Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da7fa517-b362-38b8-a639-1c0005048c48.roa
File: da7fa517-b362-38b8-a639-1c0005048c48.roa (raw, json)
Hash identifier: XK1WHcvG+pCoIYx8FYqc9U+//0o5wDbIE1HFGlmAEnU=
Subject key identifier: C7:63:AD:2F:DB:80:7B:F1:8B:76:2F:36:8D:67:2C:2C:A4:04:50:49
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844E66FE50B47F1BB489E387060
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da7fa517-b362-38b8-a639-1c0005048c48.roa
Signing time: Thu 15 Feb 2024 14:00:30 +0000
ROA not before: Thu 15 Feb 2024 14:00:30 +0000
ROA not after: Wed 15 May 2024 13:00:30 +0000
asID: 12083
IP address blocks: 45.39.58.0/24 maxlen: 24
107.165.205.0/24 maxlen: 24
23.27.205.0/24 maxlen: 24
107.165.222.0/24 maxlen: 24
107.165.199.0/24 maxlen: 24
45.39.215.0/24 maxlen: 24
107.165.240.0/24 maxlen: 24
45.39.225.0/24 maxlen: 24
23.230.218.0/24 maxlen: 24
107.165.228.0/24 maxlen: 24
45.38.191.0/24 maxlen: 24
107.165.235.0/24 maxlen: 24
104.165.174.0/24 maxlen: 24
107.165.164.0/24 maxlen: 24
107.165.186.0/24 maxlen: 24
104.165.193.0/24 maxlen: 24
104.165.255.0/24 maxlen: 24
104.165.155.0/24 maxlen: 24
104.165.178.0/24 maxlen: 24
107.164.132.0/24 maxlen: 24
107.164.211.0/24 maxlen: 24
104.252.133.0/24 maxlen: 24
107.164.121.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e6:6f:e5:0b:47:f1:bb:48:9e:38:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 15 14:00:30 2024 GMT
Not After : May 15 13:00:30 2024 GMT
Subject: CN=46d865f1-4cd9-4697-a6e3-11e4728e5939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:66:44:22:89:f5:f5:67:28:43:ef:d6:a5:
f3:21:81:9a:3a:eb:9c:11:8e:ec:f5:68:2f:98:ea:
0b:cd:59:dd:36:01:48:d8:1c:b3:24:c9:95:80:96:
fd:cd:a1:50:33:a0:4b:ea:1c:db:3d:4d:68:9e:cc:
5f:a7:11:c8:c4:65:6b:b3:f0:a1:d1:db:a0:cd:8b:
90:de:cb:0f:3e:1d:a5:3d:f5:3b:9b:be:a4:e8:1a:
64:26:99:27:86:6d:7a:36:55:fe:83:58:c8:db:bf:
88:98:3d:f5:77:01:06:4f:ed:3f:ee:bb:1e:42:59:
46:c1:81:d4:a3:f7:e6:ac:ac:08:b4:7e:99:23:0b:
d6:13:51:a7:05:8b:18:5f:89:80:58:0b:33:c1:31:
a2:55:46:34:6a:9b:ec:aa:6f:66:95:e0:ba:87:01:
88:4b:6d:06:a7:e3:35:ad:99:53:6c:7d:03:19:6a:
21:22:e9:c7:80:a1:d3:f7:53:ca:a5:80:42:21:30:
4d:ae:d2:b1:03:1f:bf:fd:32:0d:cf:fb:ea:f3:98:
74:7f:59:b0:a6:e4:94:52:59:01:1e:5d:0c:e8:e4:
d7:2f:d1:87:b2:21:38:02:a4:1f:64:18:6e:76:69:
70:d5:d5:4b:a9:69:ff:8a:e8:c3:4c:32:59:23:75:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:63:AD:2F:DB:80:7B:F1:8B:76:2F:36:8D:67:2C:2C:A4:04:50:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da7fa517-b362-38b8-a639-1c0005048c48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.205.0/24
23.230.218.0/24
45.38.191.0/24
45.39.58.0/24
45.39.215.0/24
45.39.225.0/24
104.165.155.0/24
104.165.174.0/24
104.165.178.0/24
104.165.193.0/24
104.165.255.0/24
104.252.133.0/24
107.164.121.0/24
107.164.132.0/24
107.164.211.0/24
107.165.164.0/24
107.165.186.0/24
107.165.199.0/24
107.165.205.0/24
107.165.222.0/24
107.165.228.0/24
107.165.235.0/24
107.165.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:46:fe:aa:66:b4:3e:cb:33:f6:5f:3b:f8:76:5c:60:6a:17:
aa:07:95:e2:5a:73:00:a1:4b:0b:eb:07:f8:9c:46:ab:1f:e8:
67:8c:36:9d:3d:2d:87:8b:00:bb:08:6c:f2:7a:2a:99:3d:31:
b1:6e:6a:36:5c:a1:3f:3e:0c:76:6e:2c:71:e8:6a:f4:f3:65:
9b:e5:11:66:2b:57:24:4e:47:d4:0e:48:03:5c:53:a3:3b:12:
62:ff:4c:96:5d:6b:04:12:17:f6:3c:c9:b8:79:e2:99:13:3a:
b4:ca:15:ae:3e:fa:96:ac:d4:5e:24:74:7a:54:98:bb:0d:b4:
ad:e7:ce:2e:70:46:3b:7b:ab:1a:17:e7:ce:ab:20:73:a9:4b:
47:8e:5b:f6:95:8a:3f:22:3e:54:bc:5c:98:5e:d7:42:d6:e5:
da:e3:2d:cc:70:1d:13:27:82:10:ae:ee:b9:bb:a5:78:ec:d1:
a5:e1:37:46:2a:1f:66:28:fe:55:d3:46:1b:03:0b:f8:7e:e5:
cc:c3:dd:9b:3f:8b:69:55:c2:d6:b9:03:21:14:7f:17:a4:a1:
38:b8:c4:c5:51:e0:39:ea:1b:2f:c8:bc:79:a0:0e:f5:35:df:
a1:ad:23:29:64:ea:df:c9:8c:a0:83:8d:6c:b8:bc:84:60:39:
18:c0:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org