Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a917e2d4-f4c8-30ef-b294-b73d303a51a0.roa
File: a917e2d4-f4c8-30ef-b294-b73d303a51a0.roa (raw, json)
Hash identifier: eLIXVyAw7GKEeoD3xx75Y6zTzhrmF9M0Eliaqo/AuMQ=
Subject key identifier: 1F:B6:5A:DF:3C:25:B0:CD:B2:64:AE:19:86:56:64:EA:51:D7:4E:78
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841C58F0A99CA77C5B5836C4F40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a917e2d4-f4c8-30ef-b294-b73d303a51a0.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 06 Aug 2025 04:00:00 +0000
asID: 149440
IP address blocks: 23.27.163.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:c5:8f:0a:99:ca:77:c5:b5:83:6c:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 6 04:00:00 2025 GMT
Subject: CN=8bb00808-4c90-4478-800c-5610e13da776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:d8:0b:32:da:70:be:1c:d0:ff:9a:c3:47:
5b:d3:ba:8b:ed:db:f1:3c:a1:04:86:f0:be:fb:bd:
93:f5:a1:6b:51:b7:3b:77:57:42:11:87:85:62:d6:
2c:e5:1c:24:aa:9e:2c:20:d5:28:23:46:bc:48:b8:
66:bb:f6:e6:e5:c5:fe:f6:81:65:6f:52:b8:42:41:
a3:5c:7f:b9:78:03:5f:aa:37:ca:fe:c1:11:ea:8c:
0b:55:23:a4:b4:56:5a:57:13:42:21:1b:32:4e:bf:
2f:f5:4b:89:f6:33:f5:ad:66:24:9c:d5:f4:84:9e:
a0:26:96:96:c0:e9:3f:33:71:64:30:ca:e8:1d:15:
54:06:af:8f:ec:ae:25:36:1c:87:89:8b:5a:c4:cc:
98:e0:3d:5c:55:09:25:88:b9:76:f3:d5:8d:f9:64:
58:5a:96:5b:14:03:96:69:68:e6:c0:61:10:75:ba:
e6:f4:01:db:fd:46:0f:e7:5b:66:c3:b7:0b:fd:29:
37:53:b3:23:be:33:56:b6:a5:5c:50:81:94:15:2c:
a9:72:47:80:9d:8c:92:d7:10:87:81:8a:39:70:f9:
43:58:99:17:52:6f:a8:63:d2:dc:e6:f3:48:ae:1f:
a2:98:95:05:56:10:89:99:83:6d:d5:a8:91:21:1a:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:5A:DF:3C:25:B0:CD:B2:64:AE:19:86:56:64:EA:51:D7:4E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a917e2d4-f4c8-30ef-b294-b73d303a51a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:13:8c:58:38:69:ca:7a:63:5c:50:c3:0b:19:a4:d6:9e:b1:
53:48:e2:b1:43:e1:33:5d:ec:6a:37:95:c5:03:29:9a:73:d6:
9c:53:b0:20:e6:e6:f5:de:6f:f6:c9:51:d9:71:bb:6a:95:e5:
93:c4:13:34:82:78:10:93:29:26:6c:6d:11:44:f3:91:74:fe:
fe:35:73:df:96:8a:15:31:50:41:de:4e:03:55:ab:a5:88:85:
65:ff:54:5e:67:29:8f:33:c7:76:7e:68:ef:7f:6e:c9:8a:ee:
07:bf:9e:16:55:91:a4:7e:fb:e1:8b:1a:91:f5:0e:6c:f0:19:
61:ba:f1:22:b4:ad:86:5f:b7:c3:8d:a8:21:07:18:06:da:90:
8b:17:fe:b5:e5:b5:c8:3d:d0:d9:84:a3:59:87:d3:a7:be:98:
8d:cf:28:20:27:08:77:39:9c:26:dd:bd:8c:4a:76:6c:36:27:
0e:94:16:49:f5:ee:52:b5:d2:bf:c7:b1:e4:17:1b:47:a8:1b:
bc:61:67:d6:ed:cf:27:dd:a0:63:ca:c8:6a:38:df:44:38:1e:
62:18:de:3a:be:8e:68:19:05:17:d2:6a:32:c3:eb:56:32:fd:
48:27:35:04:ca:ad:52:85:84:e9:96:f8:6f:6b:44:34:e8:e3:
e9:48:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org