Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dcb5bb48-1ace-3bcb-9205-882ec33818a6.roa
File: dcb5bb48-1ace-3bcb-9205-882ec33818a6.roa (raw, json)
Hash identifier: gi9SQkNp+5mlR9sqwSlVuCpXG+Zrucxlzqu6WyR6quE=
Subject key identifier: ED:F8:9C:8D:5E:BA:E5:E4:CC:3F:DD:13:EB:51:FB:D9:E9:C8:F4:79
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584518B04ABE112677207CA84D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dcb5bb48-1ace-3bcb-9205-882ec33818a6.roa
Signing time: Mon 04 Mar 2024 14:00:33 +0000
ROA not before: Mon 04 Mar 2024 14:00:33 +0000
ROA not after: Sun 02 Jun 2024 13:00:33 +0000
asID: 25893
IP address blocks: 142.111.211.0/24 maxlen: 24
136.0.195.0/24 maxlen: 24
107.164.127.0/24 maxlen: 24
23.27.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:18:b0:4a:be:11:26:77:20:7c:a8:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 4 14:00:33 2024 GMT
Not After : Jun 2 13:00:33 2024 GMT
Subject: CN=16b570c9-6242-43b0-9cc4-96b33bbcb9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:eb:c2:45:65:d0:40:36:19:c3:9d:cd:44:
f5:df:9b:af:73:84:25:73:ef:c1:8f:a6:a9:e0:b9:
fb:30:6f:0e:dd:e1:f1:60:85:be:3e:b8:6f:e9:c5:
71:10:b0:29:89:2e:c0:92:e3:f3:e0:cd:e3:5b:ad:
27:da:01:6f:ba:26:c6:f6:b5:71:fa:aa:07:ac:80:
e8:7f:81:ca:a0:55:4e:2d:e4:96:ad:96:b0:b8:39:
11:87:9f:f0:ca:38:73:18:34:46:e8:d6:15:de:09:
07:e9:a1:ec:4e:fe:fd:42:ce:2f:70:1a:56:17:ea:
f7:d8:ba:97:ae:4d:38:2d:86:d6:5e:5b:e9:06:fd:
f6:73:b5:2e:78:93:91:6f:ef:52:40:97:47:2e:ec:
a5:dd:a2:09:d1:d3:17:19:55:ff:0b:58:5d:10:e1:
e2:bd:e2:d2:73:ff:ae:a5:c8:05:29:73:bb:a4:0b:
b6:fb:b1:94:87:36:03:c3:72:c1:d7:34:bb:bc:a5:
12:34:fe:f6:31:9e:65:fd:de:8e:26:2e:41:db:a5:
09:0c:cc:0d:3b:47:9b:1c:88:6a:54:6f:4d:eb:a6:
c2:2c:54:bb:45:c2:15:e2:37:da:9f:b0:e8:ee:48:
bc:72:23:4a:d4:a7:b0:9e:95:51:75:14:85:65:fe:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F8:9C:8D:5E:BA:E5:E4:CC:3F:DD:13:EB:51:FB:D9:E9:C8:F4:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dcb5bb48-1ace-3bcb-9205-882ec33818a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.26.0/24
107.164.127.0/24
136.0.195.0/24
142.111.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:28:1d:01:1a:c5:db:64:29:09:3c:f4:f4:66:03:5c:83:24:
67:a8:c3:2b:6c:b1:50:50:21:03:21:d9:d9:bb:ca:cf:0d:9f:
66:b7:21:b7:47:5b:73:f4:a6:a4:9d:23:88:40:47:1b:13:af:
05:f9:50:56:d2:ce:96:1e:5e:9c:6d:58:e0:33:40:f4:77:5e:
3e:e8:96:32:d5:3a:f0:aa:69:a5:98:ec:fc:66:47:cf:2f:bc:
dd:0e:86:7f:c9:ce:75:38:d4:ab:ed:93:9d:1b:7f:e1:13:c4:
7c:30:1d:5f:ff:5c:3a:4f:7b:c6:9b:68:9e:d8:02:a8:21:c7:
cd:96:f7:71:50:e5:7f:f3:b7:b4:65:b1:fa:a6:65:54:db:e0:
84:c6:54:bf:cf:c4:85:f5:79:36:be:04:c5:71:fe:26:49:79:
fa:dc:75:ad:fd:a9:0c:b1:9d:78:3a:fb:2d:64:68:d5:b7:ad:
02:2b:df:c0:c8:4b:31:36:c9:b9:c0:a5:40:aa:a3:61:a5:6e:
b8:e9:ff:13:04:6c:58:5a:5e:d8:d9:32:25:c0:e9:f3:39:b1:
fa:49:09:3f:fd:70:1c:d0:56:7b:07:75:92:58:64:1c:49:57:
75:bb:4e:89:5c:33:16:ac:a3:af:3b:a7:4b:1c:e0:57:1a:89:
47:5e:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:47 2024 by rpki-client on console-ams.rpki-client.org