Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6e1b2e2-74a0-3abb-92f5-a5ebc4996d91.roa
File: c6e1b2e2-74a0-3abb-92f5-a5ebc4996d91.roa (raw, json)
Hash identifier: 0tykpLDtH1Ciy5HUJl/647Q83sCDsuNVfH3cZiLhcaI=
Subject key identifier: A0:30:45:20:13:DC:04:91:8D:B9:27:09:54:80:94:5B:D8:D5:C8:4D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285845136EA44751A5B614F6D5A630
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6e1b2e2-74a0-3abb-92f5-a5ebc4996d91.roa
Signing time: Sat 02 Mar 2024 16:49:22 +0000
ROA not before: Sat 02 Mar 2024 16:49:22 +0000
ROA not after: Fri 31 May 2024 15:49:22 +0000
asID: 5650
IP address blocks: 23.27.184.0/24 maxlen: 24
23.230.11.0/24 maxlen: 24
45.38.44.0/24 maxlen: 24
45.38.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:13:6e:a4:47:51:a5:b6:14:f6:d5:a6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 2 16:49:22 2024 GMT
Not After : May 31 15:49:22 2024 GMT
Subject: CN=2abddada-ad52-4758-86a5-f24b37646670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:9d:c8:38:6e:dd:1f:4a:93:da:80:16:e2:
6a:a7:a8:5f:64:d6:11:6c:5d:de:8b:de:ea:58:58:
9b:50:95:05:61:f9:7f:c1:a8:94:b2:12:2b:11:55:
fc:43:9d:0e:01:bf:62:a3:f6:2b:b7:a1:2d:19:ee:
32:7e:42:a5:ee:26:5e:56:bc:f5:09:38:57:76:05:
b9:4e:64:85:3d:3f:d6:79:ff:93:30:1a:b9:4d:8b:
82:02:d0:7c:77:38:5f:6e:07:4b:df:b4:ad:c5:c2:
22:ba:26:2c:7b:ee:ef:db:d1:77:f3:b3:48:16:d2:
88:86:e0:8a:08:69:93:94:06:ac:32:2e:9a:c8:bb:
3c:ee:a0:52:38:11:c3:0f:f5:74:12:b5:7f:79:c9:
67:fb:9a:14:bf:69:fb:a5:7c:2f:c1:a8:c9:11:9f:
1c:2d:03:10:de:3c:56:18:9e:ae:27:6b:db:72:c1:
30:4b:f8:cf:24:a5:48:34:eb:4e:2d:8d:d3:1e:c1:
5a:ed:ed:e1:de:a7:16:31:83:36:b7:b6:4a:8f:ad:
53:a2:8c:f6:e2:80:1d:c9:94:77:4e:20:85:62:df:
cb:6c:bf:30:36:af:3a:57:ac:83:3e:28:86:61:e3:
ed:2d:1c:f7:52:fc:5f:c9:21:a4:7f:1b:af:84:36:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:30:45:20:13:DC:04:91:8D:B9:27:09:54:80:94:5B:D8:D5:C8:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6e1b2e2-74a0-3abb-92f5-a5ebc4996d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.184.0/24
23.230.11.0/24
45.38.44.0/24
45.38.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:fd:dd:5b:65:37:dd:fb:0c:22:89:58:ea:d7:9d:81:d0:3f:
f8:d4:56:dd:41:76:5e:6d:ca:9d:06:f0:99:ce:68:dd:14:b6:
7e:e5:23:98:0b:70:85:4e:17:13:07:6d:07:c4:9b:7f:db:dd:
a3:26:a0:17:5e:aa:5a:b4:28:00:7e:31:fe:55:cc:fb:34:08:
f3:ad:23:51:48:31:a1:89:6b:b2:36:96:cf:fc:c4:d5:90:b8:
ab:05:73:0b:d8:04:46:7b:46:f3:9d:5f:27:2a:12:75:c6:fe:
4c:32:2d:b5:bc:3e:63:e4:3e:f7:7f:19:69:1d:19:80:52:bd:
0a:d4:76:9a:37:e1:74:e5:d9:02:6c:1d:ca:74:b4:b7:a3:1d:
a6:ab:a9:cb:6d:0d:9e:d2:cb:94:35:f6:58:ea:af:21:26:a7:
3b:a7:49:48:a7:3e:18:b0:b8:21:54:af:e6:7c:40:e9:da:cc:
c2:1f:63:59:7a:0c:8f:de:94:c3:fc:ba:c8:0c:a9:6e:b6:23:
54:ac:0c:10:65:f6:06:3e:e0:a9:a0:56:80:c8:fc:4c:21:84:
55:00:7b:e0:ba:4b:ba:18:b5:61:23:d6:5c:ef:ec:fa:10:bf:
dd:43:4c:d8:8b:b5:a1:24:4d:e9:c7:96:33:3d:12:c2:12:5d:
00:89:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:31 2024 by rpki-client on console-fra.rpki-client.org