Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b42de768-7f1f-393d-8f44-e03806a9407e.roa
File: b42de768-7f1f-393d-8f44-e03806a9407e.roa (raw, json)
Hash identifier: FMlztxhLN8Sei5yCSwLbIi+BiMwjWav2ceeu1N7PU/4=
Subject key identifier: 54:24:73:A9:FB:A6:AB:C1:82:03:C8:FE:73:24:7B:E0:A8:14:0D:52
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583DCE6E7D99293DCB6CF450DBC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b42de768-7f1f-393d-8f44-e03806a9407e.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 07 Aug 2024 04:00:00 +0000
asID: 208707
IP address blocks: 23.27.199.0/24 maxlen: 24
23.27.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:6e:7d:99:29:3d:cb:6c:f4:50:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 7 04:00:00 2024 GMT
Subject: CN=f6548446-1e52-4dc0-938c-81c685a24dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:3e:07:f1:75:48:6a:f8:d8:19:be:86:ab:
c5:f5:66:65:16:70:ea:33:09:71:08:75:89:79:c4:
e3:36:fb:27:83:7e:b3:e9:79:d1:0c:90:e2:33:25:
24:49:05:54:10:d3:95:ef:50:d8:11:f4:c4:ac:81:
e0:e1:30:11:ee:b4:ba:99:57:4e:52:86:fa:7c:e3:
11:65:d3:4e:f9:ed:8a:27:f5:d9:a3:d3:24:0b:2a:
7f:9f:c0:68:0d:eb:0f:a3:19:5f:98:04:b6:08:06:
95:67:1c:a4:c9:00:ef:b7:9b:69:d2:b1:54:e9:6f:
a9:aa:29:e7:74:35:7b:5c:55:77:3e:ee:89:9f:27:
a4:e9:74:8c:1b:0f:49:b0:a3:74:1f:8c:e7:c3:ec:
07:c2:ca:b3:00:0f:1d:cd:da:d7:33:c9:17:18:5b:
54:9f:47:da:5c:83:47:3a:b7:74:f8:e0:f4:e4:97:
b2:e9:29:92:69:49:7a:01:93:2a:24:41:f6:fe:a1:
78:46:69:fb:b4:bf:b1:d7:2e:a4:b1:37:67:b0:90:
27:e0:db:ad:ea:52:fd:86:b8:98:17:7a:c9:8f:ca:
ec:f2:39:cf:be:f0:0f:bb:85:f5:fe:f3:60:25:75:
7f:4d:07:8a:20:40:5e:92:ad:de:ab:f8:50:d7:29:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:73:A9:FB:A6:AB:C1:82:03:C8:FE:73:24:7B:E0:A8:14:0D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b42de768-7f1f-393d-8f44-e03806a9407e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.168.0/24
23.27.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:db:dd:c3:fb:9d:c4:1e:72:eb:b4:9e:91:31:bd:93:c2:aa:
0c:13:aa:81:a2:ae:8a:ab:5d:92:04:49:ee:35:c6:ee:39:c9:
9a:bf:f0:5e:2e:f3:4d:6b:2d:36:3b:27:25:76:74:0c:4a:49:
39:7e:e8:a9:33:41:6b:5e:66:28:de:ff:64:5f:74:ff:58:cb:
51:f0:2c:70:a5:f7:2b:3b:a0:6b:07:50:84:dd:84:fb:33:8e:
24:48:0d:92:91:06:07:8f:bb:63:e5:dc:f6:05:1c:ac:7c:3c:
93:73:27:92:0d:96:76:e1:68:24:3f:17:04:2f:6f:7a:79:d6:
4d:96:ed:9e:05:37:df:a1:c8:9b:b3:5e:27:95:94:f5:c7:86:
64:1a:8f:b2:75:05:95:d0:2d:78:2e:b0:3b:2e:cd:ac:a6:ee:
09:07:e4:51:98:80:4d:62:78:7c:85:24:ee:b3:d8:5c:33:20:
7e:82:b3:1e:af:68:04:03:02:25:4f:2d:08:ea:53:50:aa:47:
e1:6d:b6:02:5b:a3:9c:74:8b:0b:de:a7:d4:dd:c7:da:96:6d:
f5:a3:35:5f:ea:96:3f:97:b2:88:67:05:2a:87:30:b3:f7:1c:
ba:a0:be:bb:6e:bf:4c:08:91:16:db:be:ee:01:12:9d:71:69:
c7:5b:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:30 2024 by rpki-client on console-fra.rpki-client.org