Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa
File: c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa (raw, json)
Hash identifier: Ljk3EOoIHgL0bca8cOgW6AiZkd/wGda1Lz1fbp0bN1Q=
Subject key identifier: 11:34:DD:F2:3C:17:E7:76:9A:57:D9:5C:0C:D5:23:5D:FE:64:56:4C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583DF40D7E61CF816ECD76E9C500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 21 Aug 2024 04:00:00 +0000
asID: 7922
IP address blocks: 166.88.173.0/24 maxlen: 24
166.88.186.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f4:0d:7e:61:cf:81:6e:cd:76:e9:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Aug 21 04:00:00 2024 GMT
Subject: CN=2f527cf0-cac9-4610-9677-4e9fb746226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:6e:9a:0a:d5:7b:f3:af:9f:a0:91:cf:86:
1d:40:52:e3:85:cc:49:d4:e4:bb:3b:1e:fd:ee:69:
aa:47:21:48:67:2e:79:4a:aa:a2:03:82:b5:6b:17:
f9:26:84:72:9a:f4:47:45:16:1a:f3:1c:c8:3f:b2:
e9:99:d7:c8:5d:47:09:fe:84:21:cb:09:a1:09:7d:
61:fd:83:fc:6a:a0:5c:39:22:fb:58:a9:4d:7d:13:
60:7e:9f:18:74:b1:0c:23:59:30:30:b5:e2:cc:0a:
f0:c1:88:a6:f1:8a:40:31:4a:e5:7e:4a:ff:6d:3c:
56:b6:97:15:db:fa:00:f7:49:f4:64:d9:5d:29:3b:
3d:a1:d6:ba:33:41:15:22:9e:7d:64:7a:1d:f1:1f:
b1:46:1f:25:c0:51:4d:60:2a:98:bc:5f:19:1d:5f:
4f:b5:0b:f7:9f:55:a2:1b:69:ea:c2:72:a8:95:0e:
0f:36:fb:45:6e:80:1d:8f:cc:ce:c1:3a:a8:ed:5d:
be:79:af:59:1b:ac:cd:b8:04:51:1f:1d:5a:35:7b:
3c:ee:ec:12:21:8d:aa:c8:0d:7f:32:7a:67:43:d3:
08:73:67:c0:72:d3:1d:c2:69:9b:bc:a7:de:cc:46:
cf:83:48:5b:73:b4:37:5d:01:86:f4:a8:b8:e0:ba:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:34:DD:F2:3C:17:E7:76:9A:57:D9:5C:0C:D5:23:5D:FE:64:56:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c295fa28-50ad-35d2-b79f-9e6a57ff2714.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.173.0/24
166.88.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:67:95:0f:65:fa:da:ee:1b:13:9b:f7:78:cd:65:e7:91:c6:
74:14:eb:9c:c0:da:db:5a:5f:8b:f3:e6:c3:0f:27:06:07:8f:
76:14:c2:a8:af:56:f7:e5:47:d5:7f:7e:84:19:36:6e:f4:1a:
4d:dd:17:47:89:29:9a:a3:c3:b1:26:a3:59:e0:19:29:c5:15:
df:85:22:12:81:11:df:d8:f7:35:23:ae:d6:01:78:14:98:d7:
a9:45:f8:d3:7f:d1:dc:e3:b9:c4:c5:11:42:6d:7b:a3:07:56:
a5:74:6d:73:56:e8:75:0c:fd:2e:c3:5f:b7:76:60:62:06:c6:
09:f0:61:5a:c0:65:0b:bf:53:b3:c6:54:9b:6b:41:d8:49:93:
e2:dd:8b:f2:b4:a9:37:6e:97:30:c0:c6:80:e7:f7:25:21:3c:
32:35:84:23:9c:94:ad:79:6f:81:c1:b5:7e:cb:db:4b:79:2c:
fd:79:23:94:7a:bf:36:db:9e:8e:52:f6:a9:71:46:66:a4:33:
01:83:c1:ac:1d:38:64:78:8d:8b:b9:ff:01:4d:2f:96:c5:1f:
d6:97:d2:c9:66:36:59:59:96:5a:23:fe:47:fa:7a:60:e6:20:
d9:cd:f1:e8:22:12:e8:63:af:b8:19:d3:1c:21:c8:08:9a:94:
0f:78:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:31 2024 by rpki-client on console-fra.rpki-client.org