Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7150ac14-808d-36e6-b765-1cf98cd8f188.roa
File: 7150ac14-808d-36e6-b765-1cf98cd8f188.roa (raw, json)
Hash identifier: m0OyOh6syRdgNcDXFf4/HVBB+TB2mdbBspz7oF+QaE4=
Subject key identifier: 79:0E:9B:1B:0A:5D:1E:E1:91:8D:EB:F6:F2:DF:A9:3F:5E:C8:91:A8
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844E7D5419CD34D4A42A1CAB340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7150ac14-808d-36e6-b765-1cf98cd8f188.roa
Signing time: Fri 16 Feb 2024 02:00:26 +0000
ROA not before: Fri 16 Feb 2024 02:00:26 +0000
ROA not after: Thu 16 May 2024 01:00:26 +0000
asID: 209854
IP address blocks: 104.164.200.0/24 maxlen: 24
136.0.58.0/24 maxlen: 24
45.38.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e7:d5:41:9c:d3:4d:4a:42:a1:ca:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 16 02:00:26 2024 GMT
Not After : May 16 01:00:26 2024 GMT
Subject: CN=7f6e592b-e293-47c5-bac7-10a9cc609951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:33:21:13:52:d7:b4:12:17:69:b2:69:1f:
83:9f:b4:23:c1:33:7b:5a:1c:b9:5c:68:b1:f5:51:
b9:a7:b5:2d:45:a7:4b:73:57:9c:a2:f7:0d:b3:ad:
64:83:36:a7:49:24:43:69:86:a0:94:68:f3:4e:5b:
4f:24:b2:8e:2c:dd:f6:e9:cc:c1:cc:6b:b8:5c:37:
44:32:ce:08:ab:11:8e:02:28:0c:6b:7d:94:7d:18:
26:95:13:e1:9e:d7:73:84:69:00:4e:fe:94:e4:1c:
ba:24:22:7f:f6:f9:3c:5d:ea:d5:f5:64:2c:c8:4b:
22:ce:c4:48:be:3f:ed:5f:63:1e:f3:d3:35:02:39:
00:a6:9f:b6:c3:ce:23:78:e7:a2:8a:3f:a6:1f:00:
c7:69:69:c7:3f:7d:8e:07:da:8b:b6:ba:96:7a:1f:
4f:8c:f7:a7:74:0c:85:31:99:46:34:70:0e:bb:18:
b7:c9:10:71:be:a9:09:72:a6:63:2f:97:85:52:6f:
31:56:3c:6a:e5:3e:99:d1:b2:43:7e:90:e9:fc:0c:
2a:2f:f9:61:26:16:11:bd:89:16:79:4d:6e:46:9e:
fd:66:dd:4d:c2:65:af:8d:29:f2:70:d3:fd:93:69:
f6:aa:02:58:fa:7e:61:73:0d:6c:08:85:c0:f3:a1:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:9B:1B:0A:5D:1E:E1:91:8D:EB:F6:F2:DF:A9:3F:5E:C8:91:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7150ac14-808d-36e6-b765-1cf98cd8f188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.198.0/24
104.164.200.0/24
136.0.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:5d:f7:8c:6b:23:3e:00:ef:6a:c8:cf:9e:bf:9f:68:03:8a:
39:81:4b:8f:7b:ed:18:8a:01:fb:e4:4d:92:9c:5b:21:dc:91:
16:39:c8:17:76:b8:88:00:d4:a4:70:76:59:8c:06:3f:23:3f:
d1:dc:3f:2b:26:9a:10:27:09:e9:93:28:fb:39:1b:b8:db:e2:
22:58:e6:74:6a:b3:f9:62:6e:bb:d8:5d:fa:40:46:d1:72:11:
95:90:10:fb:74:8f:e7:19:35:9d:21:b9:32:be:1b:0e:f0:3c:
42:5a:ab:b9:c3:3f:47:d5:07:12:1f:4f:98:c1:8e:36:d7:8e:
ec:ff:12:8f:08:6a:d6:f8:c2:21:8e:9b:75:3c:0b:46:2c:ec:
ca:76:81:2a:69:40:c3:3d:70:60:54:db:e6:b3:b5:5e:34:64:
ca:90:e0:fe:59:fc:d9:ff:45:69:82:52:64:3f:c7:8d:32:b1:
6c:70:e8:62:b8:ff:6e:da:0a:ae:d9:53:c0:65:58:ce:1a:28:
3a:cb:17:f1:f6:f1:f6:26:36:87:86:47:b5:95:7a:98:c7:c7:
31:12:83:9d:ca:ff:82:36:0b:e7:2a:4a:4b:df:4e:0c:ad:cf:
5a:d8:de:52:4e:73:43:71:db:75:a1:0c:c5:04:0d:40:e5:df:
28:e2:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org