Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/680826dc-e15f-3756-af5d-d46c62f5c0de.roa
File: 680826dc-e15f-3756-af5d-d46c62f5c0de.roa (raw, json)
Hash identifier: JJNikXtgUphXB4qSnYy9bUYsfsxjbZ4uuk9/a+GGqC0=
Subject key identifier: 4A:73:2C:9F:F3:0B:DE:B9:DD:CF:38:68:09:C9:D2:02:10:3F:8F:48
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583C19FCAA581BA6CF3DB7A7C500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/680826dc-e15f-3756-af5d-d46c62f5c0de.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Mon 04 Mar 2024 05:00:00 +0000
asID: 54252
IP address blocks: 107.186.7.0/24 maxlen: 24
50.118.145.0/24 maxlen: 24
23.230.44.0/24 maxlen: 24
23.230.9.0/24 maxlen: 24
107.164.66.0/24 maxlen: 24
107.165.179.0/24 maxlen: 24
107.165.192.0/24 maxlen: 24
107.165.193.0/24 maxlen: 24
107.186.76.0/24 maxlen: 24
107.186.192.0/24 maxlen: 24
107.186.197.0/24 maxlen: 24
136.0.36.0/24 maxlen: 24
136.0.46.0/24 maxlen: 24
136.0.49.0/24 maxlen: 24
136.0.59.0/24 maxlen: 24
136.0.63.0/24 maxlen: 24
136.0.90.0/24 maxlen: 24
136.0.95.0/24 maxlen: 24
136.0.110.0/24 maxlen: 24
136.0.116.0/24 maxlen: 24
136.0.124.0/24 maxlen: 24
136.0.194.0/24 maxlen: 24
136.0.225.0/24 maxlen: 24
136.0.243.0/24 maxlen: 24
142.111.3.0/24 maxlen: 24
142.111.142.0/24 maxlen: 24
142.111.147.0/24 maxlen: 24
142.111.152.0/24 maxlen: 24
142.111.172.0/24 maxlen: 24
142.111.244.0/24 maxlen: 24
142.252.26.0/24 maxlen: 24
142.252.37.0/24 maxlen: 24
142.252.198.0/24 maxlen: 24
142.252.223.0/24 maxlen: 24
166.88.31.0/24 maxlen: 24
166.88.58.0/24 maxlen: 24
166.88.68.0/24 maxlen: 24
166.88.122.0/24 maxlen: 24
166.88.164.0/24 maxlen: 24
166.88.171.0/24 maxlen: 24
166.88.213.0/24 maxlen: 24
166.88.232.0/24 maxlen: 24
166.88.248.0/24 maxlen: 24
172.121.99.0/24 maxlen: 24
172.121.142.0/24 maxlen: 24
172.252.0.0/24 maxlen: 24
172.252.1.0/24 maxlen: 24
172.252.16.0/24 maxlen: 24
172.252.125.0/24 maxlen: 24
172.252.133.0/24 maxlen: 24
172.252.143.0/24 maxlen: 24
172.252.144.0/24 maxlen: 24
172.252.158.0/24 maxlen: 24
172.252.163.0/24 maxlen: 24
172.252.181.0/24 maxlen: 24
172.252.196.0/24 maxlen: 24
172.252.213.0/24 maxlen: 24
172.252.224.0/24 maxlen: 24
172.252.228.0/24 maxlen: 24
172.252.231.0/24 maxlen: 24
172.252.232.0/24 maxlen: 24
192.177.81.0/24 maxlen: 24
192.177.93.0/24 maxlen: 24
192.177.99.0/24 maxlen: 24
205.164.19.0/24 maxlen: 24
205.164.22.0/24 maxlen: 24
209.73.139.0/24 maxlen: 24
209.73.140.0/24 maxlen: 24
107.164.12.0/24 maxlen: 24
104.253.149.0/24 maxlen: 24
104.253.171.0/24 maxlen: 24
104.253.134.0/24 maxlen: 24
104.253.137.0/24 maxlen: 24
104.252.179.0/24 maxlen: 24
104.252.253.0/24 maxlen: 24
104.165.152.0/24 maxlen: 24
104.165.237.0/24 maxlen: 24
50.118.158.0/24 maxlen: 24
104.165.86.0/24 maxlen: 24
50.118.138.0/24 maxlen: 24
50.117.56.0/24 maxlen: 24
50.117.66.0/24 maxlen: 24
45.39.255.0/24 maxlen: 24
23.230.21.0/24 maxlen: 24
23.27.186.0/24 maxlen: 24
23.27.131.0/24 maxlen: 24
23.27.169.0/24 maxlen: 24
23.27.174.0/24 maxlen: 24
