Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55883a34-0161-3034-af3a-330f8c050273.roa
File: 55883a34-0161-3034-af3a-330f8c050273.roa (raw, json)
Hash identifier: ONdPF6mxGtkR0Wpy44EnfiYwya95CoeP8607g4mNdAM=
Subject key identifier: F1:E9:17:AB:8C:42:D2:41:62:CF:AC:99:6B:06:7E:A7:6B:03:B5:C8
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844D2E530F8190E2C3B572AD000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55883a34-0161-3034-af3a-330f8c050273.roa
Signing time: Thu 08 Feb 2024 14:00:33 +0000
ROA not before: Thu 08 Feb 2024 14:00:33 +0000
ROA not after: Wed 08 May 2024 13:00:33 +0000
asID: 149440
IP address blocks: 166.88.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d2:e5:30:f8:19:0e:2c:3b:57:2a:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 8 14:00:33 2024 GMT
Not After : May 8 13:00:33 2024 GMT
Subject: CN=d2b8f84e-e6b0-4d2d-9d1a-475b32ada8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:dc:b8:22:45:43:a1:6d:2c:20:a9:d4:a7:
56:71:16:c9:90:ff:d2:a7:70:bd:38:a1:ea:7a:14:
87:4f:d1:f3:2e:51:16:77:7d:f4:2b:4e:c5:91:c2:
20:d4:b7:9d:c3:94:c8:dd:bd:9b:d5:fd:d4:b6:2a:
b8:ae:7f:9d:d8:54:86:e8:e0:77:19:cf:d8:ab:87:
f3:06:02:28:cd:41:a3:c6:63:77:03:74:57:2d:43:
bd:6c:34:2d:3b:60:6c:f2:53:87:4f:16:00:9b:89:
43:77:85:0f:91:be:65:60:4b:a8:a8:f2:b4:f5:e0:
e3:f1:6c:a7:33:11:40:eb:23:04:32:81:fd:20:bd:
f3:59:83:ea:31:8b:05:e6:51:a8:1f:0b:db:70:23:
39:6c:73:3d:79:39:98:97:ca:7c:f2:b5:59:57:c6:
34:4a:ae:c9:60:ab:d7:24:62:c4:be:4a:c3:a2:a9:
cc:9a:91:88:bd:42:38:8a:a9:9c:47:e1:99:cb:e5:
ae:c6:d2:39:85:7d:75:f2:b6:51:3f:b2:49:5a:d0:
22:d4:cc:7c:09:ec:c2:02:2c:59:82:bd:ad:96:b9:
e6:e5:26:db:f0:c8:75:b0:6f:ac:f1:25:87:7b:2c:
dd:ca:5d:88:5b:ca:fc:8d:31:76:6e:2b:12:06:bf:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:17:AB:8C:42:D2:41:62:CF:AC:99:6B:06:7E:A7:6B:03:B5:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55883a34-0161-3034-af3a-330f8c050273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:84:fb:37:97:5b:82:72:1f:b8:56:ac:1e:07:75:d8:46:43:
42:92:ac:9d:57:69:27:19:a2:ec:85:95:03:7b:73:05:dc:08:
6c:74:14:a4:8e:8d:cc:cf:31:d3:5b:93:35:f0:79:34:1c:b5:
5c:1d:2d:60:43:35:b2:2c:ca:43:75:26:28:e6:30:0e:5e:b1:
56:7b:76:94:9c:b5:c4:c6:6d:68:58:ee:ac:44:a2:83:8f:e4:
c6:7c:fc:53:31:b5:17:0b:3d:96:70:7b:80:ff:64:7a:9e:7b:
01:e3:e1:57:22:5d:4b:d0:8c:60:3a:43:8e:bb:e2:c2:58:54:
ca:d1:18:aa:03:ba:af:84:d1:2a:a7:14:61:7b:0b:47:4f:82:
29:87:5f:6a:f1:55:b0:83:ea:1d:08:29:73:ad:b8:92:a4:ea:
91:9c:f5:76:6b:7a:cd:f4:2a:00:7f:f2:9b:d0:1f:3a:63:c4:
ce:ab:1b:ea:b0:a2:23:78:da:59:71:9e:1a:50:a7:05:36:59:
e8:67:dc:fc:da:99:b2:29:90:ee:4b:71:80:d1:61:2a:cb:51:
2a:a7:0f:d2:41:bd:62:42:ee:52:00:2f:d1:af:11:f8:2a:59:
59:50:ba:57:19:91:7b:58:a5:e8:f0:d7:57:8b:76:79:d0:5b:
60:d2:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org