Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/133c85ac-f432-353b-a2ad-93f4b78aeacc.roa
File: 133c85ac-f432-353b-a2ad-93f4b78aeacc.roa (raw, json)
Hash identifier: oBe6FJL9U4A57iPODhvrZyoalWVJV/i13BNXi5Ud/A0=
Subject key identifier: F2:92:C7:A6:AC:00:D3:42:35:6E:0F:43:5F:76:8E:B9:A5:46:69:DD
Certificate issuer: /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial: 010D0C9F4328583FD377723766DEB62D35CFEF80
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/133c85ac-f432-353b-a2ad-93f4b78aeacc.roa
Signing time: Fri 11 Jun 2021 14:17:03 +0000
ROA not before: Fri 11 Jun 2021 14:17:03 +0000
ROA not after: Sun 09 Feb 2025 05:00:00 +0000
asID: 19905
IP address blocks: 64.74.225.0/24 maxlen: 24
69.25.152.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d3:77:72:37:66:de:b6:2d:35:cf:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Validity
Not Before: Jun 11 14:17:03 2021 GMT
Not After : Feb 9 05:00:00 2025 GMT
Subject: CN=3d5ac843-6ab5-43b0-b5bf-1f4a18eca2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:64:07:07:db:e1:0e:76:f5:8f:57:f4:65:
77:da:09:d1:e9:a8:c1:92:74:4d:d6:55:a0:68:e2:
fd:22:c6:2f:de:64:30:c0:f9:f8:59:7f:59:44:e9:
57:fd:1c:10:33:dd:10:9b:95:48:25:f3:c5:f2:93:
79:41:89:3d:c3:3f:0c:df:09:b7:a0:9b:0a:d2:0f:
16:5c:87:b3:8f:b2:5a:4d:6f:c1:cf:f6:c6:5b:90:
75:9c:f8:f1:a7:44:33:3f:06:40:a2:40:93:7f:dc:
e9:d6:3a:09:c3:d2:b9:c4:a2:7d:f7:f1:af:d0:f8:
9e:70:b4:0f:62:b8:2c:60:5f:ca:71:ac:ee:fