Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4854e72-a5df-331a-b482-7b06fa677372.roa
File: c4854e72-a5df-331a-b482-7b06fa677372.roa (raw, json)
Hash identifier: mwutDb/GFz5qAUlS04AOZpwPcQ2v5LpyYHecAGMsFKM=
Subject key identifier: 8E:3D:4B:74:02:4A:14:A5:89:F2:48:46:8A:57:2C:A5:1A:B0:EC:A0
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285841163F857745AA3BA538BF35C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4854e72-a5df-331a-b482-7b06fa677372.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Wed 04 Jun 2025 04:00:00 +0000
asID: 1239
IP address blocks: 136.0.121.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:16:3f:85:77:45:aa:3b:a5:38:bf:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jun 4 04:00:00 2025 GMT
Subject: CN=62ca5c85-c631-4fd9-9640-cdb8dd374b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:ef:10:ee:bf:83:f2:2e:06:4a:b2:af:bd:
be:86:12:6c:fb:f2:52:61:b0:92:28:0c:0c:32:97:
44:e2:05:2d:6d:6b:4f:7d:aa:13:63:06:25:c4:d8:
63:ce:53:05:d7:8a:e7:b4:a2:56:f0:c9:5f:38:ab:
68:b3:b4:99:e1:77:9a:73:0b:98:2c:ed:42:54:bc:
fe:05:ff:c6:17:1d:d0:76:9c:47:a7:9f:96:e0:b4:
6a:3b:b0:7d:2b:fa:ec:b6:16:cc:3d:b3:6d:0e:3c:
bf:04:53:5e:06:45:36:49:71:80:93:fa:5f:d2:94:
38:97:ef:6a:c8:50:89:ca:a7:da:09:6b:ad:3f:e3:
23:aa:2f:a9:95:b7:6b:c4:f4:93:19:51:ee:6c:9e:
e6:7b:82:42:f2:f9:8d:f6:9d:f1:ac:97:8b:e2:f6:
02:c5:b7:4b:1c:3d:37:a9:b8:aa:57:f9:d7:58:2c:
d9:e3:81:f2:86:0e:6a:7c:5c:01:ab:e0:83:f9:a6:
df:4b:8e:53:c8:15:21:45:f9:89:40:b2:f4:5d:9f:
f8:aa:d2:56:60:4c:aa:71:78:f0:17:02:ab:f5:29:
8d:bf:d5:16:f8:8a:4a:0c:bd:7e:53:4d:64:12:0a:
f4:87:33:10:a5:75:5f:b0:25:79:7a:bf:e8:70:59:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:4B:74:02:4A:14:A5:89:F2:48:46:8A:57:2C:A5:1A:B0:EC:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4854e72-a5df-331a-b482-7b06fa677372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:15:85:c0:0c:03:69:db:9d:70:9d:aa:b7:ee:f9:b1:9b:06:
cd:3f:f2:5e:9e:05:79:b5:f0:5a:b1:13:cd:00:ae:a3:91:87:
c4:f1:dc:6a:c7:5b:e0:99:5c:94:b3:37:9a:aa:e8:37:d8:c6:
d6:2f:12:40:9c:18:79:06:74:bd:88:05:e3:f6:b5:43:b2:ff:
8f:a4:dd:e2:70:c2:9c:16:b5:7e:c9:22:1d:50:e0:8a:fd:83:
68:36:9e:b5:e1:1f:09:5e:f1:93:d3:00:62:27:62:f3:32:a2:
0b:a1:45:73:7e:0c:79:59:e5:a5:18:35:b4:ec:33:2b:08:66:
33:a8:e4:6a:13:8b:73:67:02:66:31:be:d8:e8:ad:5a:25:8e:
9d:5f:17:33:76:d7:be:a6:4b:05:43:92:11:15:a9:ff:af:26:
bf:e4:c2:7e:0f:72:fc:ba:c4:4d:c9:0b:6b:58:c4:fb:42:12:
9e:f2:e3:d8:ba:5d:31:f6:9f:d6:1c:07:22:2d:b2:53:fb:75:
93:49:59:c8:5c:89:fe:60:92:56:f7:c7:b0:aa:b5:8f:6d:07:
a5:d0:fa:1d:32:95:41:c4:a2:8a:3f:d5:2b:0f:c0:b6:a7:cb:
87:6d:e4:1b:65:55:42:f5:e9:36:9c:79:6c:74:c2:2c:76:e5:
01:96:99:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEWP4V3Rao7pTi/NcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDYwNDA0MDAwMFowLzEtMCsGA1UEAxMk
NjJjYTVjODUtYzYzMS00ZmQ5LTk2NDAtY2RiOGRkMzc0YjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyrvEO6/g/IuBkqyr72+hhJs+/JSYbCSKAwM
MpdE4gUtbWtPfaoTYwYlxNhjzlMF14rntKJW8MlfOKtos7SZ4XeacwuYLO1CVLz+
Bf/GFx3QdpxHp5+W4LRqO7B9K/rsthbMPbNtDjy/BFNeBkU2SXGAk/pf0pQ4l+9q
yFCJyqfaCWutP+Mjqi+plbdrxPSTGVHubJ7me4JC8vmN9p3xrJeL4vYCxbdLHD03
qbiqV/nXWCzZ44Hyhg5qfFwBq+CD+abfS45TyBUhRfmJQLL0XZ/4qtJWYEyqcXjw
FwKr9SmNv9UW+IpKDL1+U01kEgr0hzMQpXVfsCV5er/ocFllowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI49S3QCShSlifJIRopXLKUasOygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzQ4NTRlNzItYTVkZi0z
MzFhLWI0ODItN2IwNmZhNjc3MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8VhcAMA2nbnXCdqrfu+bGbBs0/8l6eBXm18FqxE80ArqORh8Tx3GrH
W+CZXJSzN5qq6DfYxtYvEkCcGHkGdL2IBeP2tUOy/4+k3eJwwpwWtX7JIh1Q4Ir9
g2g2nrXhHwle8ZPTAGInYvMyoguhRXN+DHlZ5aUYNbTsMysIZjOo5GoTi3NnAmYx
vtjorVoljp1fFzN2176mSwVDkhEVqf+vJr/kwn4Pcvy6xE3JC2tYxPtCEp7y49i6
XTH2n9YcByItslP7dZNJWchcif5gklb3x7CqtY9tB6XQ+h0ylUHEooo/1SsPwLan
y4dt5BtlVUL16TaceWx0wix25QGWmYo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:11 2024 by rpki-client on console-ams.rpki-client.org