Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5abf0184-7109-34d6-9c70-930c4133cc04.roa
File: 5abf0184-7109-34d6-9c70-930c4133cc04.roa (raw, json)
Hash identifier: /aGpPkmFZpVFjC+NXxBkFkuzuZnbHweih6naSkTcscY=
Subject key identifier: AD:AB:28:3D:42:D9:C4:93:73:0A:64:61:6D:57:4E:A7:75:27:45:7C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858422FE99F36C147E1828BFD2100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5abf0184-7109-34d6-9c70-930c4133cc04.roa
Signing time: Sun 11 Jun 2023 19:18:58 +0000
ROA not before: Sun 11 Jun 2023 19:18:58 +0000
ROA not after: Sat 09 Sep 2023 19:18:58 +0000
asID: 15731
IP address blocks: 136.0.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2f:e9:9f:36:c1:47:e1:82:8b:fd:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jun 11 19:18:58 2023 GMT
Not After : Sep 9 19:18:58 2023 GMT
Subject: CN=044b13b0-ae5b-496c-89d2-757e49dd5df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:43:9a:a3:2e:70:17:92:8e:ea:95:0f:df:
ea:50:2a:16:72:7b:21:19:af:5a:c2:bb:89:b3:a9:
0c:e3:37:5a:0e:33:43:a2:0d:98:c8:86:33:ef:4d:
df:9d:3f:b9:23:c4:0d:70:c9:98:4e:c2:39:4b:98:
91:0e:8b:b0:9c:d4:8d:43:4c:4d:db:9d:c0:8e:20:
c8:12:6c:2d:55:ef:bc:95:a3:83:d5:ed:35:b0:8b:
80:b7:1e:e1:a5:60:3a:9f:cb:c3:97:da:d0:c3:54:
f3:f3:57:51:de:f7:0c:80:c3:ff:48:e2:6d:9d:99:
84:e5:ce:da:6e:a7:41:5f:c4:69:17:79:c6:35:99:
c6:41:2b:40:f5:c4:5f:e2:dc:9b:fb:99:3d:1f:ac:
50:e5:74:85:de:f1:29:7d:bb:7d:f7:66:55:17:f0:
da:d6:51:a7:3e:98:be:60:e5:8d:ee:f0:b1:bc:a0:
73:ec:67:ae:3a:9e:77:4f:0e:2e:2e:c7:66:50:c7:
fe:13:59:e2:fc:11:5f:4e:ec:ac:b9:25:c0:f8:90:
f7:61:c2:9c:23:2d:22:4d:1b:3c:43:37:71:dd:b5:
10:36:8a:61:24:5f:e3:d2:b5:b1:91:4f:ab:18:88:
f3:2d:85:2d:76:63:df:d0:88:3c:a2:4d:9a:68:72:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AB:28:3D:42:D9:C4:93:73:0A:64:61:6D:57:4E:A7:75:27:45:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5abf0184-7109-34d6-9c70-930c4133cc04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f2:1e:69:e8:e1:4e:18:5e:cc:95:0b:88:75:20:6f:82:22:
79:d6:4a:22:f6:3b:82:85:73:b8:80:98:be:66:e4:ab:0f:e5:
cc:f8:a5:25:34:f2:8e:24:30:80:46:97:73:96:0d:72:70:c3:
b8:e2:c6:af:ae:6b:d5:34:90:c9:2f:f3:5e:90:3b:1b:51:ae:
b5:a4:65:d1:8b:4c:00:9f:8a:8a:d0:fe:14:ac:98:d5:33:d7:
01:04:6c:f4:e5:e3:0b:89:5a:41:82:d6:1f:76:12:d5:6f:d0:
b1:06:54:a4:e7:07:36:4e:f0:c7:55:b2:3b:16:c0:61:78:d5:
72:ff:24:24:95:14:fc:15:8f:d0:ba:1b:91:2e:e6:a3:b9:44:
1c:4d:6e:db:ca:ba:e2:cf:42:e3:5a:35:61:f9:95:9b:6e:a3:
ba:22:59:50:9d:ee:5d:d0:86:a0:f0:63:ea:55:f9:6b:58:6e:
20:80:4b:e1:5f:c8:43:91:47:0d:33:c3:f8:5a:f3:3a:50:c1:
0e:8a:25:24:15:91:1a:82:96:27:79:92:32:d7:a2:62:ba:9e:
9f:0e:6f:4d:0f:b9:02:93:24:03:c5:d2:4d:08:53:80:16:3e:
1d:81:a2:e4:28:91:76:3b:40:1c:91:36:c4:a5:65:58:7b:da:
29:e3:c8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:07 2024 by rpki-client on console-ams.rpki-client.org