23.27.250.0/24 maxlen: 24
23.230.12.0/24 maxlen: 24
23.230.41.0/24 maxlen: 24
23.230.69.0/24 maxlen: 24
45.38.171.0/24 maxlen: 24
45.38.222.0/24 maxlen: 24
45.39.115.0/24 maxlen: 24
45.39.182.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:19:fc:aa:58:1b:a6:cf:3d:b7:a7:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Mar 4 05:00:00 2024 GMT
Subject: CN=44b55ab7-cf18-49e0-960d-c6412afcb66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:f9:2d:3e:da:2f:68:a7:87:fc:5e:36:eb:
6a:f0:37:98:fa:80:78:18:1f:e8:cc:3e:de:2d:0a:
f7:c7:dd:43:41:6e:26:9d:5d:d9:b7:3f:e6:3c:e0:
9a:fd:aa:72:9c:fb:5b:3d:c6:87:b1:69:a8:3c:79:
69:03:81:4b:25:d7:b5:dd:58:ce:eb:46:a0:b0:55:
f8:b9:fd:c9:f2:e7:ee:48:e2:dd:02:94:6b:c2:39:
ba:73:d4:a2:51:aa:8e:25:96:26:df:35:87:9d:41:
21:62:7c:06:51:8a:eb:0e:8c:41:c9:fe:fb:eb:f5:
54:ca:6e:32:9c:b6:cb:d6:66:29:dc:9e:65:9f:f9:
18:62:f0:39:51:8c:c5:8d:55:b8:a8:ae:66:af:b8:
0d:11:06:1a:a7:be:01:d0:9c:3b:59:5e:dc:b3:62:
a6:5a:80:17:34:94:fb:3e:29:56:5d:48:0a:00:3e:
f5:d2:4a:f9:7e:f3:56:b4:d0:f6:5b:fc:e3:03:f3:
99:ea:9d:60:2a:d2:75:cb:d3:51:5d:b1:e8:30:02:
24:01:57:89:3f:60:8a:13:6a:c7:27:8b:38:0d:04:
f4:37:55:76:09:c1:2c:f4:df:dd:83:5b:d2:cc:3f:
6f:21:ea:06:f5:2d:75:3c:1f:c5:a6:31:10:a7:06:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:2C:9F:F3:0B:DE:B9:DD:CF:38:68:09:C9:D2:02:10:3F:8F:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/680826dc-e15f-3756-af5d-d46c62f5c0de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.131.0/24
23.27.169.0/24
23.27.174.0/24
23.27.186.0/24
23.27.250.0/24
23.230.9.0/24
23.230.12.0/24
23.230.21.0/24
23.230.41.0/24
23.230.44.0/24
23.230.69.0/24
45.38.171.0/24
45.38.222.0/24
45.39.115.0/24
45.39.182.0/24
45.39.255.0/24
50.117.56.0/24
50.117.66.0/24
50.118.138.0/24
50.118.145.0/24
50.118.158.0/24
104.165.86.0/24
104.165.152.0/24
104.165.237.0/24
104.252.179.0/24
104.252.253.0/24
104.253.134.0/24
104.253.137.0/24
104.253.149.0/24
104.253.171.0/24
107.164.12.0/24
107.164.66.0/24
107.165.179.0/24
107.165.192.0/23
107.186.7.0/24
107.186.76.0/24
107.186.192.0/24
107.186.197.0/24
136.0.36.0/24
136.0.46.0/24
136.0.49.0/24
136.0.59.0/24
136.0.63.0/24
136.0.90.0/24
136.0.95.0/24
136.0.110.0/24
136.0.116.0/24
136.0.124.0/24
136.0.194.0/24
136.0.225.0/24
136.0.243.0/24
142.111.3.0/24
142.111.142.0/24
142.111.147.0/24
142.111.152.0/24
142.111.172.0/24
142.111.244.0/24
142.252.26.0/24
142.252.37.0/24
142.252.198.0/24
142.252.223.0/24
166.88.31.0/24
166.88.58.0/24
166.88.68.0/24
166.88.122.0/24
166.88.164.0/24
166.88.171.0/24
166.88.213.0/24
166.88.232.0/24
166.88.248.0/24
172.121.99.0/24
172.121.142.0/24
172.252.0.0/23
172.252.16.0/24
172.252.125.0/24
172.252.133.0/24
172.252.143.0-172.252.144.255
172.252.158.0/24
172.252.163.0/24
172.252.181.0/24
172.252.196.0/24
172.252.213.0/24
172.252.224.0/24
172.252.228.0/24
172.252.231.0-172.252.232.255
192.177.81.0/24
192.177.93.0/24
192.177.99.0/24
205.164.19.0/24
205.164.22.0/24
