Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b9f44f50-78c8-3c3d-ac26-dc4fba76f60a.roa
File: b9f44f50-78c8-3c3d-ac26-dc4fba76f60a.roa (raw, json)
Hash identifier: mFB31ReGD7mnfDoWdxtfzpLav+INW0ZiyIEXxX9wb44=
Subject key identifier: C3:62:85:CD:52:30:AE:7C:1D:8E:08:75:4B:9C:19:5D:B2:49:A5:BA
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285840633670B8E0F4CB9E9561C380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b9f44f50-78c8-3c3d-ac26-dc4fba76f60a.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Tue 01 Apr 2025 04:00:00 +0000
asID: 399114
IP address blocks: 142.111.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:63:36:70:b8:e0:f4:cb:9e:95:61:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Apr 1 04:00:00 2025 GMT
Subject: CN=65e9de85-a364-468d-87a0-8199c166da0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:48:23:7b:69:e8:d9:e3:3f:92:5a:01:08:
75:27:86:57:26:9d:c6:74:71:8f:fd:46:18:b0:e8:
26:96:89:3e:f8:8a:d0:44:93:aa:cc:77:5e:c3:79:
a9:6d:29:db:c6:5f:77:07:bf:df:6e:9a:3e:19:f5:
11:3f:0c:15:06:86:58:89:97:15:af:06:74:60:b9:
f3:32:99:ea:14:5a:e8:e3:f1:67:4c:e6:ef:35:db:
7b:ce:25:24:7f:eb:bf:4c:b2:7f:21:89:39:23:b0:
d7:b5:c0:fb:af:14:29:bd:d7:27:63:31:60:70:03:
a7:fb:3a:42:12:ca:e8:21:9e:d7:bd:7c:a0:b5:d2:
8f:f9:6b:f7:dd:ee:a1:ce:9b:9a:90:94:e6:5b:e6:
4e:2d:89:d4:1c:97:82:30:88:02:76:15:24:29:de:
dc:7d:af:67:9b:df:ea:8c:68:3a:47:2b:3f:77:80:
2f:ae:ca:91:b8:8e:48:54:60:c4:91:f9:89:e8:f1:
61:4d:70:1b:d8:46:5e:b8:5e:cb:84:09:92:c2:a4:
a2:b6:eb:8f:f4:ab:f0:1a:4d:5f:45:dd:88:92:48:
5c:27:b6:f1:85:f0:92:45:a8:ac:76:b3:8d:0e:ec:
a2:43:0f:58:a5:04:37:c6:49:c8:8e:dc:5e:7a:5b:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:85:CD:52:30:AE:7C:1D:8E:08:75:4B:9C:19:5D:B2:49:A5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b9f44f50-78c8-3c3d-ac26-dc4fba76f60a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d4:a5:4a:68:0a:d8:4f:28:32:2d:94:6a:a1:e6:88:39:7b:
dc:87:47:94:e7:ed:2f:97:f0:bb:3c:0f:b9:77:5c:6d:f6:02:
d1:76:b9:69:5f:f2:7a:62:5e:bf:bc:60:e2:9a:6b:49:dd:79:
0b:24:91:6b:3e:37:45:58:de:80:b8:10:91:63:fd:ea:f1:45:
b0:a1:02:3f:c7:9e:27:1a:70:b5:c5:20:0f:12:45:43:e1:38:
e7:60:2d:db:97:8b:5e:1b:86:1d:8b:0e:fe:0f:4e:0f:30:b5:
d1:6a:f8:c3:b5:41:21:27:3e:9d:3b:c3:86:a0:97:ad:1e:d7:
cd:f6:8b:f2:0f:df:ad:ec:60:9b:6e:f3:61:aa:f4:d9:01:81:
83:a6:2f:56:58:5d:fb:75:8d:26:00:e3:c7:63:e8:8b:5a:c1:
d4:fe:0c:d1:79:23:a9:7b:59:49:fb:9b:46:8f:6f:dd:59:7f:
66:fb:ba:c5:d4:8e:23:ad:87:94:01:11:9a:c0:fa:50:95:e3:
e8:63:d9:48:58:3a:f8:b1:f5:cd:7b:29:c2:bf:62:7f:8e:8f:
de:71:b0:eb:68:72:fa:2e:fb:25:f2:f2:fe:55:a7:57:2a:bc:
1d:3a:e9:2e:ba:ba:98:79:da:01:59:02:fe:ae:6b:05:c9:dd:
1c:f0:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:11 2024 by rpki-client on console-ams.rpki-client.org