Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/96f5c267-0505-374d-a776-061cf32129dd.roa
File: 96f5c267-0505-374d-a776-061cf32129dd.roa (raw, json)
Hash identifier: zBUp5OgbzjviHLvyznBIaaGpkuTp8AY3d8x063br8YM=
Subject key identifier: 0C:80:02:70:B5:33:90:9C:D6:4A:A1:DE:55:9E:83:AE:14:62:1B:46
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844B6FA62763A966EF395AE7200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/96f5c267-0505-374d-a776-061cf32129dd.roa
Signing time: Mon 29 Jan 2024 14:00:29 +0000
ROA not before: Mon 29 Jan 2024 14:00:29 +0000
ROA not after: Sun 28 Apr 2024 13:00:29 +0000
asID: 5650
IP address blocks: 104.252.84.0/22 maxlen: 24
104.253.32.0/22 maxlen: 24
166.88.188.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b6:fa:62:76:3a:96:6e:f3:95:ae:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 29 14:00:29 2024 GMT
Not After : Apr 28 13:00:29 2024 GMT
Subject: CN=1b1698f0-9f5d-49cf-b007-ac0df455255b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:5e:01:86:91:4c:48:2f:ee:25:05:47:c1:
35:e7:41:2a:bf:d2:97:19:fe:00:8d:85:c9:cb:b6:
df:a4:87:7f:5a:a7:7d:d8:c8:d8:81:ee:80:0c:dc:
4a:af:73:46:5c:76:8e:a8:d4:41:c4:ea:bf:13:d8:
82:79:48:8e:e9:3c:68:9f:60:6c:7a:16:b2:9f:04:
fe:90:e4:74:db:18:8c:28:d7:4b:75:b8:b2:d3:25:
28:0c:97:a0:8a:04:65:37:54:0a:ba:ef:a7:19:09:
2a:db:38:41:f6:da:17:6c:27:8a:56:a1:da:48:30:
39:87:a3:af:fd:23:92:45:21:fd:50:61:9e:20:81:
b1:5d:b0:bc:5a:1b:88:44:56:b1:c9:7d:c6:93:0b:
b4:cf:b4:22:57:84:f0:55:e4:31:16:3f:c1:94:80:
95:db:f7:d2:1a:c4:64:69:11:19:be:b5:f3:e4:b0:
8a:05:df:7f:1a:5a:4c:b4:40:c9:8d:b6:f1:09:ee:
5c:29:33:a9:ea:36:4d:b7:1f:13:40:d1:6d:ec:b2:
53:27:90:ae:65:08:dd:3d:cd:02:0c:01:c7:d2:1f:
43:1a:7c:bf:29:f4:d6:df:24:66:a5:64:f7:f3:0a:
5e:b6:fb:d6:68:45:cd:43:fc:ae:45:57:f6:62:4a:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:02:70:B5:33:90:9C:D6:4A:A1:DE:55:9E:83:AE:14:62:1B:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/96f5c267-0505-374d-a776-061cf32129dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.84.0/22
104.253.32.0/22
166.88.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:04:e4:78:2e:a3:95:8c:c9:0c:d5:8a:71:49:33:50:9b:19:
4d:29:bf:cc:5f:a3:a6:30:4d:b0:86:3e:e5:e7:65:95:f3:40:
ca:53:9b:7c:3b:45:f3:47:90:b8:81:c1:db:8d:10:ab:68:0c:
8e:37:79:69:fd:e6:e0:f8:65:fe:e3:8f:e6:65:20:32:62:59:
bc:03:c3:1d:1b:48:f2:a9:7f:46:0a:82:03:23:d0:32:99:05:
46:d3:46:1f:bb:7f:5a:8a:f1:41:fa:2b:2a:c6:69:c0:8b:8a:
74:b0:bc:38:1a:ed:0c:64:b6:e8:61:c3:68:a8:f1:b8:26:73:
6e:8e:cc:2d:38:1f:d9:93:34:43:cf:1f:c1:ed:da:4c:df:f8:
b8:1d:59:be:e1:cc:92:13:96:e8:e1:3a:50:7a:fb:92:bf:5d:
9e:a8:3a:08:b9:63:35:21:30:23:af:2c:e7:29:20:0d:d9:3f:
fe:c7:1e:2d:e2:09:d8:77:95:96:18:4a:f7:01:ea:91:4a:8a:
de:ed:56:02:4c:98:0a:d8:bb:6c:55:f5:71:00:34:69:b4:21:
b4:ae:b1:2b:a9:90:b3:87:09:ef:34:53:83:d8:70:6f:2d:92:
fd:bb:6d:db:91:77:06:3e:5b:71:3c:5a:73:65:ec:75:ca:81:
ff:aa:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org