Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/cb53e6de-7f41-3749-bbb2-8bb05c7170cf.roa
File: cb53e6de-7f41-3749-bbb2-8bb05c7170cf.roa (raw, json)
Hash identifier: rKWXC/D3ovg55nptH0QTs2KjqveZNq0qwqMEQiG6UcQ=
Subject key identifier: DC:5D:90:33:1E:9E:80:84:20:01:B4:62:61:9C:FD:77:B5:49:8D:FD
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858423A5873BECE5DDFF0D2FE5E00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/cb53e6de-7f41-3749-bbb2-8bb05c7170cf.roa
Signing time: Thu 15 Jun 2023 13:00:18 +0000
ROA not before: Thu 15 Jun 2023 13:00:18 +0000
ROA not after: Wed 13 Sep 2023 13:00:18 +0000
asID: 7862
IP address blocks: 146.23.36.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:3a:58:73:be:ce:5d:df:f0:d2:fe:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Jun 15 13:00:18 2023 GMT
Not After : Sep 13 13:00:18 2023 GMT
Subject: CN=c0de2550-ded2-46fc-bed8-2dd7a492a05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:ab:72:5c:d2:6e:00:7c:62:d6:5c:6f:88:
2e:27:5d:e7:63:a4:a0:42:a9:1b:ed:61:e6:87:96:
87:59:7a:4c:fb:49:66:99:85:bf:3a:b8:64:d0:99:
4d:76:79:f0:84:72:1f:bd:89:21:51:9f:2b:ba:5a:
c3:81:ef:43:b7:56:0d:e2:1a:34:6d:61:50:93:05:
04:23:78:ff:b2:07:55:91:b6:ad:ad:98:50:f1:22:
93:9e:55:a0:97:4f:1b:d3:bc:b6:87:5d:19:80:65:
ca:fe:62:7a:d2:ee:7a:c2:45:76:39:69:e3:3d:e9:
ca:27:7e:58:83:bf:6e:39:b5:c4:aa:bf:92:e4:84:
7b:3d:ac:b0:6f:56:6a:ff:36:9e:a1:98:3c:e3:e2:
1f:a2:fc:0c:34:c4:d0:45:66:f9:d6:06:26:ed:37:
49:67:3d:7c:07:c9:f6:b6:88:b9:fe:d8:b9:3b:24:
b0:66:27:f3:03:30:d1:6f:d8:10:1f:d8:b5:33:06:
c7:e4:30:d7:10:ab:52:57:68:a5:fe:64:57:38:7a:
70:d9:0e:19:ba:25:6f:64:d7:f0:8c:96:2e:d0:34:
c1:4e:15:a3:94:e0:87:fa:a1:30:71:97:2b:6f:e2:
0e:36:69:bc:fb:af:14:bb:5a:07:f4:c5:8f:1f:56:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:90:33:1E:9E:80:84:20:01:B4:62:61:9C:FD:77:B5:49:8D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/cb53e6de-7f41-3749-bbb2-8bb05c7170cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f7:52:b4:7c:c5:d9:6e:9a:39:1d:4a:5d:b5:f5:c2:60:ce:
14:b1:79:b2:5a:9d:e7:24:a4:0e:46:df:10:8c:3e:8e:ce:9c:
e1:6e:a2:61:7d:09:85:29:36:0f:d3:be:b7:a2:1e:6a:56:5e:
36:fd:d5:d7:d3:a9:dc:01:d6:e4:60:58:09:ca:5a:a0:29:9f:
79:51:82:09:bf:17:36:44:03:8c:be:4a:84:8c:bf:5d:64:61:
d6:23:1b:1b:99:cf:ec:d3:52:a6:d3:63:52:dd:89:0c:ce:93:
01:f5:00:9c:9d:d6:7f:be:61:80:6f:c6:87:1b:10:43:f1:34:
71:a3:f6:2f:66:1c:97:44:2f:eb:37:51:e2:73:be:f7:c9:ad:
fc:9f:c4:69:c3:11:5c:92:69:74:55:73:e3:9c:dd:f4:d8:4a:
f3:9e:2e:e6:89:81:a2:f8:ab:54:9e:df:73:c4:67:be:db:bc:
ec:ef:7b:2a:7b:f7:e0:2f:72:46:e9:82:d9:00:26:5e:3a:38:
1e:97:f0:7a:7b:8e:54:eb:be:16:a5:2d:84:c9:74:88:c6:3e:
33:6b:58:2b:6c:13:ee:d2:85:6e:f3:2c:cb:ea:30:01:ba:44:
f2:e5:2c:97:c9:c4:3d:e6:4e:3b:98:71:75:29:b0:cc:86:1f:
c4:34:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 15:18:47 2023 by rpki-client on console-fra.rpki-client.org