Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d5d1b60c-bb09-39c4-ab44-9b02004d2fb7.roa
File: d5d1b60c-bb09-39c4-ab44-9b02004d2fb7.roa (raw, json)
Hash identifier: 0M6w1jAMTmh2bStzmDkp1bK7T0fMbnAaRpua8CWiRiM=
Subject key identifier: B6:2E:B1:A9:28:FB:20:83:26:FF:D8:EB:32:22:20:43:91:21:D1:BF
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844C91FB25262AF06FEC3FB5880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d5d1b60c-bb09-39c4-ab44-9b02004d2fb7.roa
Signing time: Mon 05 Feb 2024 02:00:26 +0000
ROA not before: Mon 05 Feb 2024 02:00:26 +0000
ROA not after: Sun 05 May 2024 01:00:26 +0000
asID: 20473
IP address blocks: 23.27.195.0/24 maxlen: 24
205.164.30.0/24 maxlen: 24
104.253.211.0/24 maxlen: 24
104.253.207.0/24 maxlen: 24
45.39.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c9:1f:b2:52:62:af:06:fe:c3:fb:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 5 02:00:26 2024 GMT
Not After : May 5 01:00:26 2024 GMT
Subject: CN=fd7b182d-e2db-41b2-8f32-63ee2dc26c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:e9:55:ad:fe:b7:7f:ea:41:11:fb:2b:15:
56:c1:e5:87:5d:b6:0f:cc:25:9e:a5:ac:3d:b7:ba:
e8:00:da:10:6a:6a:3b:c3:3a:9a:cb:cf:d9:8e:c7:
4b:0c:e5:10:94:f5:8b:d3:12:b5:05:bf:f2:7e:30:
53:42:2e:15:c3:3d:5e:a2:97:84:45:cd:0e:a1:3f:
db:97:3b:04:cd:06:69:87:c0:fa:83:ff:a6:9b:e5:
90:bf:4e:18:ba:b5:e1:ad:28:13:8c:c8:e0:07:25:
58:f2:b1:ca:df:aa:df:55:19:96:0b:90:78:8b:e9:
27:95:e5:f5:47:5e:b9:97:3d:89:9f:b2:73:d2:0d:
c9:70:20:d1:e4:f5:66:51:36:03:94:9d:ce:15:69:
56:75:cd:55:6a:ee:8b:f7:8f:59:74:ce:9f:ee:d2:
c6:58:b4:72:56:6a:c5:61:15:36:fa:48:d0:6f:b2:
70:a2:31:fc:f5:bb:b0:fc:be:e9:02:9f:dd:e9:42:
ab:cc:53:80:20:27:eb:c4:43:a0:f7:4a:4f:db:16:
90:9b:b6:33:8f:e9:d1:3e:3d:d5:44:eb:77:ab:22:
79:bd:ed:ea:c7:6d:a1:98:cd:00:f1:ce:11:ac:ad:
7f:54:ce:12:0d:ea:54:61:37:83:f2:b4:b5:8b:64:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:B1:A9:28:FB:20:83:26:FF:D8:EB:32:22:20:43:91:21:D1:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d5d1b60c-bb09-39c4-ab44-9b02004d2fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.195.0/24
45.39.162.0/24
104.253.207.0/24
104.253.211.0/24
205.164.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:75:51:61:27:18:69:dd:79:f4:f8:5f:3a:75:4b:08:29:b2:
da:86:9f:2f:c5:83:4e:af:5c:67:09:cb:e4:89:86:ec:ec:8b:
f3:a6:9a:8c:41:9d:85:fc:05:1d:ea:24:46:ae:f9:a6:df:0a:
f0:08:3b:1b:0a:f5:ce:2f:1e:f4:a2:42:49:d1:15:db:1b:70:
10:74:56:e7:7b:d6:00:cf:03:ad:1c:03:4c:4f:25:a4:82:80:
db:50:37:a4:54:aa:c9:a6:e5:a9:bb:91:73:70:37:f1:2f:a9:
3f:60:9c:13:18:4b:aa:f3:fb:14:40:ca:89:7b:14:a7:93:fb:
08:b8:be:e0:bb:ff:9e:52:0a:90:01:e0:21:5c:ea:da:73:f2:
db:6f:19:51:55:2c:45:90:13:c3:29:86:84:4c:51:78:e8:5a:
d5:84:12:d5:00:b3:d9:48:69:3a:61:2f:52:02:cd:5e:37:25:
de:62:52:5e:99:d0:d6:e6:b3:2d:ee:48:c6:fa:cc:c3:99:ac:
10:d7:32:22:bb:a5:a3:2a:d9:4c:a0:70:5f:92:8e:f9:28:46:
67:bc:b0:b1:18:23:bb:c5:52:57:33:d3:79:94:25:fd:0d:75:
82:11:e7:a8:49:b7:8e:5b:de:96:04:30:4b:5d:cd:e7:6b:24:
79:81:dc:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org