Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abc33332-c0f9-30c7-a990-54235f206543.roa
File: abc33332-c0f9-30c7-a990-54235f206543.roa (raw, json)
Hash identifier: AP5Zb4XR8uHC6QYPq1RFI57oNo/D13gpEtpr9fDi3Os=
Subject key identifier: 32:4B:FF:DB:47:FB:4B:56:5B:10:5F:3C:C0:A3:6F:50:5C:A5:12:30
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858420B75F1D0EDFF47236B619B20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abc33332-c0f9-30c7-a990-54235f206543.roa
Signing time: Mon 29 May 2023 17:56:48 +0000
ROA not before: Mon 29 May 2023 17:56:48 +0000
ROA not after: Sun 27 Aug 2023 17:56:48 +0000
asID: 834
IP address blocks: 136.0.92.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:0b:75:f1:d0:ed:ff:47:23:6b:61:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 29 17:56:48 2023 GMT
Not After : Aug 27 17:56:48 2023 GMT
Subject: CN=5fdb512e-4c98-41b4-920c-8c9b2d43fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:a0:fe:c0:df:14:12:80:89:f5:fa:93:f3:
d5:8b:0f:4c:2d:1a:e5:9e:c2:d3:3b:cb:b3:a4:14:
91:fd:63:bd:f7:a2:23:55:88:16:b4:f6:f4:63:52:
73:54:21:71:40:18:10:48:24:79:02:10:1d:dd:fc:
e9:e8:c9:8f:44:e5:a3:50:1d:c8:b1:4c:fe:64:6c:
f0:c6:56:f2:4f:88:7e:35:c6:9b:58:6b:8f:e6:53:
19:a9:27:f4:7a:d4:96:c5:f3:86:ee:7c:78:24:b1:
f5:ea:cd:34:f3:62:5a:65:6f:ca:06:c6:4e:99:7d:
06:31:2f:bf:ee:0c:be:07:93:d1:12:87:25:0e:0b:
e9:f6:2c:ae:e4:2e:1b:12:13:51:d7:06:20:e2:cf:
95:d8:c8:dc:0d:c9:5a:4b:bd:8f:06:89:73:58:08:
ff:c9:97:aa:06:9e:60:c8:69:28:18:2d:b1:13:dc:
c2:6d:6b:79:9c:3f:46:d5:ca:29:47:b1:08:55:da:
48:75:ae:14:ee:c8:7e:43:81:6b:25:d9:3b:40:0c:
df:72:bf:cb:7a:94:22:26:89:e8:53:33:a9:2f:4c:
78:21:27:5d:25:bc:fa:fc:8e:57:5d:96:5b:dd:84:
aa:89:dd:fa:44:3c:b4:77:72:1d:02:66:84:97:ec:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:FF:DB:47:FB:4B:56:5B:10:5F:3C:C0:A3:6F:50:5C:A5:12:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abc33332-c0f9-30c7-a990-54235f206543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:97:ca:07:50:b7:8d:1e:16:e9:9a:5c:f3:b0:ee:be:77:95:
38:1e:22:27:83:01:b0:e4:17:71:b9:5c:a4:bb:5a:df:f9:ff:
00:97:3b:1b:13:c4:da:ee:b0:b3:5b:2a:d4:cf:a4:1c:84:d2:
e2:0b:71:da:9f:f9:31:64:18:5d:5d:fd:cc:ad:5f:9b:af:5f:
a9:3d:9a:27:d0:03:72:ee:6c:82:31:bb:d4:04:79:d8:3c:42:
50:85:f2:2b:6d:e2:46:85:29:ef:f9:15:48:9c:00:8d:a7:a0:
63:1f:f1:84:24:4a:d1:d8:c4:ca:aa:28:e6:5b:e6:6f:d3:3a:
a8:4d:54:93:45:92:8b:4a:df:5a:84:15:b0:bf:58:38:8f:c5:
d0:2b:15:ae:e3:f4:94:db:74:52:4c:ba:4a:93:f1:39:ea:fe:
67:ba:1c:2c:26:33:d0:55:a7:ce:ff:84:65:b1:c0:ef:fb:35:
09:97:09:2e:ca:e2:21:18:c2:4b:f0:5a:e5:9b:0b:d4:b2:e4:
1c:4c:27:8f:d1:ec:38:fa:93:f4:93:92:6f:e9:03:35:56:a8:
47:66:1d:1f:36:3c:b4:fc:48:87:f8:5a:42:7b:c3:19:64:cd:
87:d0:4a:7d:ad:7c:b4:8c:4d:bc:51:66:18:fa:f3:fb:16:e7:
67:88:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:29 2024 by rpki-client on console-fra.rpki-client.org