Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/54770ed3-3bea-3a8e-9829-da3e0def241b.roa
File: 54770ed3-3bea-3a8e-9829-da3e0def241b.roa (raw, json)
Hash identifier: uOCsGz25LfqVMxhspwG/0G13WO5ol7OBqGM1VHn2nq0=
Subject key identifier: 9B:AC:ED:F0:98:77:B0:4C:AF:33:73:6B:E2:5D:9A:FA:AD:30:21:59
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584513749EE5959722C844EDCD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/54770ed3-3bea-3a8e-9829-da3e0def241b.roa
Signing time: Sat 02 Mar 2024 17:01:25 +0000
ROA not before: Sat 02 Mar 2024 17:01:25 +0000
ROA not after: Fri 31 May 2024 16:01:25 +0000
asID: 1239
IP address blocks: 136.0.45.0/24 maxlen: 24
136.0.65.0/24 maxlen: 24
142.111.242.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:13:74:9e:e5:95:97:22:c8:44:ed:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 2 17:01:25 2024 GMT
Not After : May 31 16:01:25 2024 GMT
Subject: CN=38382145-0afe-4ed2-a456-3f621836d25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:a5:52:b2:cb:7c:d1:8c:39:2a:de:eb:cb:
67:ae:a4:05:2a:0f:ed:c6:f8:23:84:fd:84:f2:42:
ac:c0:b1:ce:8c:5e:94:9b:29:a4:ae:45:ab:df:11:
a9:41:6f:08:36:9a:5e:b2:7b:d5:2c:4f:c1:fa:83:
a0:c2:73:a9:e9:c6:41:52:87:3b:30:2b:f7:04:59:
6a:41:ee:3c:ca:a6:ba:d8:7a:fe:2b:1e:69:0e:aa:
71:f5:87:55:43:c8:22:d7:53:f9:99:b9:6d:25:9e:
82:fc:d0:3d:12:5d:16:9d:e0:b7:23:b3:14:a0:e0:
e3:87:87:27:8f:45:d4:ce:3a:39:1c:67:e7:2c:85:
03:4b:83:37:e6:27:bd:6f:f2:b0:11:c3:eb:4d:ef:
4c:7c:23:2b:bd:94:c8:b5:7f:0d:fe:b6:8c:a7:98:
1d:62:ea:e4:b8:2c:4a:5a:4a:65:cb:b1:da:fd:22:
22:78:03:c8:dd:f5:e2:83:49:fc:67:d8:11:2c:96:
e0:70:13:36:f8:35:a8:b9:10:55:4b:79:1b:c6:e7:
84:37:2f:e2:5e:59:ac:4d:cd:b4:36:6f:c7:79:f6:
f5:00:c6:b5:f5:26:3e:b5:cc:65:9b:8c:33:79:4e:
d4:46:50:e7:75:23:dd:70:05:b4:8c:ca:53:00:a9:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:ED:F0:98:77:B0:4C:AF:33:73:6B:E2:5D:9A:FA:AD:30:21:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/54770ed3-3bea-3a8e-9829-da3e0def241b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.45.0/24
136.0.65.0/24
142.111.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:a0:d1:fd:a8:7a:c1:d8:71:fc:45:27:75:e0:b8:be:d8:69:
b6:c6:a3:90:7e:0e:3d:c6:9b:48:97:4d:af:0c:47:49:12:20:
ae:47:9a:87:e3:4d:ae:c5:4f:af:6e:d9:4b:11:98:d2:ea:d9:
28:23:f0:a5:16:10:e9:1b:ee:f9:c7:3d:f2:57:4e:25:85:e7:
45:d8:b0:8d:45:81:61:59:0d:f9:dd:cc:7d:bd:73:8e:41:cb:
c4:c0:43:aa:be:45:50:e6:32:f9:86:1c:21:14:32:96:ce:f1:
33:20:b4:8f:83:47:d7:83:50:a8:03:a9:c1:f1:b5:75:78:63:
77:f6:e0:58:9f:c2:73:f2:71:ca:79:47:47:7a:75:0b:13:d2:
b2:dc:c6:b2:e2:98:14:dd:76:c2:2a:1e:24:01:2a:56:72:89:
e7:2c:83:29:da:6c:11:71:92:fc:b7:5e:9b:97:83:d5:71:44:
17:d1:1f:7e:05:31:ed:0c:b4:5f:2e:51:5e:17:49:d2:00:ec:
46:13:0a:66:cf:8a:7b:96:a6:76:dd:c3:af:0c:f6:f2:5c:86:
9d:85:01:cd:7b:f9:6d:33:86:5f:34:0f:47:ed:8c:a5:13:05:
89:ff:b9:0a:02:a7:ad:19:c6:87:71:53:42:bc:a4:f9:f0:aa:
8c:67:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org