Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/82c70809-a509-3387-9e14-8d14d3c71405.roa
File: 82c70809-a509-3387-9e14-8d14d3c71405.roa (raw, json)
Hash identifier: cbrgJyIYA5TsbuSLkolJd0txFceGhZB302rgdPXcjNo=
Subject key identifier: 58:6A:C9:DB:A6:BA:FE:44:02:9E:2C:B5:72:1D:15:E6:95:08:50:4D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858422FE9FFE82A3320C0EC80D440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/82c70809-a509-3387-9e14-8d14d3c71405.roa
Signing time: Sun 11 Jun 2023 19:19:44 +0000
ROA not before: Sun 11 Jun 2023 19:19:44 +0000
ROA not after: Sat 09 Sep 2023 19:19:44 +0000
asID: 15731
IP address blocks: 136.0.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2f:e9:ff:e8:2a:33:20:c0:ec:80:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jun 11 19:19:44 2023 GMT
Not After : Sep 9 19:19:44 2023 GMT
Subject: CN=142a0f3c-0d22-44c1-8f94-a3ee122cf382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:ac:59:2a:ee:21:49:47:0b:9f:cc:61:fc:
77:b3:f0:43:ea:44:ce:82:2b:f9:3b:a1:af:de:1d:
5a:9e:13:b8:d0:4a:45:18:a0:69:fa:4e:96:ec:d4:
47:30:d7:39:71:e4:9e:7c:34:6a:61:c7:1d:11:89:
4d:55:ae:48:b6:4e:de:bf:e0:8f:74:fb:b3:26:7a:
97:11:39:61:3c:c8:5c:32:6e:0f:4a:f0:36:f5:cb:
b3:46:63:bd:53:48:c7:4b:b3:c6:42:2c:16:12:02:
0b:e8:84:74:b8:d6:7b:7c:05:4b:9c:ab:75:48:e5:
a8:a7:13:eb:f3:f2:14:15:96:15:c1:1f:5b:ea:41:
91:ad:d6:cd:cd:75:ed:b4:4a:f1:07:19:58:7a:41:
88:f7:2d:82:af:dc:ff:b0:5a:82:1b:18:ba:05:8b:
e7:f0:06:a8:d1:96:e6:ad:dc:9d:74:7e:d5:45:c6:
13:a6:0c:f6:62:ef:b0:af:5d:a1:76:26:02:dd:71:
c8:8d:53:42:41:b6:47:53:1c:64:85:24:69:31:0b:
8d:3d:e9:25:69:f9:55:89:f4:bd:bc:04:e6:72:c0:
60:02:f4:14:5e:80:fc:76:10:6c:3d:7a:84:cc:5e:
36:31:af:e1:3f:bf:8e:e1:3e:d3:cd:62:c2:26:a5:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:C9:DB:A6:BA:FE:44:02:9E:2C:B5:72:1D:15:E6:95:08:50:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/82c70809-a509-3387-9e14-8d14d3c71405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:eb:54:df:fb:6b:bd:a7:af:74:85:ab:0d:cb:05:c7:36:9d:
06:a3:70:31:82:60:9b:6c:e1:5b:81:ef:cc:18:b9:a0:81:06:
91:de:84:f3:05:49:65:49:77:39:00:41:1f:e6:2d:d7:49:73:
1a:95:10:4d:a8:40:c2:dc:38:bb:31:1c:a5:e8:79:ba:7c:8e:
2b:15:54:36:1d:c8:b7:43:f1:73:13:28:68:4a:86:32:63:d7:
ca:29:15:7a:50:92:9a:25:d4:0e:a2:10:2b:5a:34:0e:d7:b1:
ae:05:bb:b9:09:29:42:fa:21:db:4e:f7:30:1a:c9:e1:91:71:
64:fa:5c:9f:dd:bd:b3:49:20:1e:c4:d4:56:16:28:79:40:d5:
fa:d2:dd:9c:eb:91:88:8e:f7:12:be:9e:eb:cc:40:01:70:d9:
86:05:77:cc:77:ae:23:67:25:23:f4:a6:ea:4c:71:b3:90:5d:
4f:f1:c0:e6:3f:c5:48:f9:19:83:00:28:d6:30:0d:7c:99:42:
70:58:e7:55:c1:90:59:d0:87:c0:3b:39:0a:e7:f4:38:ba:8f:
ec:7a:55:a5:9d:f8:ed:52:f1:6f:ad:f5:e8:66:be:60:35:e3:
b9:3a:39:9d:d8:1f:e9:f1:82:92:d2:00:fd:f8:f8:69:b3:d8:
81:61:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:09 2024 by rpki-client on console-ams.rpki-client.org