Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90cb9131-7700-3611-a141-be9c15b9898d.roa
File: 90cb9131-7700-3611-a141-be9c15b9898d.roa (raw, json)
Hash identifier: iaZQMLNh4tuh30vDiFpFEasnYnViggL3bkEeaQAo5Cs=
Subject key identifier: F6:CC:B0:E4:8F:FF:27:3E:D3:C2:D1:66:F2:C2:91:DB:D2:BE:53:D6
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858456F1DB6CFADFBE8932FDC7100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90cb9131-7700-3611-a141-be9c15b9898d.roa
Signing time: Thu 04 Apr 2024 13:00:36 +0000
ROA not before: Thu 04 Apr 2024 13:00:36 +0000
ROA not after: Wed 03 Jul 2024 13:00:36 +0000
asID: 212238
IP address blocks: 136.0.77.0/24 maxlen: 24
45.38.24.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:6f:1d:b6:cf:ad:fb:e8:93:2f:dc:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 4 13:00:36 2024 GMT
Not After : Jul 3 13:00:36 2024 GMT
Subject: CN=8c7b29ef-e0c9-4fbf-9658-9a08f5de9e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:df:44:cd:ec:34:8e:91:86:4e:1b:dd:83:
c9:10:e7:4d:c8:03:39:5e:a2:6a:0a:b8:9c:55:59:
06:12:96:3f:cb:40:96:ec:1f:e8:46:0f:e8:40:2d:
44:01:78:59:15:91:f1:12:d8:e4:b0:6d:03:4f:4d:
03:20:bb:e7:d2:40:d2:4f:93:b6:b6:ca:72:84:d2:
4f:af:62:01:96:d1:8b:cd:88:99:0f:de:86:a8:b0:
69:2f:ef:d9:07:33:06:da:70:36:8a:67:ae:e6:c5:
61:6b:31:44:49:64:ce:80:bc:09:a7:e6:29:88:2e:
bc:b4:84:36:33:88:82:d6:c0:82:bb:49:f3:95:d4:
18:80:3a:f9:e1:da:e9:35:e0:e7:26:c4:17:76:ea:
78:1a:e4:60:b8:42:93:b6:2d:d3:cd:56:8c:a6:61:
52:a9:b2:0b:0a:05:01:de:9b:a8:80:fd:b2:61:a3:
f9:34:b4:42:11:a7:ca:38:a6:47:96:ca:9b:f1:e9:
87:ec:bb:ed:82:f4:99:f1:a7:24:6c:15:79:58:be:
5f:a1:fd:4b:a6:e6:63:e6:e7:ae:4f:b4:f3:6b:15:
6b:8a:5b:7b:36:be:8e:5a:b5:48:d7:60:1b:31:17:
dd:44:00:da:41:4d:01:f3:e1:37:e6:51:a2:fc:98:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:B0:E4:8F:FF:27:3E:D3:C2:D1:66:F2:C2:91:DB:D2:BE:53:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90cb9131-7700-3611-a141-be9c15b9898d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.24.0/24
136.0.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:68:fb:08:f9:d0:43:06:da:d0:9d:e4:aa:c7:61:b9:cf:f2:
58:41:01:bf:d0:21:05:74:d7:f0:65:ce:60:8f:32:7d:b5:a5:
61:e4:1b:9b:e4:b4:bd:57:25:7b:b3:bf:af:7f:bc:20:96:ca:
14:76:22:cb:2f:cd:76:af:c3:a3:bc:26:0b:c1:09:d2:13:22:
d1:38:1b:4e:33:ea:0f:71:72:35:2b:6d:83:91:53:18:16:b7:
56:28:5e:37:4b:a8:6a:d0:41:05:fa:09:71:46:dc:61:48:82:
c6:af:1b:87:31:5a:f0:45:1a:bb:ff:c2:9e:60:5b:7a:9a:1e:
0a:1a:47:ec:85:72:03:4a:ff:a2:5a:40:f4:8b:83:e6:d9:16:
70:88:28:65:dd:4f:60:16:47:ff:9c:6d:fd:f0:b1:39:a8:51:
ad:0f:51:0e:5f:78:09:bd:46:3a:c1:da:d7:e7:bf:06:40:05:
f4:1b:70:43:5b:21:87:2b:2c:b1:48:64:f6:fa:3e:d9:9d:32:
b5:bd:4b:08:53:2e:d0:cc:6b:60:fe:50:8b:43:51:47:fe:2e:
8e:d1:52:6c:f1:c7:bd:ef:19:48:99:b5:53:97:58:5c:c9:94:
17:f0:27:5b:52:ad:fb:fe:34:fe:f1:b8:71:3e:79:1e:37:58:
7b:c3:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org