Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47c42b9c-9036-3c1c-9780-f6c0fb641be5.roa
File: 47c42b9c-9036-3c1c-9780-f6c0fb641be5.roa (raw, json)
Hash identifier: YcGf7sbV+0F1YWFuAi9i1Tcn109HsFiMmyvsW3g1teI=
Subject key identifier: 30:DC:FA:62:B0:67:CD:28:D3:DF:42:24:20:74:C6:4B:BC:08:85:7D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584471C68A956ED865910DFF1880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47c42b9c-9036-3c1c-9780-f6c0fb641be5.roa
Signing time: Thu 04 Jan 2024 19:05:31 +0000
ROA not before: Thu 04 Jan 2024 19:05:31 +0000
ROA not after: Wed 03 Apr 2024 18:05:31 +0000
asID: 10557
IP address blocks: 104.252.177.0/24 maxlen: 24
45.38.252.0/24 maxlen: 24
23.27.221.0/24 maxlen: 24
23.27.15.0/24 maxlen: 24
23.27.19.0/24 maxlen: 24
23.27.170.0/24 maxlen: 24
23.27.223.0/24 maxlen: 24
23.27.226.0/24 maxlen: 24
23.230.249.0/24 maxlen: 24
45.39.64.0/24 maxlen: 24
45.39.90.0/24 maxlen: 24
50.117.38.0/24 maxlen: 24
50.118.202.0/24 maxlen: 24
104.252.9.0/24 maxlen: 24
104.252.104.0/24 maxlen: 24
104.252.106.0/24 maxlen: 24
104.252.180.0/24 maxlen: 24
104.252.248.0/24 maxlen: 24
104.253.42.0/24 maxlen: 24
104.253.45.0/24 maxlen: 24
104.253.61.0/24 maxlen: 24
104.253.100.0/24 maxlen: 24
104.253.101.0/24 maxlen: 24
104.253.107.0/24 maxlen: 24
104.253.110.0/24 maxlen: 24
136.0.74.0/24 maxlen: 24
136.0.79.0/24 maxlen: 24
136.0.125.0/24 maxlen: 24
142.252.118.0/24 maxlen: 24
142.252.130.0/24 maxlen: 24
142.252.134.0/24 maxlen: 24
142.252.136.0/24 maxlen: 24
142.252.146.0/24 maxlen: 24
142.252.147.0/24 maxlen: 24
142.252.152.0/24 maxlen: 24
142.252.221.0/24 maxlen: 24
142.252.248.0/24 maxlen: 24
142.252.249.0/24 maxlen: 24
142.252.250.0/24 maxlen: 24
142.252.251.0/24 maxlen: 24
166.88.121.0/24 maxlen: 24
172.120.4.0/24 maxlen: 24
172.120.11.0/24 maxlen: 24
172.121.104.0/24 maxlen: 24
172.121.129.0/24 maxlen: 24
172.252.31.0/24 maxlen: 24
209.73.141.0/24 maxlen: 24
216.172.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:71:c6:8a:95:6e:d8:65:91:0d:ff:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 4 19:05:31 2024 GMT
Not After : Apr 3 18:05:31 2024 GMT
Subject: CN=34ce5824-81ea-45f6-89e6-e379d28bc73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:52:83:51:71:75:b8:2f:a8:e3:f0:57:7a:16:
6b:ed:d7:40:0f:80:14:39:e3:8b:25:89:7a:af:b8:
45:a3:bb:62:52:eb:5f:59:9b:74:54:c5:97:b1:08:
cb:36:d2:5f:69:e6:28:56:c3:37:a8:55:46:08:e6:
