Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be9fde38-3bf6-3d0d-ad96-65c9343b32ed.roa
File: be9fde38-3bf6-3d0d-ad96-65c9343b32ed.roa (raw, json)
Hash identifier: 01XbTbARrmLWXv0f0k3KWxqEZj4p0+YBpBPd0k53cOE=
Subject key identifier: CA:4A:70:16:D7:95:6A:CA:AA:25:38:2E:F0:33:E2:A7:A2:CB:90:AA
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584570830B458119182190B55540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be9fde38-3bf6-3d0d-ad96-65c9343b32ed.roa
Signing time: Fri 05 Apr 2024 01:00:28 +0000
ROA not before: Fri 05 Apr 2024 01:00:28 +0000
ROA not after: Thu 04 Jul 2024 01:00:28 +0000
asID: 149440
IP address blocks: 166.88.61.0/24 maxlen: 24
166.88.57.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:70:83:0b:45:81:19:18:21:90:b5:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 5 01:00:28 2024 GMT
Not After : Jul 4 01:00:28 2024 GMT
Subject: CN=3e534bb0-5458-4309-9026-f26ad0322f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:aa:c1:80:70:74:a7:a6:0e:df:3e:00:04:
5d:72:1f:f1:16:36:3a:1a:e6:bd:b4:1d:d6:d2:ff:
a6:e9:8c:48:61:71:3c:e8:85:93:ad:38:6d:55:15:
56:8c:34:4b:6f:c0:17:20:09:22:dc:cc:25:a7:d0:
48:d2:08:50:33:8a:6d:28:ed:b8:d6:57:20:8e:ba:
94:95:4f:cf:8e:2d:8c:1f:fd:2d:49:b7:b9:d3:e9:
f0:75:a9:49:f2:58:8e:da:cd:40:c0:d8:6f:69:44:
3d:4a:bc:4c:16:e2:b1:26:c7:e5:68:16:8b:45:d5:
19:a6:67:76:70:52:dc:f8:6b:c3:2f:16:e6:33:65:
af:4b:9b:e3:60:4a:e3:f6:08:4e:92:cb:de:72:f7:
1a:a0:f0:ae:9c:4e:a0:7b:90:9a:c6:f6:90:41:84:
83:1f:f0:20:15:13:ff:a9:b4:17:70:35:25:48:65:
3a:cb:a4:44:5f:40:7a:51:8c:bb:de:4c:ca:85:88:
42:df:fb:3b:19:17:04:28:0b:fc:a5:7a:d6:df:13:
1a:f0:c8:16:82:b6:ad:4b:32:68:6c:92:8c:70:b3:
d3:f5:97:d3:e0:41:d2:de:a8:2e:4c:58:f6:da:6f:
09:da:f1:13:81:7b:54:9a:c1:d5:90:56:46:e2:46:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:70:16:D7:95:6A:CA:AA:25:38:2E:F0:33:E2:A7:A2:CB:90:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be9fde38-3bf6-3d0d-ad96-65c9343b32ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.57.0/24
166.88.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:2b:45:fc:7c:fc:f7:23:1d:79:4d:65:39:2c:0a:c2:94:6d:
dc:5a:32:85:72:fd:55:7a:fb:9e:8c:cc:fb:c6:9d:33:a6:b7:
fe:4c:17:68:2c:73:f3:2b:77:c0:33:16:9b:49:6d:67:fe:b6:
d5:ef:a7:cc:f2:86:da:6e:e3:73:e9:47:1d:26:c8:1d:eb:42:
ba:4a:b7:e2:d9:ef:85:0c:de:9b:0e:6a:79:2d:55:0d:27:9a:
4d:c2:5e:61:14:82:24:7b:61:37:de:fa:2e:74:dd:39:ef:c2:
36:73:29:48:7e:30:3b:a8:71:ed:21:32:ec:5c:a7:fe:50:75:
12:b7:30:45:b5:d0:ea:7e:9c:a3:db:7d:05:b0:e9:ea:54:dc:
f7:de:f3:df:30:ed:5b:59:b5:9b:73:20:05:78:fe:89:b9:99:
67:88:61:09:1f:f4:aa:ae:29:c8:54:e5:c0:ca:b4:18:16:12:
5b:86:8c:c6:25:72:0f:9d:ed:d2:e7:83:5d:e7:9e:ea:25:86:
93:ad:df:80:5c:dc:0f:9a:8a:33:cf:82:c1:26:ee:3e:fe:b7:
2c:1b:8e:98:ed:ac:37:99:17:6f:7f:71:08:70:da:ee:a9:9c:
fd:03:52:15:a6:4e:da:5a:00:6f:d6:45:36:f3:fd:01:a9:7a:
79:eb:d6:86
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVwgwtFgRkYIZC1VUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
M2U1MzRiYjAtNTQ1OC00MzA5LTkwMjYtZjI2YWQwMzIyZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfSqwYBwdKemDt8+AARdch/xFjY6Gua9tB3W
0v+m6YxIYXE86IWTrThtVRVWjDRLb8AXIAki3Mwlp9BI0ghQM4ptKO241lcgjrqU
lU/Pji2MH/0tSbe50+nwdalJ8liO2s1AwNhvaUQ9SrxMFuKxJsflaBaLRdUZpmd2
cFLc+GvDLxbmM2WvS5vjYErj9ghOksvecvcaoPCunE6ge5CaxvaQQYSDH/AgFRP/
qbQXcDUlSGU6y6REX0B6UYy73kzKhYhC3/s7GRcEKAv8pXrW3xMa8MgWgratSzJo
bJKMcLPT9ZfT4EHS3qguTFj22m8J2vETgXtUmsHVkFZG4kZuvwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMpKcBbXlWrKqiU4LvAz4qeiy5CqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmU5ZmRlMzgtM2JmNi0z
ZDBkLWFkOTYtNjVjOTM0M2IzMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAplg5AwQA
plg9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAI8rRfx8/PcjHXlNZTksCsKUbdxaMoVy/VV6+56MzPvGnTOm
t/5MF2gsc/Mrd8AzFptJbWf+ttXvp8zyhtpu43PpRx0myB3rQrpKt+LZ74UM3psO
anktVQ0nmk3CXmEUgiR7YTfe+i503TnvwjZzKUh+MDuoce0hMuxcp/5QdRK3MEW1
0Op+nKPbfQWw6epU3Pfe898w7VtZtZtzIAV4/om5mWeIYQkf9KquKchU5cDKtBgW
EluGjMYlcg+d7dLng13nnuolhpOt34Bc3A+aijPPgsEm7j7+tywbjpjtrDeZF29/
cQhw2u6pnP0DUhWmTtpaAG/WRTbz/QGpennr1oY=
-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org