Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b45424d8-9a9d-3495-a630-0fd04c477968.roa
File: b45424d8-9a9d-3495-a630-0fd04c477968.roa (raw, json)
Hash identifier: 199qKn73f+xUrtNd//7KCixyxFGEJLlgE8NbFzHBBR0=
Subject key identifier: 89:55:80:D3:F6:D9:71:39:ED:28:26:BE:FE:C6:2D:12:3A:B8:B2:2C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858451FAAED5C79A105A36EFB7180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b45424d8-9a9d-3495-a630-0fd04c477968.roa
Signing time: Thu 07 Mar 2024 02:00:25 +0000
ROA not before: Thu 07 Mar 2024 02:00:25 +0000
ROA not after: Wed 05 Jun 2024 01:00:25 +0000
asID: 210715
IP address blocks: 23.27.211.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1f:aa:ed:5c:79:a1:05:a3:6e:fb:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 7 02:00:25 2024 GMT
Not After : Jun 5 01:00:25 2024 GMT
Subject: CN=8f2b0e7e-fb8d-4a9c-a32c-c94430d1974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:20:76:84:43:8f:07:35:92:d2:d5:f5:7a:
35:76:60:ae:e8:15:4c:97:87:30:d8:98:05:41:62:
f9:a4:17:e0:7f:83:52:62:82:45:85:0d:b6:03:c0:
22:0e:1e:f1:2a:a0:e4:02:f9:8c:09:49:18:4b:79:
cb:69:e7:10:3f:4c:88:fb:58:27:18:93:5f:86:9f:
8a:ac:08:11:1b:08:e7:17:38:cf:ed:f5:19:9b:e4:
f9:57:87:62:92:ac:2e:b6:ca:a5:6a:03:b1:40:37:
09:f5:5e:8a:8e:3f:89:be:f6:65:24:95:77:58:4a:
86:a8:67:e2:ba:14:3c:2b:e6:84:ee:19:27:8f:f2:
8e:65:89:48:53:b1:c7:9b:88:31:36:c7:63:dd:a5:
d4:d4:e9:98:8c:76:e7:11:02:7f:ee:d8:25:f8:61:
34:03:13:1c:6d:62:b8:5c:d4:b6:0b:21:de:0f:68:
06:9e:a6:ff:a7:ce:7e:d5:a7:b6:1e:97:ea:c1:aa:
91:f3:1c:d0:f2:a7:aa:f9:80:f6:e5:26:e8:18:bf:
bc:1b:2a:2a:ad:59:e9:51:6c:f6:8e:13:2c:6b:24:
9f:1d:08:74:9a:84:fe:f3:10:b9:c1:5f:54:04:ba:
c3:fd:07:d4:c9:2b:8e:ed:fa:f3:f1:4d:8a:1b:07:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:80:D3:F6:D9:71:39:ED:28:26:BE:FE:C6:2D:12:3A:B8:B2:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b45424d8-9a9d-3495-a630-0fd04c477968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:12:34:f7:fe:72:ad:e3:98:c4:b7:25:9f:34:06:11:2f:bb:
18:7d:03:d8:25:a0:03:83:9c:09:c9:4d:10:43:81:69:b1:66:
1f:58:d2:89:45:5a:43:5c:ce:38:2f:f9:34:8b:21:bf:97:43:
37:ae:d5:d9:fe:a8:9f:29:76:06:e9:f8:89:2c:c5:c9:b6:a3:
5b:0f:9c:8c:f4:84:ce:9e:23:83:00:a0:76:cd:c3:46:d3:9b:
82:76:eb:65:e0:8a:0b:12:95:a5:77:89:2a:bf:8c:16:2f:63:
10:90:6e:e8:6b:c5:00:5a:2d:0a:43:38:b7:5d:62:86:5e:a4:
8c:1c:06:0f:b7:71:50:be:c8:62:e4:84:bc:6e:11:de:d6:ff:
0e:a9:28:b0:07:77:59:1e:9c:e6:ae:f7:22:8b:19:49:56:01:
5c:d8:b5:ab:8e:4e:2c:4f:5a:15:92:a6:ce:64:59:41:64:1f:
e2:a4:32:b8:e9:b1:c7:95:ce:49:1f:bc:df:d1:46:8b:f1:38:
f7:fb:90:f1:ac:ee:a7:83:08:a4:59:0e:5c:00:de:1e:af:71:
5c:0d:e1:f1:6f:68:98:22:a8:51:59:d1:03:91:ee:da:0a:c8:
35:42:80:39:f1:7d:5a:e0:f9:da:d8:3a:52:5d:1a:0d:0e:00:
03:10:50:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqu1ceaEFo277cYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
OGYyYjBlN2UtZmI4ZC00YTljLWEzMmMtYzk0NDMwZDE5NzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxEgdoRDjwc1ktLV9Xo1dmCu6BVMl4cw2JgF
QWL5pBfgf4NSYoJFhQ22A8AiDh7xKqDkAvmMCUkYS3nLaecQP0yI+1gnGJNfhp+K
rAgRGwjnFzjP7fUZm+T5V4dikqwutsqlagOxQDcJ9V6Kjj+JvvZlJJV3WEqGqGfi
uhQ8K+aE7hknj/KOZYlIU7HHm4gxNsdj3aXU1OmYjHbnEQJ/7tgl+GE0AxMcbWK4
XNS2CyHeD2gGnqb/p85+1ae2HpfqwaqR8xzQ8qeq+YD25SboGL+8GyoqrVnpUWz2
jhMsaySfHQh0moT+8xC5wV9UBLrD/QfUySuO7frz8U2KGwc19wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlVgNP22XE57Sgmvv7GLRI6uLIsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjQ1NDI0ZDgtOWE5ZC0z
NDk1LWE2MzAtMGZkMDRjNDc3OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEISNPf+cq3jmMS3JZ80BhEvuxh9A9gloAODnAnJTRBDgWmxZh9Y0olF
WkNczjgv+TSLIb+XQzeu1dn+qJ8pdgbp+Iksxcm2o1sPnIz0hM6eI4MAoHbNw0bT
m4J262XgigsSlaV3iSq/jBYvYxCQbuhrxQBaLQpDOLddYoZepIwcBg+3cVC+yGLk
hLxuEd7W/w6pKLAHd1kenOau9yKLGUlWAVzYtauOTixPWhWSps5kWUFkH+KkMrjp
sceVzkkfvN/RRovxOPf7kPGs7qeDCKRZDlwA3h6vcVwN4fFvaJgiqFFZ0QOR7toK
yDVCgDnxfVrg+drYOlJdGg0OAAMQUKw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:11 2024 by rpki-client on console-ams.rpki-client.org