7e:d3:25:e6:ed:22:10:58:52:c8:a1:d3:56:21:82:
fd:67:c4:26:9a:49:c3:a1:18:f0:c9:8a:8d:18:26:
9e:5f:6e:6a:51:c7:78:79:fb:c2:b7:d9:36:69:bc:
37:33:50:24:93:45:7b:4b:ef:5c:16:26:60:8d:1d:
64:7a:9f:6a:62:ce:6a:47:fd:48:d4:46:1c:95:66:
5b:04:4e:93:cf:9f:4e:80:a0:97:be:65:e5:65:3f:
d3:c6:7b:a6:70:1d:86:df:d3:0a:5f:e9:3b:7e:da:
00:52:2c:48:02:93:d1:34:66:1c:6e:9b:84:33:3c:
9c:81:1b:70:cb:2c:6f:35:e9:fa:76:c4:ab:0b:01:
87:24:a5:cd:55:ff:b4:54:18:8c:84:97:ca:53:b4:
a9:a3:42:11:35:f5:68:32:26:bc:cd:d7:62:e1:ac:
38:83:f3:d7:46:1e:d2:e0:24:e1:c8:17:ab:62:40:
07:44:8a:9c:b8:20:e7:af:86:b6:9b:c4:17:53:6c:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:FA:62:B0:67:CD:28:D3:DF:42:24:20:74:C6:4B:BC:08:85:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47c42b9c-9036-3c1c-9780-f6c0fb641be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.15.0/24
23.27.19.0/24
23.27.170.0/24
23.27.221.0/24
23.27.223.0/24
23.27.226.0/24
23.230.249.0/24
45.38.252.0/24
45.39.64.0/24
45.39.90.0/24
50.117.38.0/24
50.118.202.0/24
104.252.9.0/24
104.252.104.0/24
104.252.106.0/24
104.252.177.0/24
104.252.180.0/24
104.252.248.0/24
104.253.42.0/24
104.253.45.0/24
104.253.61.0/24
104.253.100.0/23
104.253.107.0/24
104.253.110.0/24
136.0.74.0/24
136.0.79.0/24
136.0.125.0/24
142.252.118.0/24
142.252.130.0/24
142.252.134.0/24
142.252.136.0/24
142.252.146.0/23
142.252.152.0/24
142.252.221.0/24
142.252.248.0/22
166.88.121.0/24
172.120.4.0/24
172.120.11.0/24
172.121.104.0/24
172.121.129.0/24
172.252.31.0/24
209.73.141.0/24
216.172.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d1:2d:27:7b:72:64:40:17:de:32:18:9d:bc:e7:d5:7e:c5:
8f:d0:92:c3:04:e3:9c:d5:ec:aa:1e:45:63:8d:7b:e5:04:28:
d2:c2:3d:9b:9c:d9:02:3b:70:be:fe:b7:55:a2:33:85:4a:44:
16:3d:2c:91:ef:23:54:f8:a2:d5:d7:82:90:26:96:02:a9:57:
1d:f4:ef:e2:3d:0e:db:d3:ef:38:a2:50:eb:00:6c:25:3a:41:
d8:df:83:4e:06:b4:da:fc:78:c7:0d:73:80:ca:44:e7:00:d3:
c4:64:15:d7:6c:c8:6e:ea:2a:73:79:e4:af:38:54:9b:37:44:
df:a5:d2:6e:46:6d:85:2e:03:e1:4d:9d:22:dc:6d:98:6a:b7:
a0:cf:cd:33:ae:be:66:72:07:ae:2f:22:a4:c5:1f:38:6f:46:
e7:ee:61:08:cb:2c:da:de:32:32:71:ab:54:3b:81:8c:14:86:
4c:a1:b1:bd:7a:7f:84:db:d4:1b:57:67:67:ae:be:4b:7f:dd:
f3:2f:ad:a2:6c:8c:06:ed:55:ce:42:c8:a5:0f:53:80:99:42:
a1:e2:2c:c1:42:f1:ad:fa:ae:28:ae:96:c1:e2:a1:f3:4d:29:
83:ec:6f:87:e7:f7:60:29:d9:4a:e9:4f:f2:b3:ff:5c:78:7e:
a5:7e:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org