Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8249873c-cede-3c1f-82a3-2495b9461efc.roa
File: 8249873c-cede-3c1f-82a3-2495b9461efc.roa (raw, json)
Hash identifier: dv+5MksXpU7Y4HxZl4Eoyw2S7E5Y8aC4F8j7C1wcRh8=
Subject key identifier: E4:A3:47:16:B7:80:AC:BF:93:E9:D4:F4:7B:2B:B2:B5:E7:D2:74:69
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285843768C45739882210A8C7F3EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8249873c-cede-3c1f-82a3-2495b9461efc.roa
Signing time: Fri 06 Oct 2023 19:20:13 +0000
ROA not before: Fri 06 Oct 2023 19:20:13 +0000
ROA not after: Thu 04 Jan 2024 20:20:13 +0000
asID: 54500
IP address blocks: 23.27.48.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:76:8c:45:73:98:82:21:0a:8c:7f:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Oct 6 19:20:13 2023 GMT
Not After : Jan 4 20:20:13 2024 GMT
Subject: CN=15be2747-62c1-4185-8210-04df3934d996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:d9:8f:06:46:53:31:45:1d:69:96:20:99:
f5:41:71:10:2f:94:73:52:43:d1:41:75:8f:88:02:
b1:5a:f4:22:0c:d7:3e:20:c9:51:ea:dd:f9:b3:9b:
7c:58:2a:aa:01:30:0a:52:d3:2e:82:d4:07:62:cc:
6a:1d:2d:1f:ce:01:1b:23:f3:58:d5:b8:9e:37:3b:
f3:58:68:6a:69:a9:b9:b9:15:2a:a3:67:c9:8f:a5:
35:35:8a:b8:c1:7b:b9:5b:07:a8:b9:c7:f7:f6:2c:
e2:25:75:7d:83:33:e5:a1:81:bf:63:bc:f9:8f:94:
00:25:fa:f7:3c:c4:1a:6f:d1:53:8b:a8:63:72:e0:
19:71:c7:f5:4f:7d:75:93:53:76:18:f1:ad:1b:01:
66:fd:d7:16:3b:10:e8:87:34:a4:1b:27:58:ed:8e:
0d:b4:fb:ba:98:60:14:8f:e0:b1:d4:85:ce:db:4a:
4d:f0:a4:8b:6a:46:6e:73:3b:b7:9a:d5:6b:32:93:
b8:9d:16:8e:e1:23:10:af:07:28:be:4d:f0:65:59:
3a:96:67:fe:73:78:e3:d6:17:ba:7e:ce:ff:0f:27:
b8:d0:cf:92:41:77:7e:4d:a1:4e:67:41:1e:7f:df:
da:87:8f:cd:ef:15:5b:11:71:ea:d5:26:e7:1e:20:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A3:47:16:B7:80:AC:BF:93:E9:D4:F4:7B:2B:B2:B5:E7:D2:74:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8249873c-cede-3c1f-82a3-2495b9461efc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:2e:34:2e:d1:1d:24:e9:ff:cd:2e:40:43:ea:6c:21:6f:cf:
b4:f6:7e:ab:0a:c6:e2:d9:88:0f:2a:d5:16:67:d3:c1:9d:47:
c7:fc:d3:d6:f2:87:05:5f:f2:07:e4:6c:4d:71:e3:2d:45:58:
62:a6:d4:69:99:86:d4:eb:1c:f3:aa:76:99:d8:38:bc:28:31:
4b:79:d9:b3:26:0f:8c:8e:1b:47:31:05:45:ee:50:df:db:e0:
a5:fd:30:9a:4d:18:6c:93:1c:c5:a2:90:4f:4e:be:5e:45:ed:
0d:3f:5f:24:42:cd:07:1f:37:6f:86:e0:b4:33:62:e2:10:4d:
61:41:ec:19:aa:a7:25:09:94:cd:b6:68:ff:43:8e:ea:0c:c4:
14:89:48:67:dc:f6:fe:22:48:4c:50:d4:dd:52:54:34:a7:66:
13:5c:a3:16:74:bf:09:9c:bc:66:30:6c:40:59:c1:d6:9c:37:
71:86:43:67:e0:f6:0c:ad:a5:04:cb:45:54:fc:95:a7:00:5e:
ad:de:68:9f:3a:79:60:88:2b:cb:fc:c9:85:f9:cc:ed:cf:21:
81:7a:27:f0:49:ea:76:bd:b1:4a:cc:9f:14:eb:b4:8d:ba:0c:
bf:6f:45:2a:99:1e:04:86:3b:eb:ad:bb:79:ef:b6:3d:1a:0f:
f3:e6:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:26 2024 by rpki-client on console-fra.rpki-client.org