Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc8a2606-8a45-3593-9fe8-8a81c62e6624.roa
File: fc8a2606-8a45-3593-9fe8-8a81c62e6624.roa (raw, json)
Hash identifier: csTNMK6Px5ir984D0RpukTrqqGOsB++2tn7V6Y/iuPo=
Subject key identifier: A1:E4:6D:30:AE:92:1F:14:91:77:68:34:24:D3:18:8F:1D:8D:D7:15
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858416D072606E49806A165B6D000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc8a2606-8a45-3593-9fe8-8a81c62e6624.roa
Signing time: Wed 26 Aug 2020 17:55:28 +0000
ROA not before: Wed 26 Aug 2020 17:55:28 +0000
ROA not after: Sat 05 Jul 2025 04:00:00 +0000
asID: 54252
IP address blocks: 166.88.164.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:6d:07:26:06:e4:98:06:a1:65:b6:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 17:55:28 2020 GMT
Not After : Jul 5 04:00:00 2025 GMT
Subject: CN=6c0686eb-e74a-4922-bc20-9a84c97abd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:8c:86:5a:d4:5d:eb:d3:5a:72:c0:be:d2:
2b:ea:95:86:92:4b:a7:67:16:a0:42:c0:3d:be:15:
07:c0:0a:d9:94:e9:5a:5a:96:e2:c4:d8:b8:d8:55:
b8:ce:e4:83:c2:1e:96:7a:28:6c:c4:c3:86:be:6d:
8c:04:57:96:c4:53:a5:37:88:34:b1:a6:d7:25:76:
8f:33:46:cc:60:bf:6f:04:21:99:89:bc:4d:52:5a:
8f:d2:d3:33:99:d9:fa:07:28:43:29:fc:04:4e:68:
2b:9f:4f:75:70:82:3b:68:68:51:f7:ae:cc:ea:12:
5e:58:c0:2c:bb:11:12:19:f3:e6:73:b9:9f:55:af:
8a:d1:a1:52:ab:0d:2a:54:04:ec:6b:5d:f1:f7:5f:
05:c0:c4:ce:73:53:b7:c7:b4:cb:dc:99:03:21:7a:
3e:35:dc:40:a7:a3:99:c9:a8:f4:ff:49:ac:3e:94:
28:5c:73:07:b6:0a:7b:9a:66:0e:fe:8e:13:db:6e:
de:ae:58:36:ce:07:23:b0:d7:ea:ea:84:86:9f:77:
54:ea:a5:ca:a2:fd:50:bd:6b:8a:c5:a9:fe:b0:76:
10:e3:1d:2a:9c:e4:e0:f4:2d:5b:50:f3:00:35:63:
22:be:e6:39:f1:1a:1e:54:88:be:86:1a:1a:d5:8d:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:6D:30:AE:92:1F:14:91:77:68:34:24:D3:18:8F:1D:8D:D7:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc8a2606-8a45-3593-9fe8-8a81c62e6624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:87:64:7c:9b:aa:32:62:aa:9c:3b:68:8c:45:d0:0d:bf:60:
80:e5:86:0a:b1:c9:c6:ca:ec:50:84:f5:cd:47:71:36:92:98:
d2:60:e6:25:e5:dc:1b:cc:d7:a3:cd:61:cf:4f:39:99:b6:97:
67:dc:93:ef:0e:77:0a:b7:35:f3:0a:87:c8:d4:d8:c1:f0:56:
6b:2d:35:80:6f:c6:24:7a:e6:5d:ea:58:fe:28:8d:e5:3e:64:
b2:49:82:34:89:83:70:46:44:f9:86:1a:d8:50:ad:52:26:ff:
0f:54:3d:8f:49:6c:f9:0a:64:24:45:b5:ec:bf:eb:7f:1e:53:
e1:a9:10:fd:cf:d9:c4:bb:ed:87:89:53:b2:b9:a1:e4:19:d0:
69:62:ff:d8:63:ec:b6:90:e5:20:47:b1:86:3a:17:2b:0a:ca:
7f:ed:58:8b:45:6e:00:c5:c6:2b:95:9b:3f:84:cb:09:4f:b9:
be:18:30:12:25:da:a7:10:80:d6:2a:fe:29:10:3d:44:88:dd:
71:68:18:c0:8c:ce:eb:26:9a:a1:0f:09:15:96:03:73:4d:cf:
8e:1e:c2:7c:b7:97:27:26:70:89:3a:71:ac:ed:07:ba:c9:85:
9f:dd:78:19:bc:8c:e4:66:36:57:db:97:67:f6:2e:09:84:ab:
a2:5d:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org