Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/0a8e478e-8b73-3990-bc36-108093a83571.roa
File: 0a8e478e-8b73-3990-bc36-108093a83571.roa (raw, json)
Hash identifier: mthNxTx9xqngqdH5/s3/RxdJWHwecv0YWGAzZPh/UoI=
Subject key identifier: 46:B7:47:52:76:CB:14:37:6D:3E:40:98:53:75:15:CD:82:63:10:FF
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285846E26AC704DC4FCD047C022E80
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/0a8e478e-8b73-3990-bc36-108093a83571.roa
Signing time: Thu 15 Aug 2024 13:00:40 +0000
ROA not before: Thu 15 Aug 2024 13:00:40 +0000
ROA not after: Wed 13 Nov 2024 14:00:40 +0000
asID: 8100
IP address blocks: 64.188.22.0/23 maxlen: 24
66.63.168.0/23 maxlen: 24
66.212.22.0/24 maxlen: 24
72.11.156.0/23 maxlen: 24
104.223.34.0/23 maxlen: 24
104.223.80.0/23 maxlen: 24
155.94.208.0/23 maxlen: 24
155.94.210.0/23 maxlen: 24
161.129.64.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e2:6a:c7:04:dc:4f:cd:04:7c:02:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Aug 15 13:00:40 2024 GMT
Not After : Nov 13 14:00:40 2024 GMT
Subject: CN=dcb34b05-16a1-4b5d-a6ce-e2ed56e3ad06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:82:22:61:72:ba:32:7c:64:0d:0f:15:8e:
05:c3:48:7d:8a:d6:68:66:ce:6a:28:0c:35:1a:00:
0c:e4:b4:a9:3a:be:db:0f:d8:46:99:35:9f:d5:a6:
a1:f9:86:f6:ea:63:2c:b1:9e:50:b8:20:7c:aa:41:
ec:49:0d:1d:52:d4:20:9c:c0:90:da:1d:3b:3d:c3:
f9:08:ec:55:28:10:ab:fd:3d:b2:62:89:7f:51:28:
03:d7:7c:45:20:40:70:ae:2c:02:45:ae:05:17:f5:
ad:13:c7:98:53:33:a2:19:0f:0d:f0:a0:36:58:0d:
45:52:a3:13:de:0b:67:54:60:1c:b3:e4:d4:a0:e7:
2d:5d:39:74:04:14:55:12:6d:9c:5f:d9:bb:97:78:
b7:2b:a3:78:e8:26:1b:3a:e7:e7:cb:9e:05:41:f3:
aa:b1:33:a1:0e:bc:5e:2f:d5:65:be:01:9e:35:88:
92:c7:fa:5d:d8:e9:bc:f8:57:40:40:eb:69:ff:c0:
2d:82:3c:bc:2a:90:56:c6:08:26:fa:1d:bd:4b:86:
71:0f:49:bf:a6:d3:ad:a1:89:22:d4:32:79:77:b4:
89:1d:71:cc:72:9f:32:cf:fc:2e:91:9c:8e:dd:fe:
61:18:22:9a:98:31:e1:24:d5:af:0e:4a:64:51:30:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:47:52:76:CB:14:37:6D:3E:40:98:53:75:15:CD:82:63:10:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/0a8e478e-8b73-3990-bc36-108093a83571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.188.22.0/23
66.63.168.0/23
66.212.22.0/24
72.11.156.0/23
104.223.34.0/23
104.223.80.0/23
155.94.208.0/22
161.129.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b8:cf:b6:fb:7d:bb:bf:2f:e6:b9:6f:35:94:5c:da:c0:70:
47:9a:19:ad:8e:a5:cb:8e:5c:9e:4c:87:45:af:e4:6c:98:4d:
be:ee:70:08:e0:0f:7c:75:08:6f:17:80:9a:3c:06:ff:11:55:
63:fd:81:16:58:04:6c:db:5c:69:d7:c7:5f:a2:be:7e:49:c4:
db:02:25:f6:fa:3b:9f:1d:1c:fe:b3:60:c4:7a:05:71:b8:57:
ae:dd:4d:fc:1c:a6:01:e1:e2:42:20:f4:ab:cf:f2:26:bf:1c:
f8:28:be:af:36:05:3b:0a:18:26:55:d9:54:d6:75:a4:9a:d2:
a9:78:4c:d6:f1:3c:5e:75:0c:a0:5a:8b:b6:e9:71:3d:b8:74:
2e:28:6b:05:f7:e4:22:80:09:3e:87:df:1c:7f:c0:a3:57:a6:
d5:69:83:ef:9b:48:bc:5f:5a:78:92:48:dd:53:e5:c9:da:e2:
65:36:4f:39:c4:d1:1f:88:86:0c:04:0d:1b:66:1a:96:54:4c:
8b:6c:b9:e5:ad:65:22:70:40:9f:78:41:4a:93:7f:19:63:a9:
2a:da:16:21:60:3b:bd:a5:c0:28:b3:34:13:2a:b0:23:dc:68:
5a:d3:46:ff:b6:79:5e:4c:7b:5c:75:b0:4a:8a:ce:ab:b0:29:
56:90:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:14 2024 by rpki-client on console-ams.rpki-client.org