Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb4801b7-bce2-35d7-a91d-56fa1e7966c2.roa
File: fb4801b7-bce2-35d7-a91d-56fa1e7966c2.roa (raw, json)
Hash identifier: BPx0+uKAHitRayu0HUtbqTaF/apw3WQbfkz4OPijIoU=
Subject key identifier: 0D:46:F6:93:2D:C3:DC:EC:41:4A:4B:34:21:0F:D0:34:7A:08:39:44
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858416D067676562106B5D86C1580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb4801b7-bce2-35d7-a91d-56fa1e7966c2.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Sat 05 Jul 2025 04:00:00 +0000
asID: 54252
IP address blocks: 142.111.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:6d:06:76:76:56:21:06:b5:d8:6c:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 5 04:00:00 2025 GMT
Subject: CN=1276b967-cc3a-4388-b7f0-7a230596cc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:da:09:70:ec:e1:71:1e:fc:5f:4b:88:85:
73:94:51:52:64:b6:75:fe:56:23:46:d0:69:cc:37:
62:84:ab:87:28:66:08:f5:4d:6a:21:24:b0:66:34:
ca:f2:b6:b2:b6:8e:25:c6:4e:78:cd:1e:7f:07:34:
0d:55:dc:99:7a:c2:71:62:03:9c:2e:8c:b5:7e:f1:
fb:cb:4b:76:10:dd:97:da:24:49:04:8a:8d:90:2e:
31:c5:8d:33:cf:41:ad:0c:af:94:e2:0d:cb:ad:ad:
36:d3:d4:d4:f7:68:db:63:0c:fc:3a:0a:f4:b3:f6:
96:7c:c7:b1:a2:cc:c0:d6:df:40:43:40:1d:cc:0d:
8a:7c:a2:42:4b:e8:97:69:75:5c:a6:74:91:2c:9f:
f7:5c:88:ba:61:de:25:72:97:d0:60:82:60:27:15:
a2:ac:7f:1e:5a:7f:68:a6:f8:13:3c:df:88:ef:3b:
ab:6e:2b:00:9b:c2:6f:c6:fb:8b:d5:8d:98:71:fb:
0e:45:e4:3d:a3:1d:da:70:58:69:89:59:42:d1:c2:
03:81:fe:03:29:51:4c:7f:15:f4:dd:f8:d8:54:d4:
92:8b:61:36:86:bb:e9:cd:55:78:c8:53:d6:1c:0c:
a9:aa:bf:0f:b0:01:3a:a2:96:c2:fe:f7:d6:7a:51:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:F6:93:2D:C3:DC:EC:41:4A:4B:34:21:0F:D0:34:7A:08:39:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb4801b7-bce2-35d7-a91d-56fa1e7966c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b1:89:e5:f3:f2:3b:42:62:eb:ab:93:e7:7f:77:e4:6a:4e:
6c:0a:26:00:72:6b:0d:d0:d0:b5:fe:3a:51:4a:f4:e1:41:92:
ee:83:89:5a:dd:7a:46:e5:6f:cd:88:64:7f:1d:c7:67:6f:b6:
e4:7a:6e:41:d8:d6:f8:c3:56:f2:88:d6:18:8f:87:ff:b1:b8:
5e:cb:aa:42:46:35:3d:fb:68:83:22:6d:d2:18:d4:74:8f:a9:
e8:b9:a2:42:88:26:f1:69:03:dc:a7:c0:2a:0c:12:a7:6e:04:
69:3e:ea:e2:5b:42:36:2c:6b:78:9b:41:7e:a0:30:91:e2:8c:
d4:ea:4e:c4:9c:82:7e:01:4c:28:db:8e:db:d2:e5:51:f8:53:
c8:a5:f4:0a:f0:1e:b1:ad:7a:8f:79:9f:8f:24:e0:f9:6c:ac:
d9:d7:ea:0f:79:c1:de:62:6c:4f:a7:20:c8:13:91:cf:4c:ed:
8b:7d:1b:57:94:34:77:17:5c:45:64:d2:31:d3:d1:db:3f:79:
99:e1:49:ae:5d:65:c6:6a:42:71:03:e8:1c:5b:db:9d:86:1c:
9c:df:9b:89:20:33:05:90:cd:64:8b:86:ef:ce:f6:96:b6:51:
7a:6b:4c:44:29:32:a6:8d:8c:e6:97:e8:d8:58:d3:22:4e:53:
c5:e2:4f:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFtBnZ2ViEGtdhsFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDcwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTI3NmI5NjctY2MzYS00Mzg4LWI3ZjAtN2EyMzA1OTZjYzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTjaCXDs4XEe/F9LiIVzlFFSZLZ1/lYjRtBp
zDdihKuHKGYI9U1qISSwZjTK8rayto4lxk54zR5/BzQNVdyZesJxYgOcLoy1fvH7
y0t2EN2X2iRJBIqNkC4xxY0zz0GtDK+U4g3Lra0209TU92jbYwz8Ogr0s/aWfMex
oszA1t9AQ0AdzA2KfKJCS+iXaXVcpnSRLJ/3XIi6Yd4lcpfQYIJgJxWirH8eWn9o
pvgTPN+I7zurbisAm8JvxvuL1Y2YcfsOReQ9ox3acFhpiVlC0cIDgf4DKVFMfxX0
3fjYVNSSi2E2hrvpzVV4yFPWHAypqr8PsAE6opbC/vfWelHEkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1G9pMtw9zsQUpLNCEP0DR6CDlEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmI0ODAxYjctYmNlMi0z
NWQ3LWE5MWQtNTZmYTFlNzk2NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaxieXz8jtCYuurk+d/d+RqTmwKJgByaw3Q0LX+OlFK9OFBku6DiVrd
ekblb82IZH8dx2dvtuR6bkHY1vjDVvKI1hiPh/+xuF7LqkJGNT37aIMibdIY1HSP
qei5okKIJvFpA9ynwCoMEqduBGk+6uJbQjYsa3ibQX6gMJHijNTqTsScgn4BTCjb
jtvS5VH4U8il9ArwHrGteo95n48k4PlsrNnX6g95wd5ibE+nIMgTkc9M7Yt9G1eU
NHcXXEVk0jHT0ds/eZnhSa5dZcZqQnED6Bxb252GHJzfm4kgMwWQzWSLhu/O9pa2
UXprTEQpMqaNjOaX6NhY0yJOU8XiT8g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:34 2024 by rpki-client on console-fra.rpki-client.org