Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/d8cc2e31-b413-3162-b5d3-4268562161d5.roa
File: d8cc2e31-b413-3162-b5d3-4268562161d5.roa (raw, json)
Hash identifier: 4vcPsWEwbNI5d1hwsssp0s+HkHrybx/9gmSjgKx+O3g=
Subject key identifier: F1:88:35:66:56:13:A6:02:BD:34:26:13:F4:B3:59:50:54:FD:03:14
Certificate issuer: /CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Certificate serial: 010D0C9F43285846573025B77FB2B033D6B43AE0
Authority key identifier: 31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/d8cc2e31-b413-3162-b5d3-4268562161d5.roa
Signing time: Wed 26 Jun 2024 16:05:21 +0000
ROA not before: Wed 26 Jun 2024 16:05:21 +0000
ROA not after: Tue 24 Sep 2024 16:05:21 +0000
asID: 21507
IP address blocks: 149.116.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:57:30:25:b7:7f:b2:b0:33:d6:b4:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Validity
Not Before: Jun 26 16:05:21 2024 GMT
Not After : Sep 24 16:05:21 2024 GMT
Subject: CN=5f1d29a7-caf4-4e6a-a019-d096f9f73061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:bd:74:0a:f7:29:0a:df:06:c4:b8:9b:c6:
c9:08:69:b1:77:e3:c6:20:eb:8c:95:1e:96:d2:80:
b3:19:03:27:91:05:bc:17:0e:a1:db:a3:bf:a6:c7:
f0:02:d0:1e:91:d2:3b:9b:2c:e9:de:38:0b:fe:13:
eb:a3:f6:b8:6d:fe:6f:45:a3:82:90:af:6b:c6:72:
1f:4d:1b:5c:4d:3e:1a:e2:a9:c8:f6:9e:b7:17:c1:
62:60:6c:6f:80:cd:ef:bb:d8:d4:35:96:0d:4d:c9:
52:11:eb:b1:57:c7:b5:41:38:e9:7a:ea:8b:e2:0d:
5c:fa:ab:3e:52:fd:81:b2:f5:f2:b9:a9:05:6a:4e:
91:1d:79:12:87:c7:36:c1:82:10:55:9f:25:92:77:
04:f2:c1:fb:c6:c9:e4:c1:5c:f9:8e:9f:ea:9f:4c:
15:a7:8d:ed:5a:6f:1e:e9:17:31:3b:01:83:4a:73:
04:bf:6d:57:8a:e0:85:b1:67:04:fb:b1:5e:67:55:
f2:9e:6f:3c:db:e2:20:dc:e6:39:7d:dc:25:21:c8:
62:eb:53:eb:b7:c6:df:a4:26:fa:b2:e7:b4:6c:db:
39:0e:91:5a:f8:02:dd:45:8b:d1:4b:20:14:88:ca:
16:ae:92:c4:c7:2f:0a:92:46:88:8c:49:24:c0:4b:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:88:35:66:56:13:A6:02:BD:34:26:13:F4:B3:59:50:54:FD:03:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/d8cc2e31-b413-3162-b5d3-4268562161d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.crl
X509v3 Authority Key Identifier:
keyid:31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
sbgp-ipAddrBlock: critical
IPv4:
149.116.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:43:0b:b9:17:3d:de:f5:bf:dc:18:4d:95:67:61:11:55:8b:
c9:f9:ea:ce:69:77:a3:d3:e9:14:78:1b:e5:41:48:79:bf:2a:
9d:92:5c:30:25:5e:3a:9d:0e:fe:84:c7:df:63:53:79:1f:c1:
fc:2b:c1:b0:90:31:5f:b5:51:cd:8e:f5:1c:c8:dc:d9:8d:a6:
f4:1c:98:9a:9d:1a:62:5e:1b:fd:f5:57:94:2b:01:ae:51:6c:
62:35:68:7e:15:9f:51:a3:4b:88:a1:c3:8e:ab:7c:69:5f:97:
84:e0:c7:42:19:87:b7:29:5b:4a:47:dd:ea:01:06:71:a5:fa:
6d:f2:c6:59:de:4a:3e:37:a8:13:4d:69:03:b6:69:75:7b:13:
d9:f1:de:25:27:ab:1c:a7:d0:e3:e8:41:b2:2c:70:4c:a0:f4:
99:49:16:f8:f4:09:57:82:c0:08:b7:39:c7:3e:5a:cb:00:b8:
ba:05:65:77:cb:44:f5:6a:23:74:25:6e:39:7a:c1:f5:11:3d:
42:2d:ef:65:c4:fa:2b:d8:b0:88:3e:b2:08:f7:cf:7f:43:f0:
da:54:bd:81:53:32:5d:7f:2b:fc:f9:64:32:93:f5:d2:98:3b:
cd:ea:64:56:ea:61:d6:ce:2f:33:a4:c3:e0:ba:1b:c0:22:13:
fd:f9:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 15:58:44 2024 by rpki-client on console-fra.rpki-client.org