Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be095ffe-9c73-33a2-bfab-97456fd55d25.roa
File: be095ffe-9c73-33a2-bfab-97456fd55d25.roa (raw, json)
Hash identifier: s+Fp4e9s1s6KZa3ZaGn9w8b2s3ulbKDGolKnMBKV5Ps=
Subject key identifier: 74:83:0E:B6:3C:AD:0B:BE:B1:56:B3:5A:4E:CB:18:58:69:63:56:CE
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844D9DFC99CABD6AC1840BCA8A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be095ffe-9c73-33a2-bfab-97456fd55d25.roa
Signing time: Sun 11 Feb 2024 02:00:25 +0000
ROA not before: Sun 11 Feb 2024 02:00:25 +0000
ROA not after: Sat 11 May 2024 01:00:25 +0000
asID: 11351
IP address blocks: 45.39.188.0/24 maxlen: 24
45.39.185.0/24 maxlen: 24
45.39.178.0/24 maxlen: 24
45.39.87.0/24 maxlen: 24
45.39.52.0/24 maxlen: 24
45.38.250.0/24 maxlen: 24
45.39.171.0/24 maxlen: 24
45.39.239.0/24 maxlen: 24
142.252.154.0/24 maxlen: 24
142.252.3.0/24 maxlen: 24
142.111.143.0/24 maxlen: 24
136.0.209.0/24 maxlen: 24
136.0.68.0/24 maxlen: 24
107.187.126.0/24 maxlen: 24
107.186.232.0/24 maxlen: 24
107.186.65.0/24 maxlen: 24
107.186.54.0/24 maxlen: 24
107.186.6.0/24 maxlen: 24
107.165.230.0/24 maxlen: 24
107.165.213.0/24 maxlen: 24
104.252.240.0/24 maxlen: 24
104.252.158.0/24 maxlen: 24
104.252.51.0/24 maxlen: 24
104.165.16.0/24 maxlen: 24
205.164.42.0/24 maxlen: 24
172.120.23.0/24 maxlen: 24
166.88.78.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d9:df:c9:9c:ab:d6:ac:18:40:bc:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 11 02:00:25 2024 GMT
Not After : May 11 01:00:25 2024 GMT
Subject: CN=4a7ec123-5101-4c3b-a919-b5f45c5e1c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:67:80:b3:05:8d:48:e8:7b:e2:48:82:fe:
88:d5:28:e4:8f:6c:a5:88:09:3a:6f:54:c0:04:83:
eb:c8:5f:6c:7c:11:7f:03:1f:04:50:4e:7a:b0:83:
06:13:0f:72:48:2d:54:6a:67:38:fd:11:90:f9:fa:
77:ec:1a:27:45:b7:2a:8e:7d:8b:43:bf:1b:8f:5f:
6d:a6:e0:8d:11:89:8a:db:87:22:34:a5:1b:1c:13:
5a:12:4a:0e:e7:f1:95:94:86:0e:fc:07:69:b9:f2:
eb:43:86:f6:89:9c:76:e3:32:a5:92:e9:b9:ee:0b:
90:9c:ac:2a:73:69:7e:98:ab:e1:fc:a6:c9:4f:fe:
23:02:79:c8:8b:32:bc:ec:e3:c2:1b:68:ed:a5:dd:
e4:79:3f:36:96:d5:c3:29:f7:19:ad:8e:e6:69:c5:
4b:08:1c:d8:0a:c5:0d:6e:8f:7e:97:2d:e1:20:6e:
3b:a5:82:ab:f8:00:90:bf:5e:cc:b0:a2:f5:df:93:
df:27:84:1e:d1:ca:87:e1:07:82:81:3d:b4:97:ae:
26:5b:bd:ee:01:32:b1:a1:f6:19:1d:ba:2b:35:36:
83:a1:b2:86:b4:c6:9d:cd:db:7f:08:77:92:35:a3:
d5:0e:f9:0b:e7:47:f7:17:8d:9b:f3:ac:82:19:41:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:0E:B6:3C:AD:0B:BE:B1:56:B3:5A:4E:CB:18:58:69:63:56:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be095ffe-9c73-33a2-bfab-97456fd55d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.250.0/24
45.39.52.0/24
45.39.87.0/24
45.39.171.0/24
45.39.178.0/24
45.39.185.0/24
45.39.188.0/24
45.39.239.0/24
104.165.16.0/24
104.252.51.0/24
104.252.158.0/24
104.252.240.0/24
107.165.213.0/24
107.165.230.0/24
107.186.6.0/24
107.186.54.0/24
107.186.65.0/24
107.186.232.0/24
107.187.126.0/24
136.0.68.0/24
136.0.209.0/24
142.111.143.0/24
142.252.3.0/24
142.252.154.0/24
166.88.78.0/24
172.120.23.0/24
205.164.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a4:39:c6:22:5b:38:f7:0d:1f:c3:43:55:00:ee:b1:ac:48:
dc:7e:98:b6:cb:53:67:38:a8:a1:04:45:a5:81:ea:ed:62:63:
1b:8c:dd:a7:e7:0e:7a:9f:21:93:7f:eb:7e:3e:64:88:c6:12:
ef:b5:85:2b:0e:48:e8:45:06:fb:93:7b:fd:d0:7a:cb:11:91:
3c:13:34:27:1a:ed:9b:35:c0:47:d5:ef:9d:4c:e5:15:4d:65:
10:76:a2:30:9d:c6:d0:00:43:fb:43:58:8a:4a:8c:c1:a7:34:
cd:d8:09:68:80:2c:bb:cf:dd:34:7c:1f:cd:04:77:85:99:d3:
bb:1c:96:0d:f3:52:72:4a:d3:05:89:f7:a8:38:c7:c8:86:25:
8c:6d:08:03:3e:fa:d3:6e:9c:00:49:e1:d0:e8:1a:2a:c0:ae:
cd:92:ab:92:a5:63:9c:a4:e2:3b:41:12:41:7b:80:19:57:05:
7e:75:cc:8b:f2:37:1b:4a:1c:8c:52:b0:22:84:dc:b5:58:ec:
10:c2:b3:99:ec:15:1e:2e:a5:67:ec:7a:04:88:0e:84:a1:04:
e2:f2:44:91:c5:31:97:9c:73:63:69:16:5d:bd:11:33:72:40:
ad:99:de:75:c7:88:21:6c:5e:22:85:e0:89:9d:eb:fc:bb:e9:
04:ce:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org