Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/73028153-a6c1-36d7-8401-a9a3a4487492.roa
File: 73028153-a6c1-36d7-8401-a9a3a4487492.roa (raw, json)
Hash identifier: YyjvVHo0+YSUncj4F4WeJAwnwed504HgyhxKao+xdNM=
Subject key identifier: 98:D4:E8:85:0C:3D:BE:F4:48:D5:3C:5C:C2:74:E9:CC:2B:4C:B1:D3
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583BC9412A857403C5E4B52D4B40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/73028153-a6c1-36d7-8401-a9a3a4487492.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Sun 04 Feb 2024 05:00:00 +0000
asID: 22773
IP address blocks: 104.164.202.0/24 maxlen: 24
45.38.54.0/24 maxlen: 24
45.39.231.0/24 maxlen: 24
23.230.109.0/24 maxlen: 24
23.230.32.0/24 maxlen: 24
23.230.40.0/24 maxlen: 24
23.230.96.0/24 maxlen: 24
23.230.227.0/24 maxlen: 24
45.38.166.0/24 maxlen: 24
50.117.86.0/24 maxlen: 24
104.165.66.0/24 maxlen: 24
104.165.128.0/24 maxlen: 24
104.165.175.0/24 maxlen: 24
104.165.191.0/24 maxlen: 24
104.252.103.0/24 maxlen: 24
104.252.183.0/24 maxlen: 24
104.252.238.0/24 maxlen: 24
104.252.244.0/24 maxlen: 24
104.253.147.0/24 maxlen: 24
107.165.238.0/24 maxlen: 24
107.186.28.0/24 maxlen: 24
107.186.83.0/24 maxlen: 24
107.186.238.0/24 maxlen: 24
107.187.34.0/24 maxlen: 24
107.187.50.0/24 maxlen: 24
107.187.54.0/24 maxlen: 24
107.187.96.0/24 maxlen: 24
107.187.100.0/24 maxlen: 24
107.187.105.0/24 maxlen: 24
107.187.119.0/24 maxlen: 24
107.187.121.0/24 maxlen: 24
136.0.35.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:c9:41:2a:85:74:03:c5:e4:b5:2d:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Feb 4 05:00:00 2024 GMT
Subject: CN=56b464aa-5e03-41dc-ad9c-6a11a6923d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:11:52:28:fb:78:2c:9c:f6:cf:96:8c:6a:
e8:07:7e:df:53:99:ef:af:b5:c6:73:d8:f9:27:21:
e2:51:a4:cf:15:cb:7f:bd:83:8c:7c:07:8f:9d:bb:
2d:0e:4f:b3:35:29:d4:0d:fe:31:a8:37:40:c1:7a:
7e:11:34:c1:2e:ca:e1:91:7c:8d:f3:26:f5:73:fc:
73:58:f1:5d:91:62:0a:bb:f1:f8:e4:68:07:35:f7:
f6:7e:23:34:19:ce:be:19:7d:29:93:1d:a3:7e:4c:
6e:85:86:10:e9:8d:c5:ad:6a:55:61:23:91:7c:a7:
b5:1b:a0:b9:ed:36:7b:11:dc:cd:c8:d9:25:9c:6a:
00:2a:3c:b4:cd:a6:0e:7b:e8:24:cb:3e:bc:8c:01:
39:43:ca:14:87:ea:4c:36:ca:80:d2:e5:dd:95:4a:
36:2c:f9:0e:35:20:10:7e:6b:5b:3b:fd:56:f6:c8:
54:be:60:b7:02:c6:d2:3b:98:30:19:03:b0:bc:80:
27:e2:b8:d2:a9:43:b7:46:08:24:72:46:61:3c:6f:
b8:77:8a:cd:4e:f1:e0:a7:72:bb:1f:94:65:6b:7b:
06:88:12:0b:27:05:bc:ee:13:7d:8b:09:74:be:da:
74:14:17:4b:77:37:ee:ab:7e:8e:70:b3:3d:02:ac:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:E8:85:0C:3D:BE:F4:48:D5:3C:5C:C2:74:E9:CC:2B:4C:B1:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/73028153-a6c1-36d7-8401-a9a3a4487492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.32.0/24
23.230.40.0/24
23.230.96.0/24
23.230.109.0/24
23.230.227.0/24
45.38.54.0/24
45.38.166.0/24
45.39.231.0/24
50.117.86.0/24
104.164.202.0/24
104.165.66.0/24
104.165.128.0/24
104.165.175.0/24
104.165.191.0/24
104.252.103.0/24
104.252.183.0/24
104.252.238.0/24
104.252.244.0/24
104.253.147.0/24
107.165.238.0/24
107.186.28.0/24
107.186.83.0/24
107.186.238.0/24
107.187.34.0/24
107.187.50.0/24
107.187.54.0/24
107.187.96.0/24
107.187.100.0/24
107.187.105.0/24
107.187.119.0/24
107.187.121.0/24
136.0.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ac:e0:d3:28:52:1d:a3:48:5c:dc:7e:8c:d1:34:9a:5c:4d:
fb:bf:2a:66:7b:b0:7d:8b:cb:0a:5f:d0:0c:b2:ff:d8:0f:56:
9a:e6:0d:a7:8f:2d:81:0b:9c:58:ed:1e:aa:14:22:18:a6:a9:
ac:ee:f3:24:06:5d:3b:a7:07:8f:d0:a7:0f:f7:75:ea:ff:06:
ab:07:7b:69:31:7e:68:af:6c:66:00:c9:ce:79:e5:4e:f6:f7:
8c:90:55:53:b7:98:a7:d3:8e:f4:50:61:15:c9:28:4a:49:5d:
1c:2a:81:9a:85:fa:12:28:80:b4:6e:5b:78:cc:e9:47:56:ca:
60:c9:50:e8:2d:31:83:fd:73:78:cd:f9:17:0a:5b:a8:9d:30:
b3:83:ca:17:46:f3:46:2f:15:b5:10:0c:4b:54:b2:69:d5:db:
7b:9d:45:28:0c:a7:75:28:2f:4f:ae:85:32:44:b9:b9:1d:bd:
18:52:28:04:60:49:cb:b8:ea:ab:c9:9d:7c:48:e4:e6:c1:05:
72:16:9a:0a:8e:5d:34:01:8d:89:ec:8b:be:b7:50:2b:35:2b:
af:d5:06:c4:48:d4:59:15:f5:fc:0c:52:7c:ca:7d:4e:f8:cc:
09:3b:87:72:b7:c8:60:3f:f3:69:11:bc:45:ac:98:38:fe:2e:
32:c9:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:08 2024 by rpki-client on console-ams.rpki-client.org