Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de259b4d-2aa6-3d34-8651-24bcfa062574.roa
File: de259b4d-2aa6-3d34-8651-24bcfa062574.roa (raw, json)
Hash identifier: GvQfofxoRyu8g+xraKerJgc+ac8He0+mV7B/3hOsbQQ=
Subject key identifier: 6D:53:4A:19:2B:66:DF:A9:08:BC:B1:23:E6:D5:4C:1D:B6:20:AC:6E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844D2E530C8EFB52DC60CE1BD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de259b4d-2aa6-3d34-8651-24bcfa062574.roa
Signing time: Thu 08 Feb 2024 14:00:33 +0000
ROA not before: Thu 08 Feb 2024 14:00:33 +0000
ROA not after: Wed 08 May 2024 13:00:33 +0000
asID: 149440
IP address blocks: 166.88.132.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d2:e5:30:c8:ef:b5:2d:c6:0c:e1:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 8 14:00:33 2024 GMT
Not After : May 8 13:00:33 2024 GMT
Subject: CN=51df3cca-3f74-43b7-98e1-1d0cba5c7c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:98:e9:8a:f3:aa:7b:bc:91:a9:f9:ad:df:
46:3c:02:04:f2:61:e1:b5:75:98:c7:8e:68:7e:45:
9f:61:d6:46:d8:be:bb:9c:f6:c6:a8:ad:0d:00:98:
45:d2:66:18:8d:ba:3e:6d:08:d3:51:95:88:4a:44:
ca:e2:ae:bf:8b:0e:ec:d9:45:fc:85:14:75:b8:40:
77:df:c4:9d:58:79:a3:8d:4d:fa:ad:c3:73:07:18:
ed:12:8e:4b:ca:f0:d6:78:a6:50:da:ca:99:40:8e:
39:65:dd:fb:6a:be:86:10:b9:b9:3b:ac:8e:d1:7b:
95:3d:cf:e3:bd:b8:da:f5:0a:94:db:2c:01:93:3b:
d2:c6:be:a8:db:6b:2e:83:81:a7:bd:2d:df:3a:89:
0b:92:df:c6:be:27:cb:90:ee:dc:b4:be:8c:5c:cf:
e7:1f:e4:3b:6b:94:89:36:81:a9:07:3b:73:bd:13:
58:a1:6c:07:8c:db:cb:dc:f2:f6:8a:ef:db:c4:a9:
95:45:d7:18:77:f3:4a:ca:82:25:4f:cf:e2:e4:4f:
7c:34:ca:67:2d:0d:fa:2a:45:e8:06:02:6e:2b:ea:
d3:48:c5:81:2c:5b:da:ed:02:d3:63:0b:1d:fb:60:
8b:1f:4a:c0:54:d3:78:f1:03:ad:71:96:7c:1c:93:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:4A:19:2B:66:DF:A9:08:BC:B1:23:E6:D5:4C:1D:B6:20:AC:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de259b4d-2aa6-3d34-8651-24bcfa062574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:59:2a:6e:09:3d:0d:62:36:f3:3f:14:25:fc:ad:37:8e:da:
5c:2d:2c:60:ec:f9:8d:d5:55:26:ad:ec:53:d4:1d:d3:f6:86:
32:60:34:0d:38:08:b6:80:3b:23:0a:96:aa:7f:10:eb:af:a7:
98:51:33:bc:40:fd:4e:33:25:01:f3:ad:c0:bb:18:5d:d5:5a:
35:49:6b:1d:3a:07:20:60:95:3f:57:62:0f:af:88:2e:a0:3f:
06:92:d2:ce:18:f7:09:44:32:21:25:b8:07:66:26:ef:17:00:
66:cd:6f:fc:f4:57:05:e4:c9:06:34:c7:af:2d:7e:59:28:8e:
9a:e1:93:22:0e:1f:c8:10:22:f9:b7:a5:79:34:e3:fe:b2:d9:
dc:f4:eb:95:b8:e7:31:85:85:c0:25:8e:27:5f:ad:f8:ce:ba:
c7:f4:61:12:a1:68:bf:82:50:b7:af:19:4c:6d:56:a3:dd:74:
eb:13:93:98:18:d8:21:05:ce:e1:06:20:4a:e0:81:e7:e6:17:
32:c3:93:f2:79:cf:28:c6:7e:db:d6:4a:c0:e9:de:ce:cc:2e:
c0:6a:f3:6d:f5:9a:01:26:81:ae:66:3b:79:29:4f:45:9b:46:
60:26:55:26:7e:38:a9:9a:ef:ee:5f:f6:0b:e7:fd:da:0c:04:
22:ae:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org