Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60c2b7bc-7113-3b5a-a187-3ead900b0e13.roa
File: 60c2b7bc-7113-3b5a-a187-3ead900b0e13.roa (raw, json)
Hash identifier: 4q/LgiQGdgjndoqbQSpWCajFxSf51WP2cLzCqNgm7i0=
Subject key identifier: 37:5C:BE:2A:AB:D9:E5:7F:48:E0:9E:8D:2A:FB:DE:3B:75:7D:B4:01
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844D7151AE4374C75F9C33D7A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60c2b7bc-7113-3b5a-a187-3ead900b0e13.roa
Signing time: Sat 10 Feb 2024 02:00:26 +0000
ROA not before: Sat 10 Feb 2024 02:00:26 +0000
ROA not after: Fri 10 May 2024 01:00:26 +0000
asID: 59329
IP address blocks: 136.0.77.0/24 maxlen: 24
45.38.24.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d7:15:1a:e4:37:4c:75:f9:c3:3d:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 02:00:26 2024 GMT
Not After : May 10 01:00:26 2024 GMT
Subject: CN=009494e0-a8a5-4576-8a19-f46263dd030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:cb:5a:79:d7:26:12:78:07:df:45:03:2b:
e0:9d:67:82:13:c6:d8:be:1e:d5:9a:75:b4:93:44:
0c:f0:4d:fb:5c:92:a1:27:04:2d:fd:19:82:ec:b9:
58:49:39:d0:07:2c:2b:bf:7a:f7:90:2c:1e:56:fe:
ae:df:4b:f3:1d:2f:48:87:c4:73:cb:c1:36:f9:1a:
28:1f:e6:9e:38:84:ae:50:e1:d5:63:b5:ee:2f:0d:
e8:bd:e3:13:a4:44:ff:03:76:1b:ce:b3:56:cb:9b:
4a:5a:41:8f:7a:3b:e2:4d:c9:dd:da:b2:7b:7e:f4:
86:23:82:19:02:4a:ca:7b:79:62:5b:cb:3b:34:92:
14:d6:41:58:de:ac:ed:69:47:e0:43:15:bc:ff:b7:
28:65:5f:34:a4:d6:d4:8d:fe:14:37:63:31:36:44:
e2:34:77:e7:93:32:c6:6a:04:2e:db:d4:45:f8:30:
a6:30:2a:78:74:6c:87:c2:54:1c:59:27:e8:1b:da:
a2:f2:87:45:cd:35:6e:51:10:08:ce:6e:40:85:17:
79:70:08:78:ca:b3:f3:60:51:33:35:dd:c8:d7:83:
63:14:a7:d0:2d:b6:d9:c9:c0:51:0a:d5:d8:e7:e6:
cb:a0:79:3c:83:5a:a5:aa:85:15:dd:4d:ac:f8:52:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:BE:2A:AB:D9:E5:7F:48:E0:9E:8D:2A:FB:DE:3B:75:7D:B4:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60c2b7bc-7113-3b5a-a187-3ead900b0e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.24.0/24
136.0.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:0d:f2:15:95:48:a8:bf:7d:4c:3e:a7:d2:20:a6:c8:20:01:
04:7a:7d:76:9c:c0:73:60:98:4e:9f:7e:50:0a:d2:e5:19:19:
1b:5e:59:61:38:75:6a:a5:a3:c6:f8:e1:f8:f6:c6:41:b8:d6:
93:05:f5:27:bd:01:1f:a6:16:51:ef:a3:74:9e:36:33:ff:0d:
c4:2b:ca:4d:42:b8:a9:a1:17:f5:2c:50:f2:d1:95:2f:ca:7f:
b9:df:07:59:bd:40:b1:7f:67:cb:a2:cb:ea:98:45:1f:d9:2c:
29:21:18:ad:12:6e:ed:20:33:8b:86:63:a2:cf:f2:d3:91:71:
96:1b:75:60:ad:70:54:f3:4c:2c:75:ad:21:dc:ef:e5:d9:b8:
a4:5a:73:72:a1:cd:4e:b5:75:6a:7b:aa:3d:98:22:ef:94:d1:
a4:ca:8b:25:3c:a4:c3:08:4f:96:b8:4f:5b:cc:70:41:5c:07:
d3:1a:80:36:e0:a5:da:67:03:85:65:a3:dc:a8:cd:76:59:3b:
87:48:83:30:92:42:fc:14:4b:ff:bd:cb:1d:38:b6:90:a4:1d:
bc:34:ea:5b:ec:bf:ed:fa:3b:d8:63:82:f9:59:55:5d:1d:f9:
60:98:64:55:d9:d3:4d:f6:21:23:07:f5:cb:da:e2:21:4b:b3:
4d:72:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org