Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/76f895ee-9808-33f9-8c3a-af0277b9ad01.roa
File: 76f895ee-9808-33f9-8c3a-af0277b9ad01.roa (raw, json)
Hash identifier: Hgt5EORkgcHhdL+yszcRG6J9jH9nhTJjxQSrLS+G7wA=
Subject key identifier: 7B:07:C9:B8:0D:E0:17:75:2A:CF:37:7C:D5:7C:A5:A9:A0:81:77:9E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583EA7113FD6D10BE92CAAE6E980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/76f895ee-9808-33f9-8c3a-af0277b9ad01.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Thu 24 Oct 2024 04:00:00 +0000
asID: 1239
IP address blocks: 166.88.215.0/24 maxlen: 24
166.88.243.0/24 maxlen: 24
104.164.33.0/24 maxlen: 24
104.164.206.0/24 maxlen: 24
104.165.12.0/24 maxlen: 24
104.165.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a7:11:3f:d6:d1:0b:e9:2c:aa:e6:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Oct 24 04:00:00 2024 GMT
Subject: CN=4ef6f6a3-e781-41fe-9d15-89ec03b05f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:42:0f:19:96:d2:51:c6:63:d2:e5:00:47:
eb:92:ee:1b:89:f4:ce:1f:de:64:ca:47:12:e3:a0:
7c:3a:a7:f2:0e:57:85:15:29:7c:2b:f6:55:a0:e8:
23:28:37:4c:fa:31:e2:15:ad:27:75:83:db:fc:b1:
24:0c:47:35:e8:84:bc:34:dc:16:36:32:53:f4:99:
2a:b4:8c:f7:e4:0b:3c:55:48:60:15:42:dd:4b:2a:
48:81:38:58:6e:82:aa:f6:b7:7a:89:38:7e:a6:cb:
8c:7e:1d:89:62:60:d0:d7:20:09:9b:25:6d:a1:8b:
8a:98:77:6a:dc:20:0b:5e:d1:87:55:85:cc:7e:41:
f2:dc:db:23:80:66:5a:03:7d:c7:9c:f6:8a:7c:76:
ab:fd:46:da:7d:7c:7e:e8:1b:af:36:26:65:45:b3:
b0:a2:10:af:81:d5:53:29:88:9c:91:a3:e7:42:aa:
ff:30:91:c6:47:60:e2:55:a5:7b:87:15:e1:2f:96:
2a:f4:32:89:ca:1e:e5:5a:d5:4f:2e:32:01:0b:fb:
e0:c5:df:d3:d2:01:1b:3a:a6:87:5d:da:60:99:74:
e1:36:50:97:78:94:fd:98:25:58:91:27:59:09:d2:
f5:16:2a:54:b8:c8:52:78:c9:e6:38:4e:4f:1e:78:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:07:C9:B8:0D:E0:17:75:2A:CF:37:7C:D5:7C:A5:A9:A0:81:77:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/76f895ee-9808-33f9-8c3a-af0277b9ad01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.164.33.0/24
104.164.206.0/24
104.165.12.0/24
104.165.195.0/24
166.88.215.0/24
166.88.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:07:ec:86:b6:58:6e:d4:3f:de:a2:e0:1d:30:20:10:36:16:
5c:68:a6:5a:4b:b7:82:18:f8:97:07:d9:90:0b:bf:a6:e1:d9:
75:2f:9f:ac:f2:f8:bf:e5:6d:12:81:36:7a:aa:5c:be:fe:30:
49:19:a2:dc:22:97:82:0d:0c:4b:59:44:0f:53:18:31:8a:04:
dc:63:d5:80:ee:1d:99:3f:e9:c9:8a:1e:ea:35:37:3a:8a:dd:
86:62:9b:7d:a8:d4:9e:3b:24:a4:31:f8:34:e4:7a:ab:c8:50:
f3:05:54:aa:be:72:9f:43:96:92:de:75:de:a7:ff:a9:eb:61:
ba:ca:9e:35:e4:f1:31:49:66:33:b9:df:4a:a9:20:17:0b:8f:
97:ff:e4:58:88:d7:7a:a2:1a:89:7a:34:83:5f:96:ac:4f:7a:
94:c3:39:c7:53:a0:30:09:1a:14:52:b9:76:5a:2e:bd:83:25:
a7:91:a6:72:5d:71:6c:2b:06:40:87:15:d4:4a:04:d2:1c:b0:
c6:fa:be:0b:83:a5:31:01:84:de:15:20:82:6b:0d:15:6d:f6:
3a:2a:22:16:b5:92:bb:42:18:54:22:48:a7:23:ce:79:db:94:
be:e3:d6:8f:33:cd:20:e4:15:f5:4b:03:0e:e0:ef:12:4e:e0:
7d:14:68:c3
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWD6nET/W0QvpLKrm6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI0MTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
NGVmNmY2YTMtZTc4MS00MWZlLTlkMTUtODllYzAzYjA1Zjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip9CDxmW0lHGY9LlAEfrku4bifTOH95kykcS
46B8OqfyDleFFSl8K/ZVoOgjKDdM+jHiFa0ndYPb/LEkDEc16IS8NNwWNjJT9Jkq
tIz35As8VUhgFULdSypIgThYboKq9rd6iTh+psuMfh2JYmDQ1yAJmyVtoYuKmHdq
3CALXtGHVYXMfkHy3NsjgGZaA33HnPaKfHar/UbafXx+6BuvNiZlRbOwohCvgdVT
KYickaPnQqr/MJHGR2DiVaV7hxXhL5Yq9DKJyh7lWtVPLjIBC/vgxd/T0gEbOqaH
XdpgmXThNlCXeJT9mCVYkSdZCdL1FipUuMhSeMnmOE5PHnihHwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFHsHybgN4Bd1Ks83fNV8pamggXeeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzZmODk1ZWUtOTgwOC0z
M2Y5LThjM2EtYWYwMjc3YjlhZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAaKQhAwQA
aKTOAwQAaKUMAwQAaKXDAwQApljXAwQApljzMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHwH7Ia2WG7UP96i
4B0wIBA2FlxoplpLt4IY+JcH2ZALv6bh2XUvn6zy+L/lbRKBNnqqXL7+MEkZotwi
l4INDEtZRA9TGDGKBNxj1YDuHZk/6cmKHuo1NzqK3YZim32o1J47JKQx+DTkeqvI
UPMFVKq+cp9DlpLedd6n/6nrYbrKnjXk8TFJZjO530qpIBcLj5f/5FiI13qiGol6
NINflqxPepTDOcdToDAJGhRSuXZaLr2DJaeRpnJdcWwrBkCHFdRKBNIcsMb6vguD
pTEBhN4VIIJrDRVt9joqIha1krtCGFQiSKcjznnblL7j1o8zzSDkFfVLAw7g7xJO
4H0UaMM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:25 2024 by rpki-client on console-fra.rpki-client.org