Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71db429e-e711-3a9d-928c-1d4268f7fdc8.roa
File: 71db429e-e711-3a9d-928c-1d4268f7fdc8.roa (raw, json)
Hash identifier: MEo9SOxEqD1WyJiM5moj8oJGQm+JwL3uJrlju7NumZw=
Subject key identifier: 49:DE:A7:38:F3:70:BF:A4:4D:FA:E2:CA:59:BE:3B:F5:EA:88:D0:73
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858416D0742245C10C434E7947380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71db429e-e711-3a9d-928c-1d4268f7fdc8.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Sat 05 Jul 2025 04:00:00 +0000
asID: 54252
IP address blocks: 166.88.232.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:6d:07:42:24:5c:10:c4:34:e7:94:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 5 04:00:00 2025 GMT
Subject: CN=bee0261e-6b79-4821-90a7-28cac78e4652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:84:cb:9f:3e:19:fd:d3:ab:f4:62:2c:6b:
bb:99:5a:6a:2b:f2:9d:75:0b:1b:0d:9f:92:7d:08:
f9:97:41:ec:d7:55:f1:85:ae:a1:b3:a4:c2:25:91:
3f:bf:36:42:fa:e8:61:16:b8:5c:7c:56:7b:8b:a9:
88:13:b0:af:fd:23:60:68:2e:6d:9f:78:05:dd:66:
32:26:d6:63:52:dc:35:6c:9d:c9:74:79:0f:f9:8e:
ca:d7:6c:a8:34:e8:61:0e:bb:fb:8f:3f:0d:d7:ba:
2c:21:44:62:46:6f:08:f1:85:c6:0e:c0:81:93:85:
37:c8:4b:71:05:a9:15:fa:06:7e:82:a8:6c:35:4d:
c4:f6:25:b4:f2:ef:16:ca:a8:2d:d9:93:b2:f6:2d:
2f:9f:83:19:15:2b:6c:5f:88:3c:aa:0e:a7:1a:cc:
07:2b:dd:5d:2f:16:48:42:0a:80:a6:90:54:91:96:
19:c2:d2:f6:8c:b4:f6:f4:a4:4e:80:f9:6c:f4:c4:
90:2c:33:29:0f:b3:b6:b1:7a:7f:b4:0c:e8:6e:61:
06:09:7e:76:c7:1e:d3:3b:3e:e9:87:70:b2:08:1e:
b2:dd:9e:4c:25:36:29:1a:b9:1c:5d:5d:3c:58:13:
28:af:03:dd:3e:cd:83:f6:6f:1a:9d:75:e0:fe:a7:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:A7:38:F3:70:BF:A4:4D:FA:E2:CA:59:BE:3B:F5:EA:88:D0:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71db429e-e711-3a9d-928c-1d4268f7fdc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:79:64:ca:b5:4e:c8:72:02:9e:59:ef:3c:bf:a6:c7:ff:e9:
a4:4f:fc:e6:9b:bc:6c:e5:40:69:58:b4:f7:e5:ac:d9:20:26:
40:2f:da:e3:c0:a0:3f:27:a1:57:d6:ba:83:01:59:51:50:93:
fe:c6:0f:72:e0:54:42:31:10:f4:25:94:e8:e8:20:e8:f6:b1:
b6:06:d9:cf:2b:c9:35:65:9d:e1:33:32:8f:89:16:d8:bb:b7:
84:41:a6:8e:7d:5c:7d:72:0d:fc:39:53:a0:ba:16:ad:59:11:
41:0e:45:c0:89:ff:e0:72:c4:84:d7:56:fa:63:2a:dc:af:14:
ac:91:50:75:39:2f:e3:fd:7c:5d:19:cc:75:4d:78:c8:18:f1:
c2:74:b4:e5:1a:01:cc:b0:d6:87:5b:ca:ce:06:8f:5f:7d:46:
dc:6d:8f:ad:30:43:4e:42:ed:59:e2:ae:42:a5:44:22:90:48:
06:70:54:03:10:cb:94:a1:94:6e:88:f0:85:42:1e:b2:aa:c7:
21:2d:4c:6b:6e:e2:13:31:c2:9b:79:20:39:e8:3b:1a:03:21:
10:ff:36:6d:7d:3c:f9:94:fc:6c:f2:40:57:2e:f1:ce:98:74:
0c:46:6f:55:20:b4:f4:e8:45:d7:ab:1b:ab:e5:8a:0b:01:80:
86:9a:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:08 2024 by rpki-client on console-ams.rpki-client.org