Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/becc9212-4f84-3ef8-8117-546fc9dac6b9.roa
File: becc9212-4f84-3ef8-8117-546fc9dac6b9.roa (raw, json)
Hash identifier: by2u7jgSfgsF6TXCgdMF2fxpW/f3bw32P6eKkKmN/Ls=
Subject key identifier: F9:6B:50:07:54:03:6D:93:95:BA:2F:AF:D4:81:F1:11:E6:26:CD:AE
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858422FEA8B03D78C8D62CFE5F418
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/becc9212-4f84-3ef8-8117-546fc9dac6b9.roa
Signing time: Sun 11 Jun 2023 19:20:50 +0000
ROA not before: Sun 11 Jun 2023 19:20:50 +0000
ROA not after: Sat 09 Sep 2023 19:20:50 +0000
asID: 15731
IP address blocks: 142.111.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2f:ea:8b:03:d7:8c:8d:62:cf:e5:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jun 11 19:20:50 2023 GMT
Not After : Sep 9 19:20:50 2023 GMT
Subject: CN=464252ea-e6cd-4130-91b6-fd5a41db5ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:bd:dd:a0:f5:c5:80:c0:8e:13:06:a8:9d:
00:ad:9b:1c:4d:4a:b0:0d:46:50:18:79:b8:1e:18:
c1:4e:a3:cf:63:d1:eb:0a:b7:5a:0f:be:c5:2e:35:
fd:31:a7:63:16:ac:79:25:fc:a2:8a:2f:d1:49:bf:
3d:df:ed:70:2a:cf:35:d3:39:20:a4:53:94:ba:e0:
22:65:eb:7b:de:a0:99:ca:d8:5d:37:91:12:ce:bb:
8b:b8:54:1e:88:b8:ca:33:01:cc:27:c2:70:54:cc:
53:5c:5c:03:69:e2:07:45:16:fc:89:de:3f:f4:12:
67:9b:70:63:d8:ac:5e:b8:fb:28:8a:79:bc:b8:e1:
22:bf:79:87:d1:11:e4:3a:53:77:f0:2c:8c:07:f6:
5d:ef:8b:7e:6b:27:69:c5:ea:2a:d0:c9:74:1c:b0:
37:8a:68:bd:6a:83:b0:93:09:05:4e:31:f2:7b:55:
0f:ba:6d:2d:1b:b9:fc:c8:55:66:cb:61:3d:b6:8b:
4b:12:39:1a:bf:5b:55:bd:f5:7a:61:d9:5b:eb:9a:
56:15:29:75:ab:5f:75:ee:c9:a6:6a:4e:7d:d7:1a:
ae:c5:b4:15:a9:0c:9e:35:40:75:d1:94:cd:2b:33:
5d:44:a1:92:4d:b8:02:9b:72:05:f4:f1:e3:b3:58:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:50:07:54:03:6D:93:95:BA:2F:AF:D4:81:F1:11:E6:26:CD:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/becc9212-4f84-3ef8-8117-546fc9dac6b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e0:fa:42:01:26:5e:ec:10:47:f4:67:44:8c:a2:65:4c:1e:
2c:c9:b6:24:94:da:dd:9d:d1:ce:5c:cd:fd:73:42:7e:4d:6a:
4b:94:f7:64:81:bd:fe:90:12:91:5a:b8:d3:45:c6:a6:35:58:
61:bc:8e:45:8a:30:1c:7d:35:81:aa:a3:3b:c0:52:d5:80:4c:
b6:ce:5f:9b:f8:1b:35:ac:23:da:91:0a:41:b1:a8:b7:ec:e6:
02:1c:4c:89:73:9f:b0:ed:cc:3b:c4:d5:cc:75:d9:63:de:ba:
ba:13:d8:c7:dc:93:ca:07:71:88:d0:85:26:b1:c0:e9:c3:6c:
5c:dc:87:59:78:0c:cd:89:af:d1:b3:cb:aa:6c:66:0b:01:b8:
e2:39:bd:af:fc:34:f7:46:5f:fa:b4:5c:93:48:63:35:d7:13:
d1:e0:2f:22:3f:c0:24:6f:af:2b:49:f6:46:36:3e:95:c2:d8:
61:62:15:1c:dd:9e:88:49:b8:73:e8:7f:d2:27:4f:66:b5:9d:
8a:de:31:77:02:4a:63:ff:cf:45:08:ab:2e:b7:26:61:c1:ee:
62:d8:ab:c3:6b:ea:b4:0d:a5:36:ba:9d:d5:fb:ca:82:9d:07:
71:a9:39:ad:86:fa:bd:be:78:bd:97:e7:05:2b:d1:d2:8d:a3:
3d:7d:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:11 2024 by rpki-client on console-ams.rpki-client.org