Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/2db77fe9-383c-3945-8b08-7163b1c04057.roa
File: 2db77fe9-383c-3945-8b08-7163b1c04057.roa (raw, json)
Hash identifier: xBlY8NlWv/MNVBCfSNfU6ih1QWROIFhW66QJDgug7so=
Subject key identifier: 1A:05:B6:E4:9F:67:24:A5:E6:B3:57:3F:8E:A4:94:61:27:63:B5:88
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285846981D3BFA30EA0E4D9037D000
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/2db77fe9-383c-3945-8b08-7163b1c04057.roa
Signing time: Fri 19 Jul 2024 22:14:47 +0000
ROA not before: Fri 19 Jul 2024 22:14:47 +0000
ROA not after: Thu 17 Oct 2024 22:14:47 +0000
asID: 55154
IP address blocks: 64.188.29.0/24 maxlen: 24
66.63.165.0/24 maxlen: 24
66.63.170.0/24 maxlen: 24
66.63.182.0/24 maxlen: 24
67.215.228.0/24 maxlen: 24
67.215.248.0/24 maxlen: 24
72.11.138.0/24 maxlen: 24
96.44.169.0/24 maxlen: 24
104.129.23.0/24 maxlen: 24
155.94.191.0/24 maxlen: 24
155.94.221.0/24 maxlen: 24
155.94.237.0/24 maxlen: 24
155.94.246.0/24 maxlen: 24
161.129.69.0/24 maxlen: 24
167.160.165.0/24 maxlen: 24
192.161.63.0/24 maxlen: 24
204.44.104.0/24 maxlen: 24
204.152.205.0/24 maxlen: 24
204.152.209.0/24 maxlen: 24
209.54.98.0/24 maxlen: 24
209.54.99.0/24 maxlen: 24
209.54.108.0/24 maxlen: 24
216.144.231.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:98:1d:3b:fa:30:ea:0e:4d:90:37:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jul 19 22:14:47 2024 GMT
Not After : Oct 17 22:14:47 2024 GMT
Subject: CN=e7d54134-7919-493e-be65-fe0718914b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:4c:e3:1c:c4:de:ee:33:70:74:e7:82:e7:
23:60:31:26:89:f6:a8:bf:66:1a:cc:d8:6e:e7:5c:
66:15:ee:c8:9a:03:60:f3:bf:91:8a:ff:ee:cb:ff:
5c:dc:2f:e2:a8:bd:38:17:bb:ff:a9:cf:7b:d1:47:
49:ed:01:c7:95:de:39:23:2d:60:65:aa:7d:c2:33:
32:5c:b1:c7:ac:0a:a4:76:38:e3:ff:10:3a:cf:6b:
80:11:07:60:e9:d8:e9:3e:26:e6:7b:82:01:2a:b8:
34:5c:99:94:a6:35:8e:ac:7d:18:57:af:fc:7c:d2:
4d:1c:c7:0e:10:5a:38:80:c7:a5:5d:71:bd:97:9c:
bd:a9:d4:b0:9a:45:ac:23:23:c0:82:5c:41:35:50:
c0:e8:7c:b9:d6:dd:e6:35:c3:87:64:0e:51:34:51:
8a:bd:05:80:b1:46:09:ef:d6:42:10:c7:84:50:fa:
78:ae:df:af:b0:48:48:ad:49:34:74:1b:df:1b:65:
18:ae:f4:88:49:bd:bb:9e:36:df:39:ab:17:ea:27:
ec:d0:ab:2f:38:2f:34:2d:43:d6:37:e3:41:76:c8:
5d:f8:a7:47:2d:c8:2c:e5:21:f5:1a:49:92:f8:4c:
7f:bd:94:c7:f9:2d:64:b8:b8:b5:4f:f8:f6:d3:b7:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:B6:E4:9F:67:24:A5:E6:B3:57:3F:8E:A4:94:61:27:63:B5:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/2db77fe9-383c-3945-8b08-7163b1c04057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.188.29.0/24
66.63.165.0/24
66.63.170.0/24
66.63.182.0/24
67.215.228.0/24
67.215.248.0/24
72.11.138.0/24
96.44.169.0/24
104.129.23.0/24
155.94.191.0/24
155.94.221.0/24
155.94.237.0/24
155.94.246.0/24
161.129.69.0/24
167.160.165.0/24
192.161.63.0/24
204.44.104.0/24
204.152.205.0/24
204.152.209.0/24
209.54.98.0/23
209.54.108.0/24
216.144.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:da:93:94:18:26:5f:ca:ce:cc:04:0e:54:22:3a:a3:dd:ea:
67:31:05:1d:33:9c:2e:fb:b8:aa:6d:5c:f8:5c:89:7f:24:43:
d7:6c:a2:1f:8b:0a:6a:a3:d2:e4:ee:a9:3d:5f:74:d2:6d:f9:
0b:5f:c8:ce:8c:6a:15:da:99:e3:62:ea:b4:20:46:ae:a4:8a:
a8:61:9d:0f:41:ce:bf:ca:bc:9c:d9:ef:17:37:c2:4c:15:ad:
56:34:90:45:98:81:5e:a8:24:fc:56:bc:a0:3b:b2:35:e2:01:
8b:5e:8d:74:ef:a1:85:1c:be:34:c6:a2:4e:14:e0:f3:e0:14:
8b:8e:62:28:d9:ac:36:f4:4c:a8:ca:d3:af:df:69:f2:1e:69:
63:cd:b3:62:a5:ee:f8:d4:e1:85:34:43:46:d0:62:e7:4a:ce:
d7:12:a0:f9:c3:5f:f1:ab:cd:06:67:61:63:55:e2:33:e2:29:
b8:63:c9:16:2e:49:85:cd:7b:cc:01:c1:4e:ee:78:55:ac:18:
8e:2d:01:7d:2b:1f:87:df:7c:31:14:b4:95:e7:52:e4:20:81:
9a:98:81:70:39:5e:b2:d8:6a:7c:cf:4b:91:23:85:12:9f:89:
a0:74:da:77:69:48:ce:bd:70:d8:9f:dc:a1:dd:e0:ad:11:a4:
ed:3a:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:14 2024 by rpki-client on console-ams.rpki-client.org