Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/311803d9-1e77-332c-bf28-cea56c5852cd.roa
File: 311803d9-1e77-332c-bf28-cea56c5852cd.roa (raw, json)
Hash identifier: qalvrg+3YnH2vuorlnt3TxiV3hPQZg6sE8ECBnsRnlM=
Subject key identifier: 82:C7:CC:C6:AE:B4:36:51:51:03:D6:C0:11:38:41:94:7A:17:01:EE
Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial: 010D0C9F43285842CEFB364AE5312A7E332E0870
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/311803d9-1e77-332c-bf28-cea56c5852cd.roa
Signing time: Mon 07 Aug 2023 18:47:57 +0000
ROA not before: Mon 07 Aug 2023 18:47:57 +0000
ROA not after: Sun 05 Nov 2023 19:47:57 +0000
asID: 701
IP address blocks: 107.180.192.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ce:fb:36:4a:e5:31:2a:7e:33:2e:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
Validity
Not Before: Aug 7 18:47:57 2023 GMT
Not After : Nov 5 19:47:57 2023 GMT
Subject: CN=f12b0b00-427d-4fe5-80df-757491a345f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:9c:b7:50:ed:62:04:c9:78:fe:c7:97:5c:
8f:f1:37:bf:19:87:55:01:c2:22:a4:2e:39:25:94:
00:31:7f:59:8b:02:fe:ac:14:f8:78:99:00:5e:0e:
bb:e1:9f:ba:8f:7b:3b:6b:c2:6d:b2:a3:ef:e0:66:
7e:52:81:c9:0e:fb:4f:12:af:4c:35:79:a8:c9:7e:
3a:13:01:ba:4a:7a:ff:a8:1d:dd:de:d8:a2:22:ef:
58:1e:5b:52:0f:a5:9b:d8:8d:4d:3f:e7:66:b6:aa:
2d:9e:09:3a:eb:cc:49:94:50:23:bf:cf:49:d3:7d:
f7:2f:5e:15:22:47:91:20:e1:1c:91:ef:73:e0:15:
77:01:ba:eb:1e:12:2a:72:f4:55:d2:f9:2a:3f:f1:
d3:54:f9:be:b2:ea:3b:d1:c0:b7:ca:1a:6e:b6:9e:
af:71:11:f7:a9:29:14:6e:02:f3:e3:da:b7:50:99:
a1:a6:dd:07:06:3f:5f:5e:d4:38:64:9e:23:f0:2f:
8c:4d:41:d4:de:f4:02:ba:f0:b6:a3:5c:00:16:c9:
c0:98:fd:b6:8f:7e:45:fa:fe:8a:c8:1f:95:ba:84:
bd:e0:b7:c6:92:f4:4c:96:40:37:28:d3:28:7a:6d:
c9:d9:4c:07:2e:01:f0:37:09:f7:28:0e:55:9a:78:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:CC:C6:AE:B4:36:51:51:03:D6:C0:11:38:41:94:7A:17:01:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/311803d9-1e77-332c-bf28-cea56c5852cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
X509v3 Authority Key Identifier:
keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.180.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:cf:76:97:86:12:93:80:9c:5a:df:e7:0b:ff:a5:42:22:d2:
1f:11:70:0a:fd:a1:f3:a9:79:33:5d:2b:ca:0b:da:70:d0:f8:
0e:07:5a:06:53:26:95:f9:84:d3:56:8c:ef:33:11:cc:70:62:
77:aa:59:7b:43:df:40:ba:22:b3:d6:a4:90:a9:fe:d7:ab:8b:
3a:db:b7:d7:73:1e:8a:80:b7:78:5d:7e:81:4f:bd:7e:c5:63:
27:75:89:1b:98:93:e2:39:6e:fa:eb:7f:fb:c3:fd:51:dd:4d:
04:6c:c2:15:e8:2b:5b:df:9f:31:37:51:3e:ad:8d:2f:d3:7c:
ef:66:cb:9d:5b:a7:f2:84:64:b3:b8:32:6d:9b:f7:5f:91:ba:
85:3c:8f:41:c2:45:47:ad:a9:81:9b:81:8a:1d:2d:96:5e:ce:
7f:2a:81:80:36:84:8a:82:a9:a8:d5:97:ba:1d:31:88:01:10:
08:b6:d2:e7:b2:4d:2c:1d:e3:7a:49:d2:cc:21:03:92:08:17:
1a:a8:60:ee:0f:3b:b3:c9:03:18:93:43:d4:87:8f:d9:a4:80:
e3:6f:35:03:83:3a:e1:56:55:50:ec:8f:e1:2a:30:8c:83:03:
c3:42:4e:18:1e:6e:61:ac:1c:18:2c:b5:46:0c:12:6e:b9:fb:
bd:55:39:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELO+zZK5TEqfjMuCHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm
NjhiMB4XDTIzMDgwNzE4NDc1N1oXDTIzMTEwNTE5NDc1N1owLzEtMCsGA1UEAxMk
ZjEyYjBiMDAtNDI3ZC00ZmU1LTgwZGYtNzU3NDkxYTM0NWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLqct1DtYgTJeP7Hl1yP8Te/GYdVAcIipC45
JZQAMX9ZiwL+rBT4eJkAXg674Z+6j3s7a8JtsqPv4GZ+UoHJDvtPEq9MNXmoyX46
EwG6Snr/qB3d3tiiIu9YHltSD6Wb2I1NP+dmtqotngk668xJlFAjv89J0333L14V
IkeRIOEcke9z4BV3AbrrHhIqcvRV0vkqP/HTVPm+suo70cC3yhputp6vcRH3qSkU
bgLz49q3UJmhpt0HBj9fXtQ4ZJ4j8C+MTUHU3vQCuvC2o1wAFsnAmP22j35F+v6K
yB+VuoS94LfGkvRMlkA3KNMoem3J2UwHLgHwNwn3KA5VmniXYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILHzMautDZRUQPWwBE4QZR6FwHuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0
Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvMzExODAzZDktMWU3Ny0z
MzJjLWJmMjgtY2VhNTZjNTg1MmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1
OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0
ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi
ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFa7TAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvPdpeGEpOAnFrf5wv/pUIi0h8RcAr9ofOpeTNdK8oL2nDQ+A4HWgZT
JpX5hNNWjO8zEcxwYneqWXtD30C6IrPWpJCp/terizrbt9dzHoqAt3hdfoFPvX7F
Yyd1iRuYk+I5bvrrf/vD/VHdTQRswhXoK1vfnzE3UT6tjS/TfO9my51bp/KEZLO4
Mm2b91+RuoU8j0HCRUetqYGbgYodLZZezn8qgYA2hIqCqajVl7odMYgBEAi20uey
TSwd43pJ0swhA5IIFxqoYO4PO7PJAxiTQ9SHj9mkgONvNQODOuFWVVDsj+EqMIyD
A8NCThgebmGsHBgstUYMEm65+71VOYc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:05 2024 by rpki-client on console-fra.rpki-client.org