Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa
File: 809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa (raw, json)
Hash identifier: OHUS8wLqR6rHzfoEi2ySHrAsWnBAL1yf/kGC2+2QYqA=
Subject key identifier: 33:77:B4:91:A5:3E:6F:D3:53:F6:C9:01:89:28:10:E9:AD:01:7C:D0
Certificate issuer: /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial: 010D0C9F43285846D4755476F4881EAE5579E9E0
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa
Signing time: Sat 10 Aug 2024 13:00:39 +0000
ROA not before: Sat 10 Aug 2024 13:00:39 +0000
ROA not after: Fri 08 Nov 2024 14:00:39 +0000
asID: 61317
IP address blocks: 216.252.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d4:75:54:76:f4:88:1e:ae:55:79:e9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Validity
Not Before: Aug 10 13:00:39 2024 GMT
Not After : Nov 8 14:00:39 2024 GMT
Subject: CN=3cf078a7-2781-4d0c-b3f2-4e3aad58f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:00:54:b2:f0:53:6d:42:36:16:42:ac:50:
41:48:22:1f:fa:07:66:ab:53:13:95:68:15:68:38:
7f:58:57:b4:a1:91:19:6f:52:21:97:e5:02:3f:1a:
39:29:c8:e4:6c:5d:93:ac:d2:61:47:c2:ac:c7:a4:
ba:40:76:f5:f8:44:d2:6f:38:b1:66:b1:10:a9:7d:
42:5e:73:c2:e9:f9:b3:4e:c9:f3:cb:2a:4b:67:aa:
32:13:7c:89:08:e0:82:03:3d:1c:95:c3:5c:8a:14:
04:68:50:4f:e3:fb:35:33:94:b9:bd:37:47:29:c6:
bd:3f:f0:dc:24:61:6c:61:44:70:e0:fb:44:94:c9:
ed:bd:70:25:50:22:b8:69:b0:54:d4:96:f2:0a:1c:
e9:c2:6a:ce:9f:50:1e:72:86:8c:ae:3e:40:f3:b7:
86:65:e3:39:b0:13:6e:1d:f3:e6:09:78:ab:91:69:
c5:8b:17:37:b4:70:6d:99:b5:c8:60:ba:a1:7f:73:
98:d6:4c:d0:29:19:20:0a:74:a8:ce:ed:a8:a2:fe:
a2:ac:4f:e8:51:35:e8:74:cf:a9:80:f0:c4:f5:ba:
a9:93:00:56:6b:7f:59:09:5b:54:ec:ef:55:8a:96:
25:d4:c4:43:8b:9c:7a:c5:47:3b:7b:cb:22:3c:18:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:B4:91:A5:3E:6F:D3:53:F6:C9:01:89:28:10:E9:AD:01:7C:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl
X509v3 Authority Key Identifier:
keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:da:75:c6:05:85:eb:00:83:e7:29:62:ad:3b:0f:ce:45:db:
f7:b9:1c:1c:21:0a:f6:32:8e:07:40:31:8f:68:d4:21:4b:c8:
c9:0d:0e:46:13:8f:b7:9a:3c:7e:26:0a:e9:ad:a2:0f:3d:89:
32:2c:6c:29:ff:54:bc:1e:d6:2c:38:15:54:9b:c4:43:8f:3f:
3f:8a:d0:25:24:07:73:b7:1c:96:e1:b1:f9:66:6e:e6:3b:3c:
87:50:13:ec:b6:a6:70:6a:4a:7f:75:7d:0a:0b:74:6d:7b:02:
53:f0:07:e4:2d:a1:29:16:23:c0:5c:9a:96:c6:e5:7a:cb:9d:
43:88:2b:21:c1:93:da:28:b1:5a:ee:40:29:f4:dd:ec:67:18:
5c:b8:b8:6b:13:ab:cf:8d:22:b4:f6:14:5a:e6:8a:39:8f:9d:
8d:f9:3c:ae:28:95:48:75:cd:03:2e:7f:0e:c1:28:4c:83:ff:
7b:52:67:56:90:e6:b2:eb:8d:18:ea:0a:92:8e:04:fb:91:21:
06:45:30:01:d9:c6:74:77:4a:22:c1:2f:5e:51:4c:a3:87:29:
4f:0f:59:5f:e7:05:0d:89:f5:43:e7:3b:f2:4f:f0:71:c1:a9:
6f:06:af:47:0c:a6:cb:93:02:f8:a4:e5:0a:f0:6d:e7:dc:9a:
7e:50:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 15:58:44 2024 by rpki-client on console-fra.rpki-client.org