Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7ab2ff2-6270-39dc-a48a-12524d0ac170.roa
File: f7ab2ff2-6270-39dc-a48a-12524d0ac170.roa (raw, json)
Hash identifier: Td6os0gAwLr98uVQqcdj0R81w0b4C+93MZdyEetzq+o=
Subject key identifier: 45:98:6F:9D:61:7D:40:60:BD:86:1E:BE:4D:C6:0B:4B:D6:15:4E:3D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285842385873056780AAF7240ADA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7ab2ff2-6270-39dc-a48a-12524d0ac170.roa
Signing time: Wed 14 Jun 2023 19:48:45 +0000
ROA not before: Wed 14 Jun 2023 19:48:45 +0000
ROA not after: Tue 12 Sep 2023 19:48:45 +0000
asID: 49316
IP address blocks: 136.0.96.0/24 maxlen: 24
136.0.198.0/24 maxlen: 24
192.177.24.0/24 maxlen: 24
192.177.41.0/24 maxlen: 24
192.177.45.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:38:58:73:05:67:80:aa:f7:24:0a:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jun 14 19:48:45 2023 GMT
Not After : Sep 12 19:48:45 2023 GMT
Subject: CN=683cca92-3501-426a-bfea-058cc9af952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:74:11:c7:91:8b:5f:b3:68:c3:aa:cc:61:
a7:4d:b9:d6:20:49:f0:07:47:d8:a8:e2:27:db:e6:
cd:c7:77:f5:21:0b:8a:75:dc:64:ec:d7:7f:12:04:
6b:a1:41:ab:aa:5f:c9:79:95:10:ea:54:3c:cf:ec:
cc:9f:18:6b:27:6d:91:50:52:3f:c8:ad:a0:4e:8d:
39:ca:4d:6d:f6:b1:6b:be:d7:29:f9:e8:cd:e1:2e:
d2:ac:a8:a3:9d:2a:84:85:73:78:90:ed:1d:e4:83:
51:9b:bc:fd:64:38:9f:e9:32:ff:5d:8d:71:3e:07:
c9:f1:55:17:69:ee:38:c8:f8:6c:28:fa:59:34:16:
7f:4b:f0:c3:cb:e4:2f:b0:a8:59:e8:fd:f9:27:b7:
82:5d:53:12:4e:7a:3c:5d:6a:f5:d0:cc:0c:dd:4b:
5d:db:d8:95:d6:ea:e7:76:19:51:a8:8a:ff:1e:de:
51:9c:08:d4:17:99:60:e7:18:e5:a2:e0:a4:c5:4e:
0b:26:9f:f1:6b:c2:67:9e:0c:49:c5:ec:69:93:0b:
42:ee:a9:ef:68:8f:30:46:b8:1c:f0:fb:16:e0:29:
5f:d7:a1:15:5b:b5:38:51:54:be:25:4b:09:16:c3:
f7:b0:2b:80:ba:7a:d1:56:11:eb:dd:cd:3f:0d:fc:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:6F:9D:61:7D:40:60:BD:86:1E:BE:4D:C6:0B:4B:D6:15:4E:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7ab2ff2-6270-39dc-a48a-12524d0ac170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.96.0/24
136.0.198.0/24
192.177.24.0/24
192.177.41.0/24
192.177.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:f2:7a:49:70:a4:83:fa:0f:ff:dd:c8:4d:8f:26:24:53:3a:
d1:a4:96:a0:a9:5b:7d:9a:ad:8f:76:2a:ee:15:6f:42:24:89:
55:d9:24:d8:ce:2e:81:51:86:d1:22:2b:86:d6:87:e4:73:a3:
6c:38:69:1c:48:ac:e2:88:c9:fe:a2:5a:58:f8:52:82:30:da:
a8:40:1a:49:4c:a1:9d:3a:43:3b:4e:b4:01:df:75:86:cb:23:
1d:65:c2:1c:d3:c4:93:8a:55:4d:2d:05:7f:8b:81:f5:47:7c:
07:24:27:40:a9:86:8a:4a:1d:40:c7:25:2f:99:9e:41:aa:58:
8e:5b:72:5c:7b:70:50:24:a0:5d:f3:6b:c4:07:de:24:7a:5a:
25:ef:dc:c1:74:04:d2:75:df:a8:e0:d9:fd:55:e0:e6:0a:ab:
b7:65:e8:91:f4:30:85:51:a2:dc:92:11:6c:fb:46:a6:ad:09:
3e:ec:59:12:8e:6a:ee:42:77:f0:52:c5:8d:62:83:0f:91:31:
35:33:9e:31:70:ef:fc:9c:38:36:14:8f:d1:12:74:cd:2c:85:
51:64:d3:b5:5f:fc:e0:1c:c1:04:69:2b:65:52:a9:21:b6:6b:
4d:83:56:24:31:19:fa:d4:da:80:04:bb:99:07:7f:54:76:d1:
dc:7b:6e:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:13 2024 by rpki-client on console-ams.rpki-client.org