Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6980b58-f75d-3aa4-b58a-0d80133328a6.roa
File: d6980b58-f75d-3aa4-b58a-0d80133328a6.roa (raw, json)
Hash identifier: fJk5XN6RqsWJ6LEp2awpI+zRffxzyyKyNMTLsyTiSYo=
Subject key identifier: 76:BA:AD:3F:19:70:4B:F3:31:E9:0D:C2:33:F7:9E:B0:48:43:37:A2
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844CEB50954653976A2C20C67B4
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6980b58-f75d-3aa4-b58a-0d80133328a6.roa
Signing time: Wed 07 Feb 2024 02:00:24 +0000
ROA not before: Wed 07 Feb 2024 02:00:24 +0000
ROA not after: Tue 07 May 2024 01:00:24 +0000
asID: 6939
IP address blocks: 104.164.206.0/24 maxlen: 24
107.186.91.0/24 maxlen: 24
104.165.195.0/24 maxlen: 24
107.186.79.0/24 maxlen: 24
107.164.139.0/24 maxlen: 24
107.186.193.0/24 maxlen: 24
107.186.9.0/24 maxlen: 24
107.186.152.0/24 maxlen: 24
107.164.22.0/24 maxlen: 24
104.165.72.0/24 maxlen: 24
104.165.12.0/24 maxlen: 24
136.0.50.0/24 maxlen: 24
136.0.73.0/24 maxlen: 24
107.165.212.0/24 maxlen: 24
107.165.197.0/24 maxlen: 24
107.165.169.0/24 maxlen: 24
107.186.25.0/24 maxlen: 24
107.164.173.0/24 maxlen: 24
107.186.23.0/24 maxlen: 24
107.186.32.0/24 maxlen: 24
107.186.30.0/24 maxlen: 24
107.186.56.0/24 maxlen: 24
107.164.86.0/24 maxlen: 24
107.186.224.0/24 maxlen: 24
107.164.24.0/24 maxlen: 24
107.186.203.0/24 maxlen: 24
107.187.43.0/24 maxlen: 24
107.186.234.0/24 maxlen: 24
107.186.20.0/24 maxlen: 24
107.186.13.0/24 maxlen: 24
107.186.4.0/24 maxlen: 24
107.165.224.0/24 maxlen: 24
107.186.64.0/24 maxlen: 24
107.165.215.0/24 maxlen: 24
107.186.63.0/24 maxlen: 24
107.187.102.0/24 maxlen: 24
107.187.101.0/24 maxlen: 24
107.187.108.0/24 maxlen: 24
107.187.104.0/24 maxlen: 24
136.0.37.0/24 maxlen: 24
107.187.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ce:b5:09:54:65:39:76:a2:c2:0c:67:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 7 02:00:24 2024 GMT
Not After : May 7 01:00:24 2024 GMT
Subject: CN=bbc02014-613e-4134-b851-b90fd3e6914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:93:a6:35:1d:82:47:b2:fc:38:80:8c:2f:
64:c4:91:fa:b4:05:3e:80:5c:cb:e9:a5:60:9c:88:
cf:13:e2:c2:03:44:98:76:66:c7:ca:26:ce:eb:4b:
f8:fa:8a:fe:3d:97:5e:d9:c1:ad:7c:f8:10:53:ae:
ac:fd:0f:ea:8a:6c:79:b6:f3:ed:a9:5d:d9:21:0d:
c7:6f:d5:9e:04:28:78:26:11:67:b3:72:d4:bf:39:
e0:66:e9:3b:82:93:3a:a1:23:55:34:4c:2f:98:eb:
df:26:29:96:e3:d1:19:bb:71:17:9d:6c:fa:fb:ba:
1f:6f:92:46:7e:24:6c:d5:c9:6c:bc:7c:9f:66:01:
1f:73:18:31:d9:81:ec:f3:29:a7:22:e2:50:cc:a0:
cd:82:3b:6c:ca:10:0d:ad:e3:96:cd:71:2a:d1:99:
2d:77:3e:5a:09:29:91:2e:06:a8:9b:53:af:3e:34:
eb:fe:28:60:5c:a1:5c:db:f6:17:02:82:18:19:23:
de:f2:0c:05:f5:33:3f:97:bc:34:be:a3:d3:81:3d:
63:e3:70:34:5c:c1:c1:a8:52:3a:28:44:7a:f1:d3:
b1:ef:c3:b7:5e:07:bf:66:82:ec:0d:1a:1f:5b:20:
dd:d1:3f:27:a8:09:54:b3:d4:fe:10:8a:69:96:33:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:AD:3F:19:70:4B:F3:31:E9:0D:C2:33:F7:9E:B0:48:43:37:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6980b58-f75d-3aa4-b58a-0d80133328a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.164.206.0/24
104.165.12.0/24
104.165.72.0/24
104.165.195.0/24
107.164.22.0/24
107.164.24.0/24
107.164.86.0/24
107.164.139.0/24
107.164.173.0/24
107.165.169.0/24
107.165.197.0/24
107.165.212.0/24
107.165.215.0/24
107.165.224.0/24
107.186.4.0/24
107.186.9.0/24
107.186.13.0/24
107.186.20.0/24
107.186.23.0/24
107.186.25.0/24
107.186.30.0/24
107.186.32.0/24
107.186.56.0/24
107.186.63.0-107.186.64.255
107.186.79.0/24
107.186.91.0/24
107.186.152.0/24
107.186.193.0/24
107.186.203.0/24
107.186.224.0/24
107.186.234.0/24
107.187.43.0/24
107.187.101.0-107.187.102.255
107.187.104.0/24
107.187.108.0/24
107.187.111.0/24
136.0.37.0/24
136.0.50.0/24
136.0.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:89:70:be:16:32:ab:49:37:74:f3:1d:ff:4f:6c:3b:bb:12:
0b:06:0d:59:db:72:e3:33:e0:e3:17:85:47:d3:32:38:3d:af:
b0:e5:ad:4c:98:56:40:9f:9b:d3:15:11:ef:ee:66:5a:6e:30:
2e:11:32:a0:76:b1:a6:4c:c2:9d:27:af:9a:98:05:1b:d1:99:
ed:5a:f6:66:81:10:23:42:6b:e4:4e:65:91:8d:e1:98:4e:11:
7a:19:0d:cb:1e:bd:27:b5:7d:79:b2:bd:9c:bb:66:7a:c3:38:
b3:40:48:33:b9:cd:88:de:76:6b:59:ee:9b:36:a0:5b:43:ec:
35:12:1d:e8:7c:d6:60:44:0a:3f:1a:0f:4c:9a:44:a0:c2:62:
7a:79:8a:3d:0c:15:e4:66:6a:3b:cb:7b:59:ef:c4:90:da:75:
df:78:fd:b8:f0:fc:24:f0:a0:3e:10:0b:41:4f:2e:52:bf:3b:
69:74:30:7a:99:0a:5a:3c:6a:a4:13:ea:d3:e8:32:90:99:ec:
09:59:53:bd:1f:5d:86:ca:7f:3b:ec:5d:0c:f4:0c:25:b1:56:
98:8c:df:d3:48:a7:28:e4:a0:2e:6f:6f:47:44:04:45:58:35:
11:74:87:3f:42:b7:32:e1:c2:03:b5:a1:2a:95:f7:98:eb:32:
e0:cd:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:32 2024 by rpki-client on console-fra.rpki-client.org