Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a16e65f7-0f09-31d0-a826-640aefd9d36f.roa
File: a16e65f7-0f09-31d0-a826-640aefd9d36f.roa (raw, json)
Hash identifier: 93OeROcmDMMGoxh8wdmPnnzj4r2V7Kqe5oOgmGjYioY=
Subject key identifier: 28:B9:AC:C5:70:5E:63:90:AE:0B:48:8C:A5:B1:67:A6:54:84:62:2D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583ACDB6283EE92A4A722DBD8B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a16e65f7-0f09-31d0-a826-640aefd9d36f.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Mon 06 Nov 2023 05:00:00 +0000
asID: 60311
IP address blocks: 136.0.3.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:cd:b6:28:3e:e9:2a:4a:72:2d:bd:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Nov 6 05:00:00 2023 GMT
Subject: CN=aa582bc5-519b-49f4-959f-f8f458dbc197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:64:d9:b0:48:fd:45:20:b3:5a:0c:42:9e:
d8:b8:bb:4f:a3:d3:b8:b3:67:65:fd:92:38:39:df:
e0:ff:35:5c:6c:1a:28:db:74:f6:7d:81:65:c9:51:
08:d3:e8:50:21:d0:81:2c:25:6f:52:6c:3d:79:fe:
a8:98:2e:46:07:48:b4:17:b5:c9:7b:ef:09:19:b4:
12:b0:77:f0:73:4a:76:75:34:3e:c2:1f:ab:35:ad:
22:a0:70:a8:a2:2f:18:58:b3:25:1c:f5:cb:4d:fb:
bb:2c:8e:6f:df:35:3c:bc:0a:4d:b9:b8:72:eb:16:
3a:83:b8:f6:ab:23:50:f0:5c:ce:76:b9:b8:4b:48:
5b:10:d3:61:0f:57:c0:c4:a8:43:60:be:f0:0b:13:
89:69:fe:84:ab:1f:4c:0e:b3:29:3e:cc:a7:e0:e5:
05:2f:6d:b8:4b:7e:12:61:b0:c6:e6:a8:ba:90:4f:
c0:3a:03:c0:c4:19:7c:2a:71:88:fd:33:57:9b:b9:
a2:85:59:06:e0:0f:ad:4a:24:b0:a8:dc:13:69:0d:
ec:93:51:a7:8b:dd:9a:f7:22:e1:13:56:3c:c0:20:
ca:6a:23:cf:3c:7d:bc:fb:36:2a:97:aa:97:d4:4a:
30:ab:96:57:60:fb:5a:f2:0c:e7:be:c1:31:34:71:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B9:AC:C5:70:5E:63:90:AE:0B:48:8C:A5:B1:67:A6:54:84:62:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a16e65f7-0f09-31d0-a826-640aefd9d36f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:7a:3e:11:b7:f0:46:ba:b1:7e:a3:53:33:20:ec:75:25:88:
d6:16:c3:ef:8a:f0:24:94:9f:97:90:e2:25:e1:ab:d9:78:9d:
10:c0:b3:30:b0:c5:5a:d3:dc:43:34:4a:1b:5a:4e:fc:ea:f9:
63:df:2e:3c:54:4e:03:9a:d9:bf:5f:6a:be:cb:87:41:f3:f7:
b6:db:56:a3:14:d3:b1:aa:87:4f:2e:07:b8:8c:8c:f7:66:22:
75:a8:bb:d1:62:e5:5d:fd:9e:7d:53:8f:14:bf:8d:24:f3:58:
69:e8:92:df:c1:dc:af:cf:09:12:ac:fe:04:85:6a:dd:65:aa:
bb:b5:04:cc:65:bb:a2:e0:45:b2:c0:d4:fe:4a:dc:5c:7e:12:
b8:fe:e0:ec:fe:aa:0b:ad:f3:dd:a5:47:6a:27:f9:10:b4:1e:
75:26:24:c5:d4:a8:4c:83:08:84:88:f3:40:9d:47:89:a7:69:
fe:76:e6:73:be:bb:83:9b:9e:12:fc:8d:e9:2c:3d:16:33:44:
8a:5d:f7:09:7d:08:a1:67:61:25:03:ef:a5:f0:08:77:d7:a8:
f0:80:bf:9c:a3:0b:58:af:59:a4:35:6f:26:9d:78:dd:ec:4a:
15:fc:c4:9b:97:71:72:40:ab:ee:03:32:13:d2:e3:55:37:fc:
91:3b:16:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDrNtig+6SpKci29iwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTIzMTEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YWE1ODJiYzUtNTE5Yi00OWY0LTk1OWYtZjhmNDU4ZGJjMTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NZk2bBI/UUgs1oMQp7YuLtPo9O4s2dl/ZI4
Od/g/zVcbBoo23T2fYFlyVEI0+hQIdCBLCVvUmw9ef6omC5GB0i0F7XJe+8JGbQS
sHfwc0p2dTQ+wh+rNa0ioHCooi8YWLMlHPXLTfu7LI5v3zU8vApNubhy6xY6g7j2
qyNQ8FzOdrm4S0hbENNhD1fAxKhDYL7wCxOJaf6Eqx9MDrMpPsyn4OUFL224S34S
YbDG5qi6kE/AOgPAxBl8KnGI/TNXm7mihVkG4A+tSiSwqNwTaQ3sk1Gni92a9yLh
E1Y8wCDKaiPPPH28+zYql6qX1Eowq5ZXYPta8gznvsExNHFtJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi5rMVwXmOQrgtIjKWxZ6ZUhGItMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTE2ZTY1ZjctMGYwOS0z
MWQwLWE4MjYtNjQwYWVmZDlkMzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAADMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR6PhG38Ea6sX6jUzMg7HUliNYWw++K8CSUn5eQ4iXhq9l4nRDAszCw
xVrT3EM0ShtaTvzq+WPfLjxUTgOa2b9far7Lh0Hz97bbVqMU07Gqh08uB7iMjPdm
InWou9Fi5V39nn1TjxS/jSTzWGnokt/B3K/PCRKs/gSFat1lqru1BMxlu6LgRbLA
1P5K3Fx+Erj+4Oz+qgut892lR2on+RC0HnUmJMXUqEyDCISI80CdR4mnaf525nO+
u4ObnhL8jeksPRYzRIpd9wl9CKFnYSUD76XwCHfXqPCAv5yjC1ivWaQ1byadeN3s
ShX8xJuXcXJAq+4DMhPS41U3/JE7FhQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:10 2024 by rpki-client on console-ams.rpki-client.org