Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5bf5774-662f-397d-a4b5-bf18a4a095f5.roa
File: b5bf5774-662f-397d-a4b5-bf18a4a095f5.roa (raw, json)
Hash identifier: R0Zl4oRhFY08ABTwGvUrgoyEV3r6pQA/YBpdWxVktzs=
Subject key identifier: 1F:96:79:89:6D:97:2B:00:90:30:53:22:0C:26:A3:B2:00:9E:8E:DB
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858424EC263E4FDDEF836FCF9F040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5bf5774-662f-397d-a4b5-bf18a4a095f5.roa
Signing time: Thu 22 Jun 2023 20:29:59 +0000
ROA not before: Thu 22 Jun 2023 20:29:59 +0000
ROA not after: Wed 20 Sep 2023 20:29:59 +0000
asID: 49316
IP address blocks: 136.0.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:c2:63:e4:fd:de:f8:36:fc:f9:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jun 22 20:29:59 2023 GMT
Not After : Sep 20 20:29:59 2023 GMT
Subject: CN=4f5ea2e7-a6b3-4478-9db8-c295d4e1b487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:45:cf:ee:31:ae:f2:60:aa:4b:bb:76:05:
c5:73:f6:ae:ed:1e:20:a0:40:b4:fd:60:49:5b:05:
81:60:57:09:e6:64:06:05:b9:39:30:70:20:dc:9b:
88:33:4a:6c:59:bf:7a:33:2b:a0:54:6c:6b:bc:c8:
be:1d:66:dd:d8:c6:75:90:b5:af:6b:47:13:e1:5e:
f8:ab:04:10:6b:f4:8b:21:a8:bc:37:2c:67:10:81:
bf:ac:0d:3e:4f:b0:3b:f3:a5:75:f1:ed:ac:9f:26:
cc:9e:ca:16:9e:14:43:b1:f8:72:2d:5e:43:2b:5b:
02:48:d7:2b:cc:ea:f7:fe:7f:74:4f:62:7d:d1:95:
e1:0c:c9:b1:10:8e:10:b8:fa:09:17:34:aa:77:cb:
56:96:05:07:22:8a:22:dc:b7:4d:c4:b9:f0:93:bc:
bf:b2:bd:13:ea:7f:5c:e0:b6:48:86:87:3c:e8:89:
2f:a7:ae:98:1b:e1:7e:05:e7:3d:e0:8e:b2:01:6c:
76:41:e0:f2:a6:a7:95:e9:67:fb:be:0e:b6:4a:5f:
ff:48:a1:00:a7:0c:6c:58:98:12:49:9d:36:d9:ba:
4b:18:17:03:b4:6a:b8:bc:64:fd:c6:fe:f3:b8:09:
65:de:9b:61:ca:37:cc:a6:6c:30:45:b0:bd:82:89:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:79:89:6D:97:2B:00:90:30:53:22:0C:26:A3:B2:00:9E:8E:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5bf5774-662f-397d-a4b5-bf18a4a095f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:25:b7:68:ba:bb:5e:a0:07:ea:8b:fb:69:a5:a8:1f:39:f2:
21:69:57:f6:63:70:7c:83:72:b2:32:91:6b:ab:8a:2c:05:c0:
94:b5:3e:96:55:8c:7f:6e:f7:bf:cd:22:31:28:fa:1d:5e:1d:
4b:cc:a1:81:52:99:dd:4a:9f:d0:42:c8:68:2b:e5:d3:0b:99:
8d:b3:18:87:54:7b:3b:65:9e:7e:1b:fe:e3:83:ae:f1:f2:ee:
5e:99:c0:f7:50:72:43:5a:99:05:c3:0e:a2:31:ed:15:29:d6:
49:95:58:f9:ab:a6:ad:49:1c:be:37:ce:c3:f4:ac:20:a1:70:
af:57:fc:9d:9f:e3:48:2e:c1:b4:7b:33:67:59:23:5e:f4:4e:
e3:2f:3b:51:c0:aa:d5:27:18:28:43:88:21:43:8d:29:b4:81:
de:e5:09:17:60:fe:38:1c:4a:13:a4:89:70:fb:34:e8:01:b5:
5d:34:e3:6c:2e:c5:bb:d4:d8:ad:8d:27:1b:2a:d4:a5:52:e5:
f5:b7:24:71:1f:a4:0d:c0:07:62:3e:f0:55:30:0d:7b:c3:cb:
18:f6:17:8b:fb:ad:48:d0:18:cb:15:73:46:fc:26:0e:7b:78:
52:b3:be:f1:4f:4b:23:74:0a:7e:32:ad:a0:e5:33:ce:53:a1:
81:bc:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:30 2024 by rpki-client on console-fra.rpki-client.org