Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac7cf36c-90c0-30fa-8b80-828f7054d20d.roa
File: ac7cf36c-90c0-30fa-8b80-828f7054d20d.roa (raw, json)
Hash identifier: w9CZjeOqsMDtj27iTv0dTqGSlO5WPB7X0Oppuv5pqSE=
Subject key identifier: D0:7E:1C:DD:A6:8A:88:41:0D:29:1E:45:A8:01:9A:F8:F9:F5:19:23
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844B2CA5801CEDD25279372CB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac7cf36c-90c0-30fa-8b80-828f7054d20d.roa
Signing time: Sun 28 Jan 2024 02:00:26 +0000
ROA not before: Sun 28 Jan 2024 02:00:26 +0000
ROA not after: Sat 27 Apr 2024 01:00:26 +0000
asID: 54500
IP address blocks: 23.27.49.0/24 maxlen: 24
23.27.48.0/24 maxlen: 24
23.27.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b2:ca:58:01:ce:dd:25:27:93:72:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 28 02:00:26 2024 GMT
Not After : Apr 27 01:00:26 2024 GMT
Subject: CN=c107177d-0879-4436-8ba4-4aec25a4f939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:66:aa:d4:3f:16:28:5c:68:db:77:20:1b:
5b:c9:29:13:4b:44:a2:20:23:35:51:aa:d6:d1:03:
0e:67:74:50:07:30:ce:53:3e:cf:7e:33:48:5e:51:
4a:fc:19:01:68:59:05:15:be:19:a7:fe:dc:e3:e4:
bc:b4:ea:e2:da:82:92:ed:5c:fb:41:34:bc:cc:98:
c3:5e:97:2c:bf:c0:bd:8b:bd:10:24:98:48:47:f3:
1a:99:51:6c:38:09:81:c1:96:33:92:57:48:a5:93:
3d:30:3d:5d:75:f9:ae:1e:ac:7a:3f:67:3a:de:a4:
d7:8d:28:6c:9f:12:2f:59:95:bc:e9:d6:6c:c2:9b:
77:3c:99:db:6a:88:2d:da:2a:68:30:36:a2:de:ad:
bf:bf:9c:21:a8:dd:ea:f5:03:b7:0e:7c:e1:55:38:
c9:bd:d3:bc:41:1b:dc:04:3e:ea:8a:cf:77:98:0c:
55:ae:1c:9c:ce:55:e9:97:eb:7c:13:4e:6f:4c:97:
4f:52:53:1b:97:dd:60:2f:88:c9:43:9b:78:19:ed:
70:d7:39:88:de:01:b7:e2:15:0c:2e:15:f9:39:9f:
d5:16:83:1d:38:6c:ee:14:01:11:78:76:80:3d:9f:
a9:97:b6:f4:d1:b4:62:78:fa:b9:41:87:76:dc:2a:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7E:1C:DD:A6:8A:88:41:0D:29:1E:45:A8:01:9A:F8:F9:F5:19:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac7cf36c-90c0-30fa-8b80-828f7054d20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.48.0/23
23.27.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:8c:c3:05:f2:28:b2:2b:3c:10:75:7e:67:61:87:8f:c7:89:
50:3c:19:96:85:cc:ea:73:71:5f:17:9b:88:20:56:f6:9b:b4:
c1:2f:58:25:58:bb:46:87:3f:7a:71:e5:81:d6:01:d8:a5:63:
e4:92:ae:dd:03:a3:85:c9:91:fa:21:5d:b6:ce:5b:12:2d:36:
a1:f8:5d:1f:f5:31:5c:3a:06:b5:05:b9:8f:1c:2e:6e:6d:c9:
d1:a6:7d:58:56:39:22:07:f3:2f:39:54:63:b7:78:38:4d:27:
b7:13:8b:24:77:85:e7:6e:cb:6c:89:9a:5f:74:29:de:3b:1e:
42:e6:ea:3c:a8:58:c9:e0:48:e1:7f:59:5c:81:4a:67:00:af:
35:0f:ca:f3:50:ee:97:44:ba:ca:26:92:e6:df:c1:92:b9:8c:
12:0e:e7:04:02:55:de:c8:c1:96:19:ff:76:17:b3:b1:0c:07:
ac:72:21:e9:1e:ca:65:0e:2e:ab:4a:db:2f:62:27:35:3a:35:
03:f1:ae:56:fb:5c:ec:90:b1:2c:70:c7:08:cc:31:c6:0f:02:
a3:fa:b0:3b:06:54:ab:8f:e8:16:88:39:42:99:d2:28:86:a3:
ba:77:a8:f8:4f:f8:8a:a4:6d:48:f3:fd:33:78:14:bd:4b:82:
44:1e:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org