Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7335e105-25ec-3367-9b9e-7173c25be35b.roa
File: 7335e105-25ec-3367-9b9e-7173c25be35b.roa (raw, json)
Hash identifier: SsK/rqQr2bQgdUDfB9K254bN8G/PdIP0C38hPfOcJWw=
Subject key identifier: 57:F7:2D:82:90:22:1A:22:E4:DA:BD:DA:96:B7:F4:00:67:D7:8E:AC
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841CB4FF968E2F491FFA3054430
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7335e105-25ec-3367-9b9e-7173c25be35b.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Fri 08 Aug 2025 04:00:00 +0000
asID: 18530
IP address blocks: 23.27.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:cb:4f:f9:68:e2:f4:91:ff:a3:05:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 8 04:00:00 2025 GMT
Subject: CN=2320171a-5cff-4c85-9b35-79f3488c7265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:df:95:d5:70:1c:24:c5:1d:3d:c7:af:9d:
e3:7b:47:0d:cf:7d:bf:fe:35:1c:39:08:b8:b5:01:
d9:37:55:3e:45:c0:a3:b1:8a:78:28:f1:e2:eb:9d:
01:14:04:03:6d:6a:3a:a8:02:2f:9a:07:92:44:6d:
41:d1:05:ae:30:b4:19:1d:34:b9:89:4b:cd:7b:ed:
e4:23:d1:01:b5:43:bd:51:90:e8:29:78:05:16:d1:
74:33:92:81:e2:71:ef:13:c1:2f:47:a3:5d:9a:ff:
10:ec:f1:45:77:d9:87:1f:0d:ec:79:e5:a3:4e:71:
33:1e:d3:56:f6:f3:79:d5:aa:52:e6:d6:9c:e6:06:
67:1f:eb:95:67:d7:9e:d3:b3:56:14:a2:68:c7:01:
89:c4:cb:c1:c1:29:e6:cb:01:9a:c7:00:cb:59:05:
37:8b:17:f5:d2:89:7e:84:8a:71:cc:6a:d5:41:93:
87:18:12:12:24:90:1d:98:93:f7:cd:fb:58:3e:ff:
77:ff:50:08:69:a9:9e:be:42:e4:19:11:8b:4e:e6:
a8:5b:3c:e1:28:5a:73:4b:51:52:d7:d5:da:20:b8:
4e:c3:af:0c:76:84:af:0e:11:f0:2d:0f:81:c5:83:
ee:61:af:6e:e6:12:f6:54:3e:57:51:7f:21:52:e7:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:2D:82:90:22:1A:22:E4:DA:BD:DA:96:B7:F4:00:67:D7:8E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7335e105-25ec-3367-9b9e-7173c25be35b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:37:9c:38:17:87:a5:b1:e1:7c:8a:06:5c:9b:20:26:93:5e:
fb:bc:01:1a:a5:e2:a0:e4:f8:d9:19:e2:2b:d8:c8:d3:9d:55:
53:b6:6b:d7:44:da:08:1d:38:e4:0a:fe:7c:cb:3b:4b:c8:70:
aa:20:65:26:a0:cb:bb:71:b2:bf:70:7c:00:f6:78:78:e3:70:
94:3f:77:b9:a8:a5:0a:b2:20:d1:f5:2b:11:6e:8c:fd:95:11:
46:d4:ee:1c:ef:22:62:08:66:88:d3:46:25:f9:11:15:83:aa:
7b:5d:52:32:df:d8:d4:d9:77:68:d4:88:04:45:39:e6:86:1b:
87:27:41:38:bd:c1:49:02:e4:19:b9:d4:f1:af:26:61:e3:b2:
d0:d0:9b:bb:69:47:2e:a0:58:df:c2:67:ec:ad:05:f9:10:ec:
5c:99:48:c0:42:ea:61:ba:04:cc:94:37:f0:cb:bf:7d:dc:4f:
c7:ef:9f:2d:8a:4e:ea:9a:db:7c:ef:01:6b:1c:dd:40:57:1f:
0b:5f:31:86:61:50:22:74:af:9b:33:9d:05:73:11:08:cb:49:
64:67:f8:ea:84:84:ab:09:84:47:e0:e1:9f:50:f9:29:9e:4d:
fb:ec:1d:49:83:70:a7:1c:72:f0:57:57:11:4d:6a:f6:b2:b1:
64:20:8b:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHLT/lo4vSR/6MFRDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDgwODA0MDAwMFowLzEtMCsGA1UEAxMk
MjMyMDE3MWEtNWNmZi00Yzg1LTliMzUtNzlmMzQ4OGM3MjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZPfldVwHCTFHT3Hr53je0cNz32//jUcOQi4
tQHZN1U+RcCjsYp4KPHi650BFAQDbWo6qAIvmgeSRG1B0QWuMLQZHTS5iUvNe+3k
I9EBtUO9UZDoKXgFFtF0M5KB4nHvE8EvR6Ndmv8Q7PFFd9mHHw3seeWjTnEzHtNW
9vN51apS5tac5gZnH+uVZ9ee07NWFKJoxwGJxMvBwSnmywGaxwDLWQU3ixf10ol+
hIpxzGrVQZOHGBISJJAdmJP3zftYPv93/1AIaamevkLkGRGLTuaoWzzhKFpzS1FS
19XaILhOw68MdoSvDhHwLQ+BxYPuYa9u5hL2VD5XUX8hUud1XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFf3LYKQIhoi5Nq92pa39ABn146sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzMzNWUxMDUtMjVlYy0z
MzY3LTliOWUtNzE3M2MyNWJlMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg3nDgXh6Wx4XyKBlybICaTXvu8ARql4qDk+NkZ4ivYyNOdVVO2a9dE
2ggdOOQK/nzLO0vIcKogZSagy7txsr9wfAD2eHjjcJQ/d7mopQqyINH1KxFujP2V
EUbU7hzvImIIZojTRiX5ERWDqntdUjLf2NTZd2jUiARFOeaGG4cnQTi9wUkC5Bm5
1PGvJmHjstDQm7tpRy6gWN/CZ+ytBfkQ7FyZSMBC6mG6BMyUN/DLv33cT8fvny2K
Tuqa23zvAWsc3UBXHwtfMYZhUCJ0r5sznQVzEQjLSWRn+OqEhKsJhEfg4Z9Q+Sme
TfvsHUmDcKcccvBXVxFNavaysWQgi2Y=
-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org