Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/499dd652-0ad8-3734-9a41-0b37cf3722f4.roa
File: 499dd652-0ad8-3734-9a41-0b37cf3722f4.roa (raw, json)
Hash identifier: i9dGx8neZDEBeZYRQgqmdt9dYSeVZD1OVcrBtp87gLs=
Subject key identifier: 65:87:C6:C6:6B:02:63:13:13:89:36:99:9F:F5:33:A5:E0:54:63:70
Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial: 010D0C9F4328583F61A03B2E40EC2C2F84720280
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/499dd652-0ad8-3734-9a41-0b37cf3722f4.roa
Signing time: Wed 13 Jan 2021 14:53:00 +0000
ROA not before: Wed 13 Jan 2021 14:53:00 +0000
ROA not after: Sun 30 Dec 2029 05:00:00 +0000
asID: 27343
IP address blocks: 149.234.226.0/23 maxlen: 24
149.234.232.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:61:a0:3b:2e:40:ec:2c:2f:84:72:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Validity
Not Before: Jan 13 14:53:00 2021 GMT
Not After : Dec 30 05:00:00 2029 GMT
Subject: CN=8857d566-07fb-403c-94b0-62f9c16233ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:17:ad:70:40:f7:a8:d5:a9:64:f5:29:1c:
89:79:7c:bf:2c:70:b8:19:c6:75:29:84:1c:cf:1c:
a0:0c:bd:18:0f:bc:21:e8:f5:c6:9f:a7:34:6e:62:
5d:50:4d:e7:b7:fb:f2:95:d3:3b:dc:38:79:ba:c4:
d4:4d:dc:ed:dc:78:21:89:c9:ed:7a:74:b8:97:95:
20:84:20:78:96:06:48:0c:46:6f:ba:b7:70:1f:40:
55:cc:48:76:d3:6c:15:e9:34:c7:83:90:9e:06:b4:
80:d7:71:37:7c:69:90:44:74:f6:7b:e4:d3:f9:3e:
39:7c:57:45:aa:cb:10:a0:a3:7d:12:22:5a:1e:5f:
a4:a9:ef:97:ba:4c:fd:b9:f2:73:7a:d6:22:40:00:
78:fd:b0:48:72:60:ff:23:01:f5:dc:ca:d5:89:c7:
63:c3:ab:00:b3:95:bb:a5:6b:3d:f6:70:af:89:ec:
34:f0:fd:f2:aa:f7:93:f5:15:ac:40:12:d3:57:58:
b5:e1:8b:8e:a5:9b:5b:6a:07:f7:9e:53:ce:17:00:
26:91:ed:90:7b:5d:f8:59:f2:00:9c:41:2d:d7:8e:
69:bd:5e:b5:57:1c:5e:03:c1:05:37:10:cf:ce:a4:
21:2e:1d:f6:6e:ec:ed:37:a0:63:e4:83:83:2a:1e:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:87:C6:C6:6B:02:63:13:13:89:36:99:9F:F5:33:A5:E0:54:63:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/499dd652-0ad8-3734-9a41-0b37cf3722f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
X509v3 Authority Key Identifier:
keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
sbgp-ipAddrBlock: critical
IPv4:
149.234.226.0/23
149.234.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:a6:82:ef:df:62:eb:bd:7d:da:ce:44:98:b4:2b:1f:bc:0f:
76:8b:34:fe:ae:a0:86:68:66:81:9e:de:f8:62:ab:cf:5b:eb:
af:6c:e4:d7:bc:a4:65:e7:48:22:4f:11:4a:3e:be:17:b0:8d:
36:b1:04:77:12:91:87:64:20:16:83:85:2d:ee:a6:52:6e:ac:
c0:ba:d3:6c:5f:06:1c:8a:39:c8:23:f5:2d:43:e4:f9:65:4c:
38:96:b9:37:d8:e9:1b:0a:4d:8c:a5:ef:70:af:0f:54:4b:7f:
ff:46:b4:2f:64:b0:6e:1d:94:44:28:f4:18:4d:bc:3c:f2:9e:
ab:24:33:27:d7:85:29:12:56:99:18:a9:fa:bf:41:34:c2:d1:
e1:cf:53:0e:db:5c:73:dc:f0:d9:a8:ac:2f:f9:02:ee:60:03:
be:af:0c:5d:a4:b3:aa:c9:b3:5e:c1:74:f8:de:9f:be:59:1c:
26:12:d2:1b:35:c1:e9:ee:94:23:5f:04:c4:eb:c7:a5:38:f4:
3b:01:34:20:0f:97:a7:04:73:7f:db:c9:4e:9a:8f:49:69:6c:
8f:a3:10:3a:c1:42:da:9b:6e:3e:a8:72:d6:93:00:dd:37:12:
38:2e:2e:70:53:cc:a7:bd:e7:9a:f3:c5:a0:12:43:a1:12:82:
7c:b8:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org