Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb33522f-5461-3a1c-acb2-4e51d0c7d5f7.roa
File: fb33522f-5461-3a1c-acb2-4e51d0c7d5f7.roa (raw, json)
Hash identifier: lVNQPQzYP2plYdxD1EKbrgOywiac09n+14NKW0BWFdY=
Subject key identifier: 85:C8:AC:C5:FB:32:D8:88:6C:F1:A1:65:68:CA:0C:29:19:87:E4:74
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583C816D9603EF2C7642808D1CE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb33522f-5461-3a1c-acb2-4e51d0c7d5f7.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Wed 10 Apr 2024 04:00:00 +0000
asID: 54252
IP address blocks: 166.88.159.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:81:6d:96:03:ef:2c:76:42:80:8d:1c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Apr 10 04:00:00 2024 GMT
Subject: CN=f41b643e-ec56-421e-87bd-e04f251736c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:45:8d:0d:cc:1a:e1:5e:ac:ed:ac:f4:93:
8c:0c:3c:e2:29:55:68:c2:64:46:c5:a6:25:32:91:
d0:a0:66:eb:e1:21:6f:d2:62:28:d6:74:5a:0d:8c:
f1:06:09:42:60:6d:de:12:9f:81:1b:d3:41:23:ed:
92:85:be:62:1c:4a:9e:23:9e:28:5c:cb:ac:35:21:
0b:e1:fe:ae:67:d1:16:6c:3c:c1:4a:d3:74:ee:ed:
bd:1f:bf:e6:86:88:6d:6e:11:c3:62:82:ed:64:93:
86:c8:ab:bd:49:15:8f:24:c4:56:cc:c6:49:06:f7:
66:f4:07:42:e4:ef:4c:4c:4b:75:2c:c9:81:ef:86:
c0:f1:d0:73:45:47:b2:f2:53:ae:35:30:61:98:d8:
f2:76:f4:32:b1:0d:03:5e:e3:23:a8:f6:ac:63:15:
f3:f7:9b:0f:96:fc:c4:5d:0c:7e:70:e8:dd:db:03:
6e:c4:9d:ba:ba:a6:ea:df:aa:e0:7e:fe:f4:31:77:
dd:38:ac:ff:bd:08:b6:e5:47:ae:52:f6:c9:8d:1a:
cc:a5:ef:a6:b5:63:8c:97:fc:a6:a0:95:f2:1b:0b:
a6:71:b3:c5:fe:bf:69:fb:e4:fa:7f:5a:d2:24:57:
76:c4:6d:9f:1c:c4:f9:18:9f:c0:d8:4f:cf:b6:22:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:AC:C5:FB:32:D8:88:6C:F1:A1:65:68:CA:0C:29:19:87:E4:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb33522f-5461-3a1c-acb2-4e51d0c7d5f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:d7:ed:36:9c:cf:56:ce:1c:14:ee:49:b8:18:5f:6d:06:53:
1b:a5:2b:c4:93:2c:e8:27:6f:d6:d5:26:15:61:7e:38:56:95:
4c:30:26:c8:35:2c:54:4f:2c:06:e9:a2:04:8b:c2:05:42:ad:
49:51:2e:33:5f:72:3d:65:54:08:d8:0d:c0:e3:17:e7:40:8f:
11:44:22:85:f9:78:63:a3:e2:ca:54:10:3b:db:98:b3:f3:16:
f3:55:41:9b:18:8c:4f:00:75:83:df:3e:35:4f:4b:fd:95:b0:
06:b5:e4:82:c6:fb:9a:c7:29:71:f3:ed:dc:65:91:5b:fe:6e:
23:aa:94:f0:bd:79:6e:78:33:f0:4e:e2:8c:4a:34:39:36:dd:
2c:e1:14:54:a2:c7:a1:60:a9:ce:ca:da:93:e6:14:57:02:81:
7b:32:7d:fc:e4:8a:ad:af:32:8c:5f:49:8b:7a:dc:2a:91:10:
b2:74:89:eb:72:1d:57:38:47:bc:48:4c:14:0b:1c:ab:f3:73:
1d:a7:57:f4:51:1d:79:b2:da:14:41:28:39:c3:37:1d:a1:41:
fa:ef:2d:25:ec:bc:c0:fb:e3:d8:6d:2a:aa:c9:fe:ef:fe:9d:
3b:4f:a9:cc:65:a6:fc:2a:ef:d2:f9:90:39:e2:4f:68:0a:3b:
bc:4d:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:34 2024 by rpki-client on console-fra.rpki-client.org