Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c9f75c42-490d-3d59-8311-e5495682eab4.roa
File: c9f75c42-490d-3d59-8311-e5495682eab4.roa (raw, json)
Hash identifier: +6JQakZrZgJ0ZhGNQtYYZPVPscwj6lOt+P1+J1puvTA=
Subject key identifier: BA:2A:0D:A5:48:C0:D4:60:FD:70:2C:DA:23:4D:26:B1:85:97:A8:FA
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858451A1588257B1E46CF5B539700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c9f75c42-490d-3d59-8311-e5495682eab4.roa
Signing time: Tue 05 Mar 2024 02:00:26 +0000
ROA not before: Tue 05 Mar 2024 02:00:26 +0000
ROA not after: Mon 03 Jun 2024 01:00:26 +0000
asID: 10557
IP address blocks: 142.111.6.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1a:15:88:25:7b:1e:46:cf:5b:53:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 5 02:00:26 2024 GMT
Not After : Jun 3 01:00:26 2024 GMT
Subject: CN=b1aa81e9-9899-4faf-8f14-daba17151271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:7e:d3:6e:b1:68:e6:50:4c:81:ea:e8:f9:
8d:52:c4:ec:ef:63:3f:5b:c0:11:79:ee:02:f3:64:
3d:67:cd:40:94:45:3b:97:64:7b:2d:93:f6:4a:aa:
80:29:71:33:f9:59:df:53:81:a4:a2:77:9d:fa:4a:
65:99:49:07:f3:59:84:f6:d5:92:e4:5d:be:53:c2:
fb:56:6c:75:eb:88:1c:f6:76:c9:ea:7c:9a:93:c2:
db:e8:df:68:df:c5:34:14:a7:1f:73:dd:bd:ff:45:
39:dd:a0:82:f8:8d:0e:49:7d:cb:9e:b3:ed:a5:35:
6e:0f:cb:91:20:32:2b:8b:c6:32:b8:a7:7d:c0:5c:
98:87:50:ed:22:d4:e2:60:e1:1f:f6:02:0a:c4:d6:
3c:47:fc:a8:77:d7:68:ce:ce:c6:37:24:3b:6f:d6:
d3:3d:72:ed:0a:ae:3a:b8:91:08:72:60:32:44:7b:
8a:c5:07:92:a1:ac:85:f6:56:99:d7:69:e6:5b:c5:
01:44:19:07:bb:f1:19:50:ab:3c:5f:38:ea:31:78:
8f:d7:c9:4f:08:eb:a4:7e:e0:e4:41:95:97:d2:97:
91:e6:ff:79:c9:16:de:95:9e:35:06:38:9d:25:8f:
66:10:c1:0b:34:1a:7d:82:62:f4:2b:cf:96:ad:f0:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:0D:A5:48:C0:D4:60:FD:70:2C:DA:23:4D:26:B1:85:97:A8:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c9f75c42-490d-3d59-8311-e5495682eab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:15:27:d8:e2:cc:59:48:15:24:d7:50:a9:ee:cd:af:b1:b6:
1d:08:db:f8:fb:7b:76:08:db:54:c8:e0:86:dc:bc:84:15:44:
86:05:0c:45:9c:89:da:ca:f0:71:9d:9b:9c:ae:a9:96:a8:f9:
a3:3d:bb:e3:b3:a6:ec:83:29:c8:36:9e:ac:3c:1b:73:7c:a2:
2b:95:91:f1:9f:f1:19:b7:05:b6:73:f5:1a:c1:63:a2:e9:6a:
e6:82:68:cc:40:49:78:93:0e:0d:e4:9b:46:fe:31:d8:5a:6d:
2b:60:ae:22:ea:dc:07:ad:d6:7c:34:06:1b:c6:6f:01:ad:d8:
6f:af:7e:01:3f:e4:90:cb:d3:e5:cb:94:bc:ee:52:4a:82:18:
7f:b3:9b:db:df:3a:0b:ea:fe:f6:7c:a0:52:c9:1a:05:18:8e:
92:28:0b:e6:ce:ca:85:98:50:88:b5:cb:d3:97:cc:b4:1b:e8:
94:e9:79:18:0e:06:3a:7f:fa:df:4f:19:9f:ea:40:f7:79:45:
ae:bd:ab:0a:62:c9:d1:ae:a8:92:e1:58:d6:4c:2a:28:68:1f:
27:f7:45:33:76:bf:3b:b9:8a:81:55:d1:54:c9:3d:01:b7:16:
f2:1a:85:0a:3f:d8:ea:da:75:d4:0a:3f:75:eb:8b:e1:2c:06:
3d:4c:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org