Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d73fdde-7f6a-37b5-84ee-fd04d8db0638.roa
File: 5d73fdde-7f6a-37b5-84ee-fd04d8db0638.roa (raw, json)
Hash identifier: mlg/0APEOm/baPdJWvHOeCMuHzexU2ETyNnZXf/zWDE=
Subject key identifier: 7C:DD:1C:6F:6F:62:63:3B:D1:C9:31:87:E5:A2:61:87:B5:AC:8B:F5
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583DF40CDF42BD4D51916783EE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d73fdde-7f6a-37b5-84ee-fd04d8db0638.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 21 Aug 2024 04:00:00 +0000
asID: 22773
IP address blocks: 166.88.173.0/24 maxlen: 24
166.88.186.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f4:0c:df:42:bd:4d:51:91:67:83:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 21 04:00:00 2024 GMT
Subject: CN=f8618bf7-c8d8-4210-87ad-eca897ae6645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:d7:9b:48:cf:58:95:0d:68:d5:ee:fc:2e:
78:fd:ac:7d:68:ae:12:d6:62:1a:41:4e:10:3e:58:
bb:d6:7b:80:69:f8:10:5e:96:e6:79:03:08:90:39:
b3:32:7e:5d:a4:ef:a0:39:97:08:41:46:0d:a9:2b:
aa:0a:83:e2:d8:66:2f:52:9d:a0:af:d1:58:ad:fc:
70:06:77:2b:32:57:93:64:2a:20:fe:2b:5e:f2:0c:
33:88:a5:2b:95:8a:64:1f:e6:04:fa:67:d2:c2:3b:
3f:98:95:58:5e:1b:74:e7:4a:01:38:ad:ad:fb:4a:
aa:11:69:a2:0c:bf:9f:8a:9d:ba:c4:c7:69:1e:c0:
e5:26:b1:b9:23:5f:4b:ad:5c:03:cb:65:8c:bc:74:
9f:9a:9e:3a:12:aa:00:22:63:0c:12:2e:0e:56:8c:
c4:04:fa:64:be:6c:0a:09:d0:64:67:b8:7a:04:47:
bb:d0:fe:da:94:3c:4d:62:59:e3:e4:0f:e4:c9:e5:
61:39:bf:14:bf:95:93:1b:62:db:f5:da:b4:04:96:
5d:2f:4c:00:be:42:99:1b:d2:e1:ed:97:6d:0e:6b:
49:5e:45:d2:3a:58:4f:4b:26:5d:6f:bb:43:c1:ab:
e6:f5:81:dd:8f:cf:be:43:5e:72:a1:0d:92:61:a0:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:1C:6F:6F:62:63:3B:D1:C9:31:87:E5:A2:61:87:B5:AC:8B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d73fdde-7f6a-37b5-84ee-fd04d8db0638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.173.0/24
166.88.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e9:db:ba:fb:7b:b3:3c:86:71:22:98:87:bc:e7:c9:2f:aa:
8d:5b:f6:6a:5d:b3:d6:1a:9f:ac:49:be:6f:f2:99:3a:9f:1c:
0a:c8:ef:75:11:92:c2:5c:5d:1c:f6:08:5a:1c:67:2c:c4:da:
8c:32:36:1e:5c:38:c2:9b:9d:97:b6:b6:a2:e0:0b:e1:ad:ed:
04:d3:6e:94:29:73:bf:b9:9d:c4:77:5e:6d:59:d2:91:09:40:
f7:ea:6e:d8:9d:30:4e:51:49:74:43:1c:a1:ae:80:0d:46:ff:
6f:ea:86:66:d5:3b:7f:fa:1e:8e:95:99:b1:6b:d6:b2:1d:cd:
a6:71:12:1a:35:50:7b:31:bd:10:f3:69:9e:ce:c9:4c:28:5a:
e3:01:ed:ac:82:06:cf:75:f4:1a:bb:b6:0d:a3:b5:08:77:81:
2f:13:e3:e4:e7:95:19:18:01:21:96:95:3d:c5:e6:8a:00:f4:
c8:08:f7:51:ed:49:3c:90:50:c8:5f:b7:cf:d7:4c:0d:85:14:
f4:ea:11:1c:6d:15:4f:b7:4a:c0:4b:da:75:8d:c8:28:07:38:
31:8f:4d:43:b1:71:d1:b1:27:f5:e9:1d:1f:ea:04:23:45:c2:
1f:6d:19:51:92:26:84:30:67:63:8c:68:53:e6:4e:da:81:92:
ea:ca:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:07 2024 by rpki-client on console-ams.rpki-client.org