Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
File: 67701918-208f-334d-8a27-2895fe2771e3.roa (raw, json)
Hash identifier: t2D7oO7QJ0m7zxht2/hPdVr8kUVOwdNmG614wDo5tsI=
Subject key identifier: F5:50:3E:C3:09:48:72:77:6D:34:4D:22:72:C7:3E:C5:67:4A:B0:64
Certificate issuer: /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial: 010D0C9F43285846D4755486220EB2A7CB5958EC
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
Signing time: Sat 10 Aug 2024 13:00:39 +0000
ROA not before: Sat 10 Aug 2024 13:00:39 +0000
ROA not after: Fri 08 Nov 2024 14:00:39 +0000
asID: 212219
IP address blocks: 216.252.218.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d4:75:54:86:22:0e:b2:a7:cb:59:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Validity
Not Before: Aug 10 13:00:39 2024 GMT
Not After : Nov 8 14:00:39 2024 GMT
Subject: CN=33bca66b-450a-41a8-9d97-4fafc11302fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:9a:ab:f0:f4:25:41:04:b7:c9:05:f1:55:
4b:72:de:83:14:69:4b:93:c1:ac:75:5a:1a:23:67:
b5:be:2e:8f:44:e1:82:f8:5c:4a:5d:3a:dd:ca:33:
60:2b:00:7f:a1:de:17:40:06:78:e8:dd:b4:5c:27:
86:19:07:6f:ca:be:0a:87:86:88:1c:db:c3:1f:41:
1f:39:d6:3c:85:99:0f:78:9d:6a:71:8c:de:f2:13:
9a:fe:bb:d0:0e:20:39:f9:25:8d:53:d7:0a:10:98:
cc:3d:5a:0b:16:68:08:e6:ab:71:ac:d4:d7:28:a3:
2a:a9:3e:09:d3:ee:db:3d:94:33:b4:65:92:d1:31:
9c:42:b7:74:06:0c:d0:38:31:38:e0:7c:f3:7c:7b:
0b:ff:42:2c:e7:a7:e5:fb:a8:ae:28:eb:e2:cd:70:
a7:e0:3f:d9:71:6c:35:b3:6e:f9:21:bf:cc:23:ad:
54:ea:b5:07:96:1d:ed:72:78:85:79:7b:bf:19:27:
98:28:98:a7:45:09:a2:ca:d1:7d:cb:74:6c:70:56:
b1:02:ea:7f:35:ae:71:ab:33:f7:54:c8:b5:f3:ae:
d6:d4:b1:f1:9e:61:98:83:4d:6d:ff:b2:78:c7:67:
1a:f9:a3:1f:b1:a9:ff:54:d8:78:a6:ff:af:d0:e8:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:50:3E:C3:09:48:72:77:6D:34:4D:22:72:C7:3E:C5:67:4A:B0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/67701918-208f-334d-8a27-2895fe2771e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl
X509v3 Authority Key Identifier:
keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:30:d9:62:9a:fa:c8:1e:70:f5:fd:c7:03:4c:1a:89:fe:47:
ca:23:3b:fa:31:fd:9f:11:63:c9:e0:b9:67:9d:53:f7:60:a4:
16:a1:5e:40:92:14:d8:08:3b:c3:e1:9e:82:34:f8:cb:72:5e:
a9:9b:92:ef:fb:79:0f:6d:29:26:24:ca:e4:d1:56:e7:fc:5c:
5e:70:da:e7:8f:37:12:2e:1b:b8:5e:91:62:10:e0:20:0f:41:
64:eb:d2:71:41:c6:ff:df:36:42:d6:d3:83:6e:16:92:43:f0:
6f:d2:52:ab:54:8c:a4:69:65:a4:1f:d9:28:b5:6a:80:19:5c:
0e:7a:8a:81:ad:97:59:bd:6b:e0:4c:f8:7b:3f:f2:ae:d5:a8:
bf:de:83:91:a5:2b:a9:fa:95:18:20:11:57:2b:8b:44:61:8b:
bf:f9:a0:d5:d9:d6:6c:69:68:bd:1a:83:51:23:87:c0:2f:55:
b6:36:7e:eb:51:44:74:5b:fd:64:0f:86:93:e3:1b:ef:c4:55:
f2:22:c1:51:c7:79:fd:51:29:1b:bd:db:5b:c6:16:b3:f8:cd:
fa:25:63:65:a2:8d:70:ad:be:13:93:34:71:2c:3a:23:01:e1:
03:2d:2a:1d:40:b2:ef:78:c8:1d:c1:64:2a:26:f0:b5:2b:50:
b4:0d:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 15:58:44 2024 by rpki-client on console-fra.rpki-client.org