Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48370823-de38-340b-a28e-483447e37124.roa
File: 48370823-de38-340b-a28e-483447e37124.roa (raw, json)
Hash identifier: /pfH8rxZqvh+9yh4XjwjjkMnAV9Lv251ZrMcsTCNNb8=
Subject key identifier: DA:20:8B:AC:5C:86:F9:A8:BE:6F:2F:08:1B:55:C4:F8:6D:89:7F:7E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858396DA24642DC2A269AF80EA980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48370823-de38-340b-a28e-483447e37124.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Mon 03 Jul 2023 04:00:00 +0000
asID: 5650
IP address blocks: 104.252.84.0/22 maxlen: 24
104.253.32.0/22 maxlen: 24
166.88.188.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:6d:a2:46:42:dc:2a:26:9a:f8:0e:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Jul 3 04:00:00 2023 GMT
Subject: CN=2a15aa9f-fa36-4915-a738-63237da93952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:9a:1e:14:98:92:9a:23:2a:f0:2d:30:b7:
a3:26:fa:26:3e:29:f3:a7:4b:f8:f2:d1:6c:66:fb:
a6:7f:e2:56:84:21:a7:f9:3e:bf:a7:a6:cc:78:81:
82:c8:16:84:03:a1:d7:19:d4:da:68:ea:34:21:77:
80:23:3a:86:60:45:66:ac:39:f4:cc:c3:3c:64:e6:
87:4e:92:f4:52:82:40:64:65:7f:fe:95:71:83:dd:
cf:2e:b0:e8:db:65:68:41:3d:3c:3f:96:d1:7b:5d:
3b:23:c4:21:04:a6:b4:49:c8:2b:01:3c:86:55:4c:
aa:68:c5:77:29:95:6e:54:27:03:5c:fa:8e:64:ed:
08:f1:b8:77:89:34:73:1d:bf:35:70:7d:db:11:0a:
1f:c4:21:5a:9f:b5:67:31:de:b8:e1:e6:d5:5b:17:
96:ac:b7:53:e5:7c:40:3e:1f:e2:ce:da:9b:a1:62:
24:17:15:a5:e6:2e:63:40:9b:39:4f:3e:7f:17:10:
5e:59:13:32:58:c4:59:13:26:29:e1:28:66:de:8d:
f1:bd:4d:09:fc:44:4b:d5:0c:65:7d:c7:b8:65:c1:
ea:df:c4:dd:cc:eb:83:b7:70:8b:6b:1c:c7:7b:03:
82:be:0d:ef:bf:50:4f:ce:60:ca:a9:e1:4a:ea:89:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:8B:AC:5C:86:F9:A8:BE:6F:2F:08:1B:55:C4:F8:6D:89:7F:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48370823-de38-340b-a28e-483447e37124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.84.0/22
104.253.32.0/22
166.88.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:3c:b5:d9:6b:a6:66:18:a3:71:2e:f3:11:b5:6c:aa:fb:68:
e8:96:d4:9a:4f:22:36:03:1a:ce:58:17:58:41:5d:61:e4:45:
36:92:10:83:e1:db:c1:83:a5:5c:76:83:6b:53:82:cd:ac:34:
f6:bc:26:d0:1e:95:40:bc:fb:fa:f9:87:05:ca:48:bb:23:fd:
a8:6c:81:f9:11:32:a8:9c:22:5c:89:ad:f1:4a:9f:82:a5:ed:
b9:af:39:47:b6:26:e0:f6:2c:9c:b6:76:cc:9d:90:38:5d:26:
43:36:c4:8e:92:e5:1d:22:1e:13:f4:f1:fa:1e:ee:39:ba:fe:
b3:67:94:88:b3:0b:4c:a7:e1:e7:89:04:7c:48:0b:9b:47:39:
e6:c9:89:8a:72:a2:7f:a1:e1:6c:8a:4e:4d:f2:15:bb:63:51:
eb:10:9c:86:e7:dd:72:d0:cc:8f:5a:28:9c:0f:d7:a9:a4:46:
dc:f1:0b:f6:9f:d0:91:89:db:e2:e1:f4:7e:4a:ac:5d:88:db:
77:53:5a:d5:b7:a4:d4:5b:32:2c:f4:28:5e:ea:d4:c6:2e:ef:
55:d1:9b:04:b7:6a:e7:3a:4a:72:aa:fc:ba:6b:7d:03:86:91:
55:47:05:1d:91:77:fa:47:8f:d4:df:3d:1f:a8:c1:ab:f6:d6:
f5:f2:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:22 2024 by rpki-client on console-fra.rpki-client.org