Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c87c8024-cdbf-34c5-a25e-ff7ac819b617.roa
File: c87c8024-cdbf-34c5-a25e-ff7ac819b617.roa (raw, json)
Hash identifier: eMBYI8LLmeuyPRaDhFNupRf7OoQg9n50LiuOJ3LLmcg=
Subject key identifier: 94:76:01:20:CA:FB:46:99:28:B7:71:F1:F8:6B:B1:0F:8F:9C:66:12
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583B0DCAF0683ADFC8A07CED9600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c87c8024-cdbf-34c5-a25e-ff7ac819b617.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Wed 29 Nov 2023 05:00:00 +0000
asID: 12083
IP address blocks: 104.165.174.0/24 maxlen: 24
45.39.58.0/24 maxlen: 24
45.39.225.0/24 maxlen: 24
23.230.218.0/24 maxlen: 24
23.27.134.0/24 maxlen: 24
23.27.197.0/24 maxlen: 24
23.27.205.0/24 maxlen: 24
45.38.191.0/24 maxlen: 24
45.39.215.0/24 maxlen: 24
104.165.155.0/24 maxlen: 24
104.165.193.0/24 maxlen: 24
104.165.255.0/24 maxlen: 24
104.252.133.0/24 maxlen: 24
104.252.168.0/24 maxlen: 24
107.164.87.0/24 maxlen: 24
107.164.121.0/24 maxlen: 24
107.164.132.0/24 maxlen: 24
107.164.188.0/24 maxlen: 24
107.164.210.0/24 maxlen: 24
107.164.211.0/24 maxlen: 24
107.165.155.0/24 maxlen: 24
107.165.164.0/24 maxlen: 24
107.165.186.0/24 maxlen: 24
107.165.199.0/24 maxlen: 24
107.165.179.0/24 maxlen: 24
107.165.228.0/24 maxlen: 24
107.165.222.0/24 maxlen: 24
107.165.205.0/24 maxlen: 24
107.165.234.0/24 maxlen: 24
107.165.235.0/24 maxlen: 24
107.165.240.0/24 maxlen: 24
104.165.178.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:0d:ca:f0:68:3a:df:c8:a0:7c:ed:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Nov 29 05:00:00 2023 GMT
Subject: CN=7ba43c2e-0215-4204-8893-a822cf0a1b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:f5:71:7a:4f:dc:97:0e:32:fc:93:91:f0:
02:28:18:2b:03:66:11:d1:53:22:8e:ec:f5:c2:d3:
54:c3:cc:ed:fa:27:ff:fd:44:3e:db:70:2c:66:61:
cb:61:00:ea:ab:8c:13:65:02:ce:70:f5:d5:96:3b:
71:41:c7:c9:e4:dd:f0:80:39:73:eb:83:33:59:1f:
5d:77:56:1b:0f:1e:90:c6:86:ef:74:e7:d0:14:a1:
df:c0:52:b0:78:a6:af:ba:5d:aa:e3:16:0c:d3:d7:
b1:72:88:f7:76:3d:6a:fa:ed:a0:18:79:10:9a:af:
e4:d6:91:f1:ee:50:f0:0f:c6:24:96:7c:ec:88:6c:
e2:8d:e7:1e:19:08:0d:51:88:ec:a6:d3:9a:0c:14:
9a:8b:11:aa:84:63:0d:e3:e5:6d:c9:35:d2:b2:ae:
a8:2c:50:a7:f5:c8:1c:43:cb:5a:52:17:dd:3c:bb:
1a:c9:e7:48:14:02:54:87:61:97:c7:0d:aa:3d:e6:
f9:36:ae:cb:cc:20:71:2f:aa:5c:fc:f6:ee:9c:dd:
c6:f4:a6:3b:85:91:f1:e6:b4:48:7f:7f:9d:f5:e0:
41:4c:8a:f2:a1:ff:d0:63:05:58:7e:93:37:b1:2c:
e7:db:44:e7:64:5f:77:54:9f:f3:36:19:08:c4:b5:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:76:01:20:CA:FB:46:99:28:B7:71:F1:F8:6B:B1:0F:8F:9C:66:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c87c8024-cdbf-34c5-a25e-ff7ac819b617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.134.0/24
23.27.197.0/24
23.27.205.0/24
23.230.218.0/24
45.38.191.0/24
45.39.58.0/24
