Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/bbff13c3-375d-3427-bdbc-efda1ff7bfa1.roa
File: bbff13c3-375d-3427-bdbc-efda1ff7bfa1.roa (raw, json)
Hash identifier: TmsP6wO6Lh19ba+adzj+RkIjfmNL/mJByXF4ox97XVw=
Subject key identifier: 01:D7:B3:54:C0:1D:85:08:FC:33:9E:AE:ED:BD:EA:C6:13:EC:A8:42
Certificate issuer: /CN=73aeeb26-083d-498f-b36a-5f0bfb5166f4
Certificate serial: 010D0C9F43285847D6CF3996C396DA4A8486E780
Authority key identifier: 01:47:E6:0A:7E:92:F2:42:7F:9C:1F:14:F5:6F:DC:5F:A4:8B:CB:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/bbff13c3-375d-3427-bdbc-efda1ff7bfa1.roa
Signing time: Mon 11 Nov 2024 02:00:27 +0000
ROA not before: Mon 11 Nov 2024 02:00:27 +0000
ROA not after: Sun 09 Feb 2025 02:00:27 +0000
asID: 63270
IP address blocks: 23.155.32.0/24 maxlen: 24
98.142.186.0/23 maxlen: 24
172.98.6.0/24 maxlen: 24
2602:fe32::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d6:cf:39:96:c3:96:da:4a:84:86:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73aeeb26-083d-498f-b36a-5f0bfb5166f4
Validity
Not Before: Nov 11 02:00:27 2024 GMT
Not After : Feb 9 02:00:27 2025 GMT
Subject: CN=c5d1bb4b-95bd-40df-9449-022180eb4a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:59:45:27:fa:dd:5d:08:40:a6:76:19:a3:
f1:b2:24:7d:16:dc:c5:61:67:9c:1c:2f:bc:87:cd:
45:08:db:89:b7:41:0d:88:12:1c:b2:55:ab:b7:b8:
95:13:f9:61:37:e6:72:52:2d:4e:d8:18:ea:09:2b:
27:c0:f5:18:fd:a9:6f:1f:4b:70:ea:51:8a:06:14:
bd:0e:70:8e:1f:53:cb:88:68:67:70:29:eb:ff:99:
b8:cb:9c:b5:35:e8:e3:7c:09:eb:80:2e:84:07:a6:
6e:c0:57:1f:c2:a0:0c:c7:ac:21:65:8b:70:a3:f2:
f8:05:78:3e:fa:1a:2b:df:50:9d:eb:2e:16:45:a9:
cf:fb:5e:fe:1c:fc:49:a6:81:47:53:51:de:f8:4d:
44:8b:0f:ab:a6:33:e5:0f:7b:bc:9c:1f:b2:a6:8d:
71:03:39:3c:de:ca:17:4b:e0:de:bd:8c:44:84:d8:
8d:42:ae:04:32:e4:c6:2f:55:e7:41:13:a6:5d:29:
8f:35:b5:6a:46:48:fd:a6:63:a3:b7:28:6e:85:0e:
b8:75:62:0b:88:ae:93:71:17:c0:c3:4b:09:9e:b4:
6e:15:08:8a:2a:7d:63:21:12:80:60:33:09:3d:7d:
3c:7f:9b:e4:a8:c8:37:ee:2b:91:37:cd:3d:e3:2f:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:B3:54:C0:1D:85:08:FC:33:9E:AE:ED:BD:EA:C6:13:EC:A8:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/bbff13c3-375d-3427-bdbc-efda1ff7bfa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/73aeeb26-083d-498f-b36a-5f0bfb5166f4.crl
X509v3 Authority Key Identifier:
keyid:01:47:E6:0A:7E:92:F2:42:7F:9C:1F:14:F5:6F:DC:5F:A4:8B:CB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.32.0/24
98.142.186.0/23
172.98.6.0/24
IPv6:
2602:fe32::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:38:aa:4b:4f:fa:96:94:7f:44:8c:9c:91:4b:d7:7b:e4:56:
8d:62:5e:77:e2:73:04:07:96:ae:fd:e0:c1:b0:86:a5:f5:79:
27:82:38:3c:db:6b:41:e5:ef:0f:58:99:27:f5:13:08:ea:1b:
1b:36:16:0b:9b:10:e5:01:e8:01:af:23:62:22:a3:d4:a7:e9:
46:e9:2b:6f:11:9c:7d:2c:3c:8a:60:1c:12:9b:b1:04:d1:d0:
2a:35:ac:c3:10:10:f3:f9:93:2d:cf:5a:73:1c:44:6b:d7:0e:
e4:96:03:44:19:f8:0f:75:2c:86:26:1a:16:f8:04:f1:d2:78:
f1:d5:e3:1b:c3:48:89:68:e3:66:24:a7:80:38:0f:2c:ed:c8:
88:f7:44:90:9e:e9:e0:be:56:a5:84:a9:cc:13:b8:55:53:08:
7c:8c:bd:1d:32:82:74:97:09:a1:a7:a9:73:78:b9:aa:36:d2:
53:74:ab:74:88:d0:f5:df:20:90:1e:28:bc:01:de:f2:fe:6b:
8d:40:74:60:79:ae:4c:f2:d7:74:0b:a1:16:98:8a:e2:ce:f8:
f1:11:de:5f:d0:50:98:2b:e9:57:cd:20:d4:8d:52:b6:aa:ac:
40:11:97:ce:79:ce:18:e5:18:3c:49:8d:b4:a9:f2:36:cc:10:
6b:09:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:47 2025 by rpki-client