209.73.139.0-209.73.140.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:6f:e6:4c:a1:5f:31:24:dd:28:fe:6c:9c:6e:a2:06:24:f7:
47:bd:0b:15:0d:c6:a9:bf:3b:88:f2:62:35:5b:dc:7d:16:e4:
89:8e:ff:02:cf:32:a8:e8:95:df:cb:93:fb:b4:7b:4e:21:09:
9d:08:31:7a:9d:26:08:09:17:04:26:f6:02:e8:61:ec:f8:18:
45:b5:14:04:32:f9:e1:79:0b:96:85:0f:7f:1c:3e:96:a6:bb:
57:90:13:85:ed:fc:fe:7b:1e:98:65:c5:e0:f3:61:50:08:89:
30:f2:f2:05:ca:53:6b:bb:35:93:24:11:f5:88:ef:af:cc:df:
1c:0a:c4:b6:c4:db:c0:ab:35:76:55:11:22:1d:e5:b7:2e:f9:
54:ca:e4:58:8e:60:6d:d8:8c:96:c6:bd:ec:09:f6:c0:85:16:
1a:d4:65:bc:c5:db:b2:cf:cd:f4:5b:f2:cf:c4:67:96:7b:da:
6a:46:60:a8:c3:52:39:46:0f:64:95:a7:5f:13:d4:30:32:b3:
ec:b1:49:5c:fe:3d:a9:33:71:62:dc:a8:e8:3e:3e:da:66:62:
23:2c:26:0a:0f:1a:92:06:63:4f:98:31:c1:14:af:33:32:11:
f8:09:ab:75:a0:62:a4:5b:3c:d0:55:2e:6d:8d:f3:96:8a:f5:
f3:51:75:ea
-----BEGIN CERTIFICATE-----
MIIIgTCCB2mgAwIBAgIUAQ0Mn0MoWDwZ/KpYG6bPPbenxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTI0MDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDRiNTVhYjctY2YxOC00OWUwLTk2MGQtYzY0MTJhZmNiNjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbb5LT7aL2inh/xeNutq8DeY+oB4GB/ozD7e
LQr3x91DQW4mnV3Ztz/mPOCa/apynPtbPcaHsWmoPHlpA4FLJde13VjO60agsFX4
uf3J8ufuSOLdApRrwjm6c9SiUaqOJZYm3zWHnUEhYnwGUYrrDoxByf776/VUym4y
nLbL1mYp3J5ln/kYYvA5UYzFjVW4qK5mr7gNEQYap74B0Jw7WV7cs2KmWoAXNJT7
PilWXUgKAD710kr5fvNWtND2W/zjA/OZ6p1gKtJ1y9NRXbHoMAIkAVeJP2CKE2rH
J4s4DQT0N1V2CcEs9N/dg1vSzD9vIeoG9S11PB/FpjEQpwa/xwIDAQABo4IFkzCC
BY8wHQYDVR0OBBYEFEpzLJ/zC9653c84aAnJ0gIQP49IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjgwODI2ZGMtZTE1Zi0z
NzU2LWFmNWQtZDQ2YzYyZjVjMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIICWwYIKwYBBQUHAQcBAf8EggJKMIICRjCCAkIEAgABMIIC
OgMEABcbgwMEABcbqQMEABcbrgMEABcbugMEABcb+gMEABfmCQMEABfmDAMEABfm
FQMEABfmKQMEABfmLAMEABfmRQMEAC0mqwMEAC0m3gMEAC0ncwMEAC0ntgMEAC0n
/wMEADJ1OAMEADJ1QgMEADJ2igMEADJ2kQMEADJ2ngMEAGilVgMEAGilmAMEAGil
7QMEAGj8swMEAGj8/QMEAGj9hgMEAGj9iQMEAGj9lQMEAGj9qwMEAGukDAMEAGuk
QgMEAGulswMEAWulwAMEAGu6BwMEAGu6TAMEAGu6wAMEAGu6xQMEAIgAJAMEAIgA
LgMEAIgAMQMEAIgAOwMEAIgAPwMEAIgAWgMEAIgAXwMEAIgAbgMEAIgAdAMEAIgA
fAMEAIgAwgMEAIgA4QMEAIgA8wMEAI5vAwMEAI5vjgMEAI5vkwMEAI5vmAMEAI5v
rAMEAI5v9AMEAI78GgMEAI78JQMEAI78xgMEAI783wMEAKZYHwMEAKZYOgMEAKZY
RAMEAKZYegMEAKZYpAMEAKZYqwMEAKZY1QMEAKZY6AMEAKZY+AMEAKx5YwMEAKx5
jgMEAaz8AAMEAKz8EAMEAKz8fQMEAKz8hTAMAwQArPyPAwQArPyQAwQArPyeAwQA
rPyjAwQArPy1AwQArPzEAwQArPzVAwQArPzgAwQArPzkMAwDBACs/OcDBACs/OgD
BADAsVEDBADAsV0DBADAsWMDBADNpBMDBADNpBYwDAMEANFJiwMEANFJjDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQAPb+ZMoV8xJN0o/mycbqIGJPdHvQsVDcapvzuI8mI1W9x9FuSJjv8CzzKo
6JXfy5P7tHtOIQmdCDF6nSYICRcEJvYC6GHs+BhFtRQEMvnheQuWhQ9/HD6WprtX
kBOF7fz+ex6YZcXg82FQCIkw8vIFylNruzWTJBH1iO+vzN8cCsS2xNvAqzV2VREi
HeW3LvlUyuRYjmBt2IyWxr3sCfbAhRYa1GW8xduyz830W/LPxGeWe9pqRmCow1I5
Rg9kladfE9QwMrPssUlc/j2pM3Fi3KjoPj7aZmIjLCYKDxqSBmNPmDHBFK8zMhH4
Cat1oGKkWzzQVS5tjfOWivXzUXXq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:25 2024 by rpki-client on console-fra.rpki-client.org