Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cd675-1935-30fc-836e-86e9b62a03ab.roa
File: ab5cd675-1935-30fc-836e-86e9b62a03ab.roa (raw, json)
Hash identifier: AqWVZ3N5AHC/h5duM/O8W3HaM1vw9OFKsW9dSWxd5tU=
Subject key identifier: EA:6B:95:04:76:75:50:59:A5:C0:DD:96:7B:FE:D2:31:27:89:56:E7
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858455C7257E90170FC95969DCE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cd675-1935-30fc-836e-86e9b62a03ab.roa
Signing time: Thu 28 Mar 2024 20:30:50 +0000
ROA not before: Thu 28 Mar 2024 20:30:50 +0000
ROA not after: Wed 26 Jun 2024 20:30:50 +0000
asID: 26375
IP address blocks: 23.27.236.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:5c:72:57:e9:01:70:fc:95:96:9d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 28 20:30:50 2024 GMT
Not After : Jun 26 20:30:50 2024 GMT
Subject: CN=c4c3fb81-032d-4e65-9312-287d07cca96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:5a:5e:0e:85:de:29:35:aa:64:0c:a3:3c:
05:dc:80:58:a8:53:e5:99:3e:7e:26:95:8a:60:5d:
f3:a8:cd:54:80:50:5b:5c:86:21:ff:01:98:d3:2f:
bd:ec:20:d3:8c:c0:e6:a3:ac:e2:ef:da:16:38:88:
31:ca:3b:a5:58:69:3d:ed:77:5a:66:6d:33:9e:a1:
ad:6e:53:ab:2c:ea:d5:45:dc:eb:ea:ea:f1:aa:dc:
c0:dd:fa:0b:80:8d:f5:69:3f:42:97:82:74:7f:01:
98:1d:44:05:06:03:46:eb:a0:ab:f3:d4:49:db:be:
fc:f8:57:2c:d9:b9:8f:c0:b7:4c:a6:4e:d6:af:c8:
12:3f:43:fa:2e:3b:b9:21:fd:37:11:42:e3:64:76:
ae:2b:2f:a9:01:7d:06:33:2f:bf:17:55:f2:7f:1b:
2e:ce:dc:87:d4:56:e0:ab:41:e2:36:e2:de:a9:52:
6b:19:a4:31:88:0e:7b:78:7a:03:28:f5:f1:7e:22:
ae:6c:39:37:1c:c2:90:3a:13:92:d6:9b:db:77:e9:
59:ad:af:42:a9:0a:4c:d6:3d:3c:fb:68:94:b7:ca:
c0:e8:57:ba:fc:85:15:77:09:ec:d8:5e:f3:2f:ed:
f4:f9:05:ab:1a:94:33:f3:fc:46:4c:39:fc:7a:fe:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:95:04:76:75:50:59:A5:C0:DD:96:7B:FE:D2:31:27:89:56:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cd675-1935-30fc-836e-86e9b62a03ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:40:58:c7:e7:65:bd:a4:de:fc:40:da:13:ef:a0:71:21:5c:
74:4a:96:07:fb:ff:f8:0f:28:48:80:25:9c:a9:bd:93:45:f6:
23:9f:89:a6:6b:d0:97:8a:4b:9d:db:d4:59:62:25:fd:11:6d:
c2:9d:1a:4a:a3:39:72:3f:d9:d2:2b:da:8a:b6:d0:a4:36:eb:
8b:1d:cb:68:55:56:b1:26:2b:c7:ef:b2:4e:26:58:3c:2c:6f:
b3:10:4b:49:bd:32:39:c3:d1:49:3b:16:7b:f3:c4:04:b1:ff:
40:ba:9d:d0:ad:c3:fb:32:85:a9:34:fb:ca:7d:10:31:a3:5a:
dd:60:44:01:84:c3:05:f5:f8:b1:8b:b5:70:ef:f7:98:3f:8e:
ef:21:53:32:1e:91:3a:c8:3b:62:47:95:bf:48:c7:27:df:9c:
30:b5:29:a4:f3:a5:1f:4b:25:20:52:7d:97:d0:a0:71:a6:65:
da:de:e7:82:ba:37:33:7c:ad:37:4f:49:e3:99:ff:80:61:10:
94:ea:75:ab:c3:9a:1c:b9:74:60:0f:00:40:aa:f6:7d:93:ae:
c3:fe:64:8a:3c:af:0d:34:5d:76:82:2e:4f:0c:32:79:66:36:
f1:73:4f:c3:55:a9:87:40:a9:1d:87:b8:61:b6:73:49:0c:8f:
63:c4:49:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVcclfpAXD8lZadzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDMyODIwMzA1MFoXDTI0MDYyNjIwMzA1MFowLzEtMCsGA1UEAxMk
YzRjM2ZiODEtMDMyZC00ZTY1LTkzMTItMjg3ZDA3Y2NhOTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTFaXg6F3ik1qmQMozwF3IBYqFPlmT5+JpWK
YF3zqM1UgFBbXIYh/wGY0y+97CDTjMDmo6zi79oWOIgxyjulWGk97XdaZm0znqGt
blOrLOrVRdzr6urxqtzA3foLgI31aT9Cl4J0fwGYHUQFBgNG66Cr89RJ2778+Fcs
2bmPwLdMpk7Wr8gSP0P6Lju5If03EULjZHauKy+pAX0GMy+/F1XyfxsuztyH1Fbg
q0HiNuLeqVJrGaQxiA57eHoDKPXxfiKubDk3HMKQOhOS1pvbd+lZra9CqQpM1j08
+2iUt8rA6Fe6/IUVdwns2F7zL+30+QWrGpQz8/xGTDn8ev4DEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOprlQR2dVBZpcDdlnv+0jEniVbnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWI1Y2Q2NzUtMTkzNS0z
MGZjLTgzNmUtODZlOWI2MmEwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFxvsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdAWMfnZb2k3vxA2hPvoHEhXHRKlgf7//gPKEiAJZypvZNF9iOfiaZr
0JeKS53b1FliJf0RbcKdGkqjOXI/2dIr2oq20KQ264sdy2hVVrEmK8fvsk4mWDws
b7MQS0m9MjnD0Uk7FnvzxASx/0C6ndCtw/syhak0+8p9EDGjWt1gRAGEwwX1+LGL
tXDv95g/ju8hUzIekTrIO2JHlb9IxyffnDC1KaTzpR9LJSBSfZfQoHGmZdre54K6
NzN8rTdPSeOZ/4BhEJTqdavDmhy5dGAPAECq9n2TrsP+ZIo8rw00XXaCLk8MMnlm
NvFzT8NVqYdAqR2HuGG2c0kMj2PEScw=
-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org