Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/0acf702c-1254-3353-8624-49724f74d07e.roa
File: 0acf702c-1254-3353-8624-49724f74d07e.roa (raw, json)
Hash identifier: eoXQGJApT4Vlly8AUQvzAQU+10pnQapJ97Q+HzZNOrE=
Subject key identifier: 49:20:1A:8D:49:9D:8D:63:86:17:1E:AD:A4:70:13:0A:59:83:00:3B
Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial: 010D0C9F43285842CEFAF5ED30EF39C4492AF260
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/0acf702c-1254-3353-8624-49724f74d07e.roa
Signing time: Mon 07 Aug 2023 18:47:26 +0000
ROA not before: Mon 07 Aug 2023 18:47:26 +0000
ROA not after: Sun 05 Nov 2023 19:47:26 +0000
asID: 18733
IP address blocks: 107.180.192.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ce:fa:f5:ed:30:ef:39:c4:49:2a:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
Validity
Not Before: Aug 7 18:47:26 2023 GMT
Not After : Nov 5 19:47:26 2023 GMT
Subject: CN=9c55c054-d056-42c0-b049-c1094052b485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:eb:81:0f:99:e3:b9:30:b0:ec:b8:16:56:
87:0c:34:dd:8c:76:46:1c:3c:e6:b0:9f:b9:74:63:
e4:c4:f1:ea:ed:6e:6e:c6:c5:bb:50:86:83:46:14:
0a:a6:50:2f:3d:c0:91:40:65:07:bd:34:fc:c4:97:
88:90:3b:08:f0:ca:4e:5f:6f:75:56:c4:6f:e9:76:
5c:52:88:8d:11:43:a1:cc:db:5d:51:41:5d:8d:c9:
c2:fe:78:49:ff:19:7f:43:38:ba:83:2a:33:25:6c:
25:49:1c:e0:1c:f6:a9:e4:aa:62:27:de:5c:01:29:
d2:e0:33:fd:a4:77:22:17:1c:ce:4b:3a:eb:09:6f:
44:a1:1c:2c:ab:0d:a5:af:c4:96:17:92:c7:00:c2:
41:19:86:b9:2e:c1:c7:a7:a0:26:ee:e6:06:4e:16:
8f:8c:76:81:ee:33:76:08:43:04:69:f2:49:0f:ef:
31:8e:8e:ea:e7:64:eb:85:34:d0:fe:ee:3d:a1:c8:
77:07:99:9b:a5:3d:a3:57:2f:cb:d8:a3:c8:e6:20:
53:bb:5f:0a:39:77:c6:a5:09:bd:d8:d8:73:c7:63:
cf:e2:b8:1d:8e:00:74:4a:75:6b:21:e7:bb:ce:1a:
42:a8:48:22:0f:c1:1c:b7:e6:04:06:39:fe:d6:79:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:1A:8D:49:9D:8D:63:86:17:1E:AD:A4:70:13:0A:59:83:00:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/0acf702c-1254-3353-8624-49724f74d07e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
X509v3 Authority Key Identifier:
keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.180.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:36:fb:33:af:8d:de:41:38:c0:6b:7b:ab:04:7a:57:88:b4:
53:04:cf:a4:19:fb:d1:72:4f:e7:d9:15:2e:5f:5f:fc:44:dc:
f9:ad:05:a5:16:e7:84:82:63:5d:6d:85:2d:39:db:9d:31:1a:
dc:10:df:ab:48:d5:71:99:8b:65:68:64:59:f4:86:92:6f:63:
e3:b6:42:bd:b6:f0:ba:0e:99:2b:9a:1e:47:4c:fb:de:c9:a6:
26:2d:f2:4f:aa:a6:c7:c7:04:a9:2f:11:bf:5a:01:80:a8:02:
d0:7a:79:93:8c:db:6f:2c:69:6e:d1:c7:3f:b8:f8:ba:19:6d:
64:ae:13:0c:a1:86:f5:3a:91:f8:96:f0:87:01:33:81:5a:6c:
b8:36:d1:44:d3:3e:90:94:40:c4:cc:4f:37:d3:1b:79:c4:48:
cd:db:8b:0d:89:d2:a2:a5:8a:ef:7b:16:a7:10:d5:d3:3f:d2:
60:87:a1:26:7a:6a:3c:1f:cb:1d:eb:5d:d6:22:bf:d1:c2:3c:
68:27:40:a4:2d:f8:27:61:d1:d9:7a:23:61:2f:e8:88:44:23:
1e:c2:d2:84:cc:38:b7:42:27:6e:bd:f6:14:63:ac:80:66:4d:
4a:5b:c4:d1:51:dc:b7:ea:d0:4d:dc:f5:dc:b7:c1:1a:ab:01:
c1:7e:84:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELO+vXtMO85xEkq8mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm
NjhiMB4XDTIzMDgwNzE4NDcyNloXDTIzMTEwNTE5NDcyNlowLzEtMCsGA1UEAxMk
OWM1NWMwNTQtZDA1Ni00MmMwLWIwNDktYzEwOTQwNTJiNDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5vrgQ+Z47kwsOy4FlaHDDTdjHZGHDzmsJ+5
dGPkxPHq7W5uxsW7UIaDRhQKplAvPcCRQGUHvTT8xJeIkDsI8MpOX291VsRv6XZc
UoiNEUOhzNtdUUFdjcnC/nhJ/xl/Qzi6gyozJWwlSRzgHPap5KpiJ95cASnS4DP9
pHciFxzOSzrrCW9EoRwsqw2lr8SWF5LHAMJBGYa5LsHHp6Am7uYGThaPjHaB7jN2
CEMEafJJD+8xjo7q52TrhTTQ/u49och3B5mbpT2jVy/L2KPI5iBTu18KOXfGpQm9
2Nhzx2PP4rgdjgB0SnVrIee7zhpCqEgiD8Ect+YEBjn+1nkklQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkgGo1JnY1jhhceraRwEwpZgwA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0
Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvMGFjZjcwMmMtMTI1NC0z
MzUzLTg2MjQtNDk3MjRmNzRkMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1
OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0
ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi
ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFa7TAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGE2+zOvjd5BOMBre6sEeleItFMEz6QZ+9FyT+fZFS5fX/xE3PmtBaUW
54SCY11thS05250xGtwQ36tI1XGZi2VoZFn0hpJvY+O2Qr228LoOmSuaHkdM+97J
piYt8k+qpsfHBKkvEb9aAYCoAtB6eZOM228saW7Rxz+4+LoZbWSuEwyhhvU6kfiW
8IcBM4FabLg20UTTPpCUQMTMTzfTG3nESM3biw2J0qKliu97FqcQ1dM/0mCHoSZ6
ajwfyx3rXdYiv9HCPGgnQKQt+Cdh0dl6I2Ev6IhEIx7C0oTMOLdCJ2699hRjrIBm
TUpbxNFR3Lfq0E3c9dy3wRqrAcF+hGg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:24 2024 by rpki-client on console-ams.rpki-client.org