Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/706004cb-a8af-3805-9e37-72ba93a4cca2.roa
File: 706004cb-a8af-3805-9e37-72ba93a4cca2.roa (raw, json)
Hash identifier: Juj+tlxBKvspRrfVTP+MabXaLXVHU5q0N8jBIYYMWhI=
Subject key identifier: 52:2A:E1:85:37:7B:BE:B4:E1:1B:51:FF:B6:21:99:F9:59:28:5A:D2
Certificate issuer: /CN=9767f423-1d76-4b17-b2d6-3bb753094e71
Certificate serial: 010D0C9F4328583D7B668C9417F8D5B375376000
Authority key identifier: 56:01:26:67:D1:51:07:99:FD:17:FF:DC:06:E0:79:DB:32:2D:6A:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/706004cb-a8af-3805-9e37-72ba93a4cca2.roa
Signing time: Tue 29 Dec 2020 05:00:00 +0000
ROA not before: Tue 29 Dec 2020 05:00:00 +0000
ROA not after: Tue 09 Jul 2024 04:00:00 +0000
asID: 54994
IP address blocks: 138.113.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7b:66:8c:94:17:f8:d5:b3:75:37:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9767f423-1d76-4b17-b2d6-3bb753094e71
Validity
Not Before: Dec 29 05:00:00 2020 GMT
Not After : Jul 9 04:00:00 2024 GMT
Subject: CN=ac9024c3-2fb9-4fb2-8479-a9df0343a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:d8:e0:5d:74:8b:2e:40:21:a7:c5:e5:08:
3e:02:d5:62:c8:5d:71:b6:fe:fa:9b:fa:44:d8:c5:
fb:31:8a:62:d5:a6:a6:98:c7:af:59:c5:09:63:3b:
df:aa:51:49:16:76:b0:73:be:b9:d0:ee:6f:ad:9d:
ab:c3:bc:ed:79:14:b7:dd:66:dc:68:4d:6d:e4:55:
ce:61:f3:de:58:04:6e:fa:3c:90:f1:54:f9:fa:28:
cf:60:73:d0:fc:e5:8b:2a:68:92:c6:49:61:8f:eb:
55:09:26:1a:b1:86:4b:35:6b:f6:bd:f1:5e:5d:f7:
1e:c0:bd:0e:30:2c:ee:de:42:96:9d:0f:27:02:69:
c8:7c:e9:37:8b:8e:30:d9:10:f5:2c:f8:1c:a3:de:
24:7f:e4:fd:ac:1f:87:9f:41:c0:c3:fd:ee:ba:1c:
e3:c2:d0:e5:83:53:5e:73:c1:10:5d:bf:1f:01:16:
8e:1e:37:11:47:e8:4c:35:31:c0:90:dc:ee:e8:b8:
7c:ff:38:bb:40:41:71:13:85:0f:9d:73:df:2b:56:
27:bd:8f:99:0e:ce:2c:69:8d:69:3c:91:09:1e:df:
7e:9a:d6:dc:b3:0d:a4:11:77:a5:bd:c0:9e:7a:4f:
bc:9d:1b:e9:a5:3f:9c:7b:36:6b:6b:f1:91:db:a9:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:E1:85:37:7B:BE:B4:E1:1B:51:FF:B6:21:99:F9:59:28:5A:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/706004cb-a8af-3805-9e37-72ba93a4cca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71/9767f423-1d76-4b17-b2d6-3bb753094e71.crl
X509v3 Authority Key Identifier:
keyid:56:01:26:67:D1:51:07:99:FD:17:FF:DC:06:E0:79:DB:32:2D:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9767f423-1d76-4b17-b2d6-3bb753094e71.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ef:61:37:7d:86:8b:cd:ec:02:86:a9:eb:05:ca:bc:f6:1d:
72:ce:fa:b3:54:f8:ed:80:ae:59:fd:c1:26:e5:66:f7:b9:00:
c0:96:69:12:ca:22:cf:3d:c1:61:99:f5:8a:91:c3:cd:b1:a5:
d7:35:10:37:4d:e3:91:f7:7a:22:ec:a4:9b:1c:08:cd:01:a8:
27:42:21:70:08:a4:90:2c:fd:c8:d6:88:cc:6d:dc:1f:67:1c:
44:0a:6b:79:35:67:a3:bf:f8:6d:b1:00:fb:ca:d4:42:63:d9:
06:3e:9b:99:ea:8a:cc:d0:ba:27:3a:d4:34:22:8a:9c:cd:64:
ed:e5:18:8d:c2:b0:b3:0b:0e:98:97:be:66:98:03:ef:2c:e6:
27:e0:35:8f:68:f1:8e:c6:7a:b9:4d:62:7a:70:8a:1a:7c:b8:
3a:46:da:34:a4:c4:28:b1:7e:da:8b:02:85:01:a3:63:ba:e6:
8c:e2:30:2b:3f:d9:44:e4:37:cc:16:e6:2b:fe:60:c0:fb:06:
29:e0:90:71:2b:0d:3f:9e:ab:3c:b1:f2:1a:d0:69:09:cf:be:
4a:80:38:95:51:b3:2e:3a:9b:f8:77:48:4a:94:62:f8:0b:1a:
72:b4:b9:62:fb:a0:ba:ed:16:29:94:a6:60:4f:51:03:65:fc:
07:2e:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:19 2023 by rpki-client on console-fra.rpki-client.org