Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b6fae68e-7edd-3095-aebf-714d8db89771.roa
File: b6fae68e-7edd-3095-aebf-714d8db89771.roa (raw, json)
Hash identifier: Jht9dRG9plDO5BSuqyfgHTWBVXNBkfpzYMK4DGqnsjo=
Subject key identifier: E3:A9:E1:64:4A:45:FE:F6:27:70:37:CD:C1:D4:4C:1C:15:8A:16:E4
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858457A4890739CD9B2FA9A9CE200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b6fae68e-7edd-3095-aebf-714d8db89771.roa
Signing time: Mon 08 Apr 2024 13:00:34 +0000
ROA not before: Mon 08 Apr 2024 13:00:34 +0000
ROA not after: Sun 07 Jul 2024 13:00:34 +0000
asID: 149440
IP address blocks: 23.27.124.0/24 maxlen: 24
23.27.120.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7a:48:90:73:9c:d9:b2:fa:9a:9c:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 8 13:00:34 2024 GMT
Not After : Jul 7 13:00:34 2024 GMT
Subject: CN=21e7244d-6581-4906-97e4-f6d90536cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:50:fe:d1:5b:d8:57:ca:f4:39:93:79:c0:6e:
92:9d:11:c0:fd:17:39:c1:50:b8:83:3d:3d:5d:2e:
51:b0:b0:a7:41:a2:2d:26:1f:2f:c6:a0:8f:30:e5:
42:1b:62:45:84:18:4f:8e:3b:17:3b:f8:23:46:1a:
3e:57:77:50:7c:f2:d9:e5:d4:f5:14:51:07:08:22:
0d:7c:21:66:e9:a0:3f:95:5e:23:41:31:36:ad:4c:
f2:ff:ee:f1:3f:4e:19:f0:a0:5b:8a:21:81:00:25:
67:5f:b4:82:28:a3:8f:2f:70:36:da:bb:c9:e7:f3:
b0:e6:0c:f3:c3:46:89:e1:a6:79:2b:75:41:e5:d1:
28:4e:4e:de:72:0f:96:48:27:7b:b2:e1:53:83:3b:
82:66:cd:b0:05:81:f9:e3:54:31:c1:ff:0f:bd:43:
34:b8:16:7d:8d:a3:68:e1:c9:5b:b1:d1:ae:82:6e:
64:e6:89:08:18:d9:8f:d4:8b:fa:c7:ec:f6:37:96:
63:c9:dd:8b:99:51:71:bd:51:a4:60:b5:b0:f3:e6:
41:73:5a:da:45:04:d1:8b:2e:55:66:89:2d:37:8f:
c0:6c:e6:43:9e:7f:85:41:e1:f7:fd:3a:af:74:2e:
2b:fb:69:d6:7d:62:83:0b:ae:b2:03:95:19:54:8c:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:E1:64:4A:45:FE:F6:27:70:37:CD:C1:D4:4C:1C:15:8A:16:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b6fae68e-7edd-3095-aebf-714d8db89771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.120.0/24
23.27.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:78:13:d2:d9:13:7d:31:02:7b:cf:f9:e5:40:0a:9a:8c:e8:
64:25:bb:69:60:5c:67:a9:b5:fe:6c:db:f4:20:66:f9:32:da:
b4:c1:63:87:fb:10:29:dc:68:73:43:50:7d:86:20:06:9e:6d:
7e:62:6b:04:74:3e:ef:d0:29:44:03:5c:2b:3c:2b:b3:20:3f:
b9:5c:cd:6f:bb:b3:34:7d:04:f6:30:51:c0:ca:6c:df:a8:6f:
e4:90:07:a7:0e:f3:22:51:03:24:2d:5e:9d:16:ad:1e:63:bd:
9a:77:ee:bf:ae:b0:ae:63:4c:09:14:3b:d4:20:96:05:f9:6b:
96:a1:e7:86:97:8c:14:8a:1f:5b:a9:4b:d4:94:da:04:56:49:
fc:14:7f:9e:a5:ac:f0:f1:8a:02:18:c7:c6:87:4f:07:05:ec:
a4:95:4e:13:ef:4b:40:df:7a:7e:09:30:62:34:1c:bf:00:dc:
06:9d:93:3a:7f:ad:ca:19:7e:30:d5:b4:5d:46:42:12:73:c8:
12:33:e3:80:cd:56:d0:e8:bb:9f:99:26:07:0b:b9:18:ff:67:
9a:5d:11:5a:a7:d1:55:4f:37:ee:e4:d2:28:5e:5b:59:05:a0:
81:2a:b6:3e:b5:d8:36:2c:0f:c4:4c:c4:b3:49:ed:dc:c6:c3:
9e:8c:04:f7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEV6SJBznNmy+pqc4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
MjFlNzI0NGQtNjU4MS00OTA2LTk3ZTQtZjZkOTA1MzZjZDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFD+0VvYV8r0OZN5wG6SnRHA/Rc5wVC4gz09
XS5RsLCnQaItJh8vxqCPMOVCG2JFhBhPjjsXO/gjRho+V3dQfPLZ5dT1FFEHCCIN
fCFm6aA/lV4jQTE2rUzy/+7xP04Z8KBbiiGBACVnX7SCKKOPL3A22rvJ5/Ow5gzz
w0aJ4aZ5K3VB5dEoTk7ecg+WSCd7suFTgzuCZs2wBYH541Qxwf8PvUM0uBZ9jaNo
4clbsdGugm5k5okIGNmP1Iv6x+z2N5Zjyd2LmVFxvVGkYLWw8+ZBc1raRQTRiy5V
ZoktN4/AbOZDnn+FQeH3/TqvdC4r+2nWfWKDC66yA5UZVIwG7wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOOp4WRKRf72J3A3zcHUTBwVihbkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjZmYWU2OGUtN2VkZC0z
MDk1LWFlYmYtNzE0ZDhkYjg5NzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAFxt4AwQA
Fxt8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABV4E9LZE30xAnvP+eVACpqM6GQlu2lgXGeptf5s2/QgZvky
2rTBY4f7ECncaHNDUH2GIAaebX5iawR0Pu/QKUQDXCs8K7MgP7lczW+7szR9BPYw
UcDKbN+ob+SQB6cO8yJRAyQtXp0WrR5jvZp37r+usK5jTAkUO9QglgX5a5ah54aX
jBSKH1upS9SU2gRWSfwUf56lrPDxigIYx8aHTwcF7KSVThPvS0Dfen4JMGI0HL8A
3Aadkzp/rcoZfjDVtF1GQhJzyBIz44DNVtDou5+ZJgcLuRj/Z5pdEVqn0VVPN+7k
0iheW1kFoIEqtj612DYsD8RMxLNJ7dzGw56MBPc=
-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org