d:42:3b:29:28:e0:56:1d:d4:b9:2c:5a:59:74:
44:ad:07:9b:18:ed:3e:f5:93:5e:de:b5:b2:90:6d:d8:b3:a6:
1a:3e:25:d0:13:41:35:e2:21:89:6e:c7:bd:ff:84:f9:19:49:
73:2e:51:bc:52:ba:8d:5b:02:4e:17:3e:12:da:f2:15:e6:cf:
0f:bd:82:54:9e:4f:76:6f:90:64:25:7b:f5:e6:cf:f4:de:46:
71:43:b6:ff:07:6d:2f:6f:9c:bc:7b:ab:1b:db:19:a5:50:7c:
72:d6:b1:46:20:28:5f:4d:95:5c:2d:05:4e:eb:f3:33:8f:cd:
cd:ff:7b:63:67:60:5c:15:4a:b7:cd:91:31:e0:33:e7:75:31:
9c:9b:7b:4e:70:9a:2c:ca:7b:64:0e:27:cc:6f:1c:59:7b:4b:
be:3e:8d:26:70:c4:25:dc:12:6f:02:75:a2:f2:ee:79:3a:62:
69:51:09:28:5d:a9:5a:0b:ba:74:75:3a:0f:65:30:02:3f:af:
48:e2:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org