Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6bed8645-a46d-35af-9c33-fcae693b35c1.roa
File: 6bed8645-a46d-35af-9c33-fcae693b35c1.roa (raw, json)
Hash identifier: c7mGIce8qiWbuvm5nfiTBU/DYTPhGt4ekjyqqIEh4gg=
Subject key identifier: 08:DE:A8:B4:9F:29:5C:33:F8:BE:26:FC:95:ED:17:E4:C2:EA:0B:A6
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841163F92BF5E6ECD182E03B880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6bed8645-a46d-35af-9c33-fcae693b35c1.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 04 Jun 2025 04:00:00 +0000
asID: 1239
IP address blocks: 136.0.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:16:3f:92:bf:5e:6e:cd:18:2e:03:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jun 4 04:00:00 2025 GMT
Subject: CN=f0fd6d53-ff37-4a58-8a44-63ebcc127988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:f6:25:7d:2d:60:19:c5:1c:b5:06:43:79:
95:8a:ed:d8:c1:b0:52:93:25:dd:f9:1d:17:17:96:
ab:58:f3:52:25:55:da:6a:2d:41:88:66:76:49:06:
75:73:69:e5:90:be:80:50:53:d9:d5:96:cf:46:95:
5b:1d:8b:b8:6a:aa:a8:22:c7:55:41:7e:0c:05:0a:
05:0e:fe:9b:4a:67:18:90:5f:1c:79:f1:30:dd:1a:
cc:ec:50:a3:5e:d4:14:92:1a:ad:5d:68:a3:1c:7a:
a8:ba:1c:13:ca:8e:72:72:15:34:ff:f1:39:2f:18:
73:62:ad:cc:a9:fc:c9:f1:ed:f8:c0:f9:8c:83:d5:
35:e4:e0:d3:3f:8b:07:36:c4:e9:17:74:e3:2a:1a:
95:2e:80:b0:14:71:62:e9:bc:90:0d:fa:78:ef:5d:
f0:b2:70:e7:94:d3:e0:03:4d:f0:5a:f3:c3:d6:b5:
23:16:fc:fc:0e:20:ee:17:c0:c6:57:b3:d1:b4:ea:
4d:6f:0c:0e:98:87:94:86:ef:07:52:6e:1f:f7:8d:
f4:b6:a1:6f:81:b2:17:81:92:b8:75:7b:ce:13:f5:
b0:58:c2:68:46:b6:1e:3d:91:09:ab:24:d3:50:f6:
58:e3:8c:19:f5:b6:e9:c6:26:75:66:7e:03:03:a7:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:A8:B4:9F:29:5C:33:F8:BE:26:FC:95:ED:17:E4:C2:EA:0B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6bed8645-a46d-35af-9c33-fcae693b35c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:b7:21:d1:9f:d5:55:4c:6a:d3:7b:54:a5:03:8f:d3:9d:35:
23:f2:8d:f0:2c:f4:8d:78:4e:f5:71:2a:b1:e6:26:33:6d:d9:
5b:c2:8b:da:c5:54:58:c7:d4:7e:b0:64:95:e7:a9:65:98:7d:
76:55:ca:9d:4b:12:87:d2:62:04:e8:7c:52:b6:8a:df:ee:ec:
d0:33:02:3b:47:54:3b:ae:26:1c:6b:19:85:b9:96:cf:86:c1:
04:04:63:88:95:b9:02:64:22:2a:4a:83:d8:74:73:22:9b:d4:
c9:89:98:4b:5a:11:eb:85:68:dc:fa:5b:57:61:e5:b6:c8:c3:
bc:d3:ed:ca:b8:f9:6d:4e:a6:53:dc:86:2c:98:5c:cb:70:a5:
82:3f:75:0b:e4:4a:d8:db:48:70:15:84:70:1c:99:ee:71:11:
04:9b:af:a6:79:b5:43:4f:54:cf:9f:d7:27:ef:cd:62:95:99:
00:d3:63:da:14:a5:28:03:22:26:7d:43:fb:8b:ea:7a:63:a7:
59:e2:f0:2a:3b:72:aa:db:2b:61:dc:35:e5:a7:6a:d6:41:d3:
0b:e9:80:0c:aa:28:8d:66:3b:fa:20:e0:ac:18:f6:63:2f:5d:
e2:ec:dc:1c:9e:47:9c:3e:9c:b4:85:0e:94:e3:fb:65:a5:6e:
84:d7:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:08 2024 by rpki-client on console-ams.rpki-client.org