45.39.215.0/24
45.39.225.0/24
104.165.155.0/24
104.165.174.0/24
104.165.178.0/24
104.165.193.0/24
104.165.255.0/24
104.252.133.0/24
104.252.168.0/24
107.164.87.0/24
107.164.121.0/24
107.164.132.0/24
107.164.188.0/24
107.164.210.0/23
107.165.155.0/24
107.165.164.0/24
107.165.179.0/24
107.165.186.0/24
107.165.199.0/24
107.165.205.0/24
107.165.222.0/24
107.165.228.0/24
107.165.234.0/23
107.165.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:70:37:ab:e4:9e:08:5b:ec:ff:64:fa:2a:d3:4b:18:06:05:
6f:5d:43:6b:59:b8:41:07:b3:12:27:97:d4:77:6b:b3:e3:4f:
c7:cc:2f:1a:06:78:96:dc:88:c3:25:5f:75:3e:db:cb:02:64:
69:3f:48:f8:39:da:24:d5:cb:95:ba:70:19:1d:f0:4a:37:96:
21:91:5b:04:00:67:3a:d5:48:43:27:f0:3b:cd:ff:d2:72:5c:
77:c2:53:43:a9:4b:60:fb:4d:69:42:d3:0c:c2:71:62:46:8f:
ff:11:33:b8:05:04:1c:b4:cd:48:7c:f9:d5:0d:d9:3d:11:23:
cb:b3:f9:65:49:e5:18:5a:0a:1a:44:eb:29:9d:f7:46:e2:27:
c7:86:0f:e1:12:4b:86:50:bd:62:db:9b:3c:d1:a1:4e:38:11:
c3:22:70:11:98:79:c0:fb:b4:d1:e8:db:9e:85:d9:0b:0b:3a:
5a:80:81:a3:24:0d:f3:cf:d3:f6:b1:34:89:11:2a:3f:65:cc:
33:5c:d2:cc:88:c4:3e:3a:f3:bc:01:9d:52:ef:e6:1e:4e:1c:
8d:29:35:89:35:92:85:a8:30:0d:4d:64:b1:7b:5e:95:41:b8:
cc:27:63:33:d2:13:25:8a:c6:2f:c9:0c:f2:23:6b:d7:7c:72:
62:ac:9a:91
-----BEGIN CERTIFICATE-----
MIIG9jCCBd6gAwIBAgIUAQ0Mn0MoWDsNyvBoOt/IoHztlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTIzMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
N2JhNDNjMmUtMDIxNS00MjA0LTg4OTMtYTgyMmNmMGExYjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74v1cXpP3JcOMvyTkfACKBgrA2YR0VMijuz1
wtNUw8zt+if//UQ+23AsZmHLYQDqq4wTZQLOcPXVljtxQcfJ5N3wgDlz64MzWR9d
d1YbDx6QxobvdOfQFKHfwFKweKavul2q4xYM09excoj3dj1q+u2gGHkQmq/k1pHx
7lDwD8YklnzsiGzijeceGQgNUYjsptOaDBSaixGqhGMN4+VtyTXSsq6oLFCn9cgc
Q8taUhfdPLsayedIFAJUh2GXxw2qPeb5Nq7LzCBxL6pc/PbunN3G9KY7hZHx5rRI
f3+d9eBBTIryof/QYwVYfpM3sSzn20TnZF93VJ/zNhkIxLVWbQIDAQABo4IECDCC
BAQwHQYDVR0OBBYEFJR2ASDK+0aZKLdx8fhrsQ+PnGYSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzg3YzgwMjQtY2RiZi0z
NGM1LWEyNWUtZmY3YWM4MTliNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAAX
G4YDBAAXG8UDBAAXG80DBAAX5toDBAAtJr8DBAAtJzoDBAAtJ9cDBAAtJ+EDBABo
pZsDBABopa4DBABopbIDBABopcEDBABopf8DBABo/IUDBABo/KgDBABrpFcDBABr
pHkDBABrpIQDBABrpLwDBAFrpNIDBABrpZsDBABrpaQDBABrpbMDBABrpboDBABr
pccDBABrpc0DBABrpd4DBABrpeQDBAFrpeoDBABrpfAwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYXA3q+Se
CFvs/2T6KtNLGAYFb11Da1m4QQezEieX1Hdrs+NPx8wvGgZ4ltyIwyVfdT7bywJk
aT9I+DnaJNXLlbpwGR3wSjeWIZFbBABnOtVIQyfwO83/0nJcd8JTQ6lLYPtNaULT
DMJxYkaP/xEzuAUEHLTNSHz51Q3ZPREjy7P5ZUnlGFoKGkTrKZ33RuInx4YP4RJL
hlC9YtubPNGhTjgRwyJwEZh5wPu00ejbnoXZCws6WoCBoyQN88/T9rE0iREqP2XM
M1zSzIjEPjrzvAGdUu/mHk4cjSk1iTWShagwDU1ksXtelUG4zCdjM9ITJYrGL8kM
8iNr13xyYqyakQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:31 2024 by rpki-client on console-fra.rpki-client.org