Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/560768c8-03b1-388f-99e6-073b979a1b6d.roa
File: 560768c8-03b1-388f-99e6-073b979a1b6d.roa (raw, json)
Hash identifier: AeO9UPXA8DW2a6/s4dNFkv8HjiAzSR9vUwoo+NP0rsY=
Subject key identifier: 78:BA:43:12:9A:51:2B:59:75:20:23:1E:74:00:25:FE:71:EB:4A:0D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285843263F47B1E92E8BA9C00A6C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/560768c8-03b1-388f-99e6-073b979a1b6d.roa
Signing time: Fri 08 Sep 2023 01:00:23 +0000
ROA not before: Fri 08 Sep 2023 01:00:23 +0000
ROA not after: Thu 07 Dec 2023 02:00:23 +0000
asID: 5650
IP address blocks: 45.38.211.0/24 maxlen: 24
107.165.227.0/24 maxlen: 24
107.164.5.0/24 maxlen: 24
23.230.47.0/24 maxlen: 24
23.230.45.0/24 maxlen: 24
23.27.235.0/24 maxlen: 24
104.253.19.0/24 maxlen: 24
104.252.100.0/24 maxlen: 24
104.252.17.0/24 maxlen: 24
104.165.197.0/24 maxlen: 24
104.165.141.0/24 maxlen: 24
104.165.121.0/24 maxlen: 24
104.164.196.0/24 maxlen: 24
45.39.238.0/24 maxlen: 24
45.39.80.0/24 maxlen: 24
45.39.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:26:3f:47:b1:e9:2e:8b:a9:c0:0a:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 8 01:00:23 2023 GMT
Not After : Dec 7 02:00:23 2023 GMT
Subject: CN=4762a237-bdae-43fb-8c27-326e7360cd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:9c:3c:85:4a:a2:63:f9:e8:d7:12:ae:db:
9b:20:66:c6:48:73:70:5f:7b:19:b5:92:cb:30:f0:
25:89:bc:a6:b9:78:10:20:25:69:93:db:38:c6:ce:
32:d6:63:f2:a8:cf:9a:38:86:e1:1b:1a:7e:78:a9:
c8:dd:b5:09:8e:be:21:72:8b:c3:91:24:93:5b:df:
42:49:22:e3:61:b6:a4:f4:ae:90:46:5f:57:f3:8e:
f8:46:33:ed:3a:5d:37:fe:0e:ae:73:5c:c0:55:12:
a0:35:e1:37:b6:11:a3:9a:7f:c3:5d:13:68:a0:07:
57:45:4c:f9:20:3d:7f:ba:eb:c1:c8:06:3b:23:dc:
cc:96:c5:aa:91:c2:21:6d:6f:28:0f:7b:4a:f4:1e:
d7:14:0f:93:5a:51:ae:55:91:6a:df:3f:3e:8f:22:
cb:7a:d2:99:a7:1e:19:25:b3:86:b0:94:31:60:4e:
29:cc:6b:e4:c9:8c:98:98:c9:4f:2a:fb:d1:e0:0d:
b3:29:01:37:eb:78:17:d2:12:3b:45:2a:19:6a:bc:
31:04:91:c0:07:3f:e2:b1:43:44:60:f0:dc:5c:dc:
d8:77:ee:48:f8:e0:3b:bd:cd:4a:0f:60:a5:a3:0c:
54:f8:3a:fc:0b:11:4c:14:fd:d2:c5:25:a0:96:52:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:43:12:9A:51:2B:59:75:20:23:1E:74:00:25:FE:71:EB:4A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/560768c8-03b1-388f-99e6-073b979a1b6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.235.0/24
23.230.45.0/24
23.230.47.0/24
45.38.211.0/24
45.39.61.0/24
45.39.80.0/24
45.39.238.0/24
104.164.196.0/24
104.165.121.0/24
104.165.141.0/24
104.165.197.0/24
104.252.17.0/24
104.252.100.0/24
104.253.19.0/24
107.164.5.0/24
107.165.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:42:0f:0a:4c:b7:d5:2c:7c:20:cd:5d:a3:f6:36:24:e3:81:
1c:46:93:1b:31:32:43:fc:04:e7:e2:17:2b:53:39:80:9f:96:
a8:18:a3:22:b6:ac:4c:3b:77:45:3c:3b:32:ae:d6:c0:31:2a:
4d:73:18:5c:40:66:8f:40:61:7a:3c:47:02:20:31:ee:7e:76:
08:48:66:88:84:58:6a:0f:f2:a9:ba:90:8b:fa:0a:f5:1c:3a:
df:73:9f:62:35:3b:da:96:f3:44:a7:87:6b:93:aa:e3:d2:c0:
35:2b:4a:93:56:a1:03:c6:68:4d:db:9a:2b:b1:d1:6c:42:10:
a0:60:8e:5e:33:db:45:a6:ef:a2:3e:f4:a9:d6:5f:6a:5a:a1:
4b:e7:52:fe:ea:6d:0f:29:50:60:90:9b:8e:30:12:bf:a8:45:
d4:24:1c:a3:c2:d2:c2:6f:1f:79:31:28:6c:0a:2e:e0:6e:bb:
30:98:d5:fd:0f:fb:fe:03:17:22:b4:8d:3c:11:56:a5:53:08:
77:5a:8d:f2:d4:17:73:76:d3:70:bc:bc:27:df:e7:69:e2:5e:
e1:fd:54:98:ed:55:e3:96:72:a5:36:0b:b3:72:73:0a:b5:88:
93:0c:6b:52:cd:52:1f:de:b6:33:32:f3:c0:fd:39:74:d2:b6:
73:a2:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:07 2024 by rpki-client on console-ams.rpki-client.org