Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e02b5b85-9f2d-36d1-8399-10123d560ff6.roa
File: e02b5b85-9f2d-36d1-8399-10123d560ff6.roa (raw, json)
Hash identifier: Iyxc7JRBpP97Cs+/7DbCpLOawmHMbssgS9c988Rinm0=
Subject key identifier: 10:A1:88:1F:6A:33:D4:61:33:C5:1D:08:87:31:85:12:D4:BF:B1:20
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584063365D99B10B03FEE768A550
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e02b5b85-9f2d-36d1-8399-10123d560ff6.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Tue 01 Apr 2025 04:00:00 +0000
asID: 399114
IP address blocks: 142.111.5.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:63:36:5d:99:b1:0b:03:fe:e7:68:a5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Apr 1 04:00:00 2025 GMT
Subject: CN=38cb0f2d-5d8b-44fc-ac10-26eadd19ccd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:01:f9:b9:44:77:eb:5c:a4:28:a6:e7:85:6f:
73:1e:56:e9:a9:5e:7d:84:f9:4f:73:0d:de:53:9a:
ff:6d:bd:c6:5d:33:27:59:06:9b:e8:e8:20:3d:f0:
70:73:69:f4:9a:30:c4:5f:c8:1d:ba:e4:21:04:3d:
dc:28:9c:42:12:47:fc:62:05:48:74:2d:64:f2:25:
38:8d:d9:99:2a:2e:dd:79:10:d9:b0:47:b9:41:87:
15:88:a0:dd:6c:30:2b:2a:c4:82:fa:93:34:b6:c1:
a1:fd:dc:d0:3a:f6:5d:c3:3a:4a:c4:d6:03:4e:ef:
ec:ba:cb:91:e8:a8:e2:2a:29:07:c4:58:be:0f:3b:
d0:fc:0c:72:2a:e3:0e:15:d1:7d:36:49:41:73:49:
a2:76:70:41:77:12:88:27:02:18:61:8c:85:28:c2:
a7:4d:83:b9:c6:26:45:d2:0e:f9:ca:27:eb:83:44:
00:69:24:80:51:08:93:30:3b:74:13:81:ce:c0:fd:
9b:b3:a0:fb:6d:8a:55:34:7b:61:93:e9:5e:f9:71:
69:90:30:d3:1f:58:48:e5:a3:b4:d3:f2:56:82:bd:
29:0f:5a:54:31:b9:19:f1:96:72:3c:62:9f:3c:42:
a7:be:50:bf:d8:c0:bd:19:2f:c4:d2:4e:b9:90:a4:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:88:1F:6A:33:D4:61:33:C5:1D:08:87:31:85:12:D4:BF:B1:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e02b5b85-9f2d-36d1-8399-10123d560ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:53:9e:03:f9:66:fa:32:e0:85:6e:b8:b9:29:9a:63:62:fe:
81:d6:b6:82:30:56:2b:b4:53:c7:0e:4d:6c:4e:00:61:98:e2:
d9:88:4f:04:15:23:64:76:95:2c:21:17:60:f6:7a:e4:0e:fe:
6b:c4:0c:bc:ef:1b:97:60:9f:17:49:8e:6e:5a:a4:05:93:f5:
be:6d:48:df:37:f3:3c:23:d3:3e:db:85:b3:c8:42:59:a1:70:
82:9d:da:6d:9b:89:00:d4:7c:72:77:95:2b:cf:cb:ce:b3:70:
f1:79:03:53:1c:5b:c2:98:68:59:d6:9c:9d:56:ac:2f:e1:7a:
c7:39:18:34:14:cf:fc:bf:b7:7c:61:45:a5:d1:3e:55:41:9b:
9c:cb:82:8a:6a:42:80:70:de:0b:9e:f2:80:16:66:58:c3:66:
d4:af:55:f6:8f:1e:56:f3:b5:5c:5b:cd:37:c3:04:f7:b7:d9:
35:ab:e1:78:a4:c7:5f:09:b0:db:ce:85:75:b3:b9:33:4d:3a:
1f:fb:23:21:51:25:2c:62:cb:08:4d:db:bb:51:2f:2b:cb:89:
43:e6:8f:92:90:95:76:ed:c3:19:f2:f1:81:53:e8:1e:7f:5c:
7a:04:c3:53:24:f8:1b:f2:bf:87:68:2f:13:f5:92:50:c0:55:
47:0d:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:33 2024 by rpki-client on console-fra.rpki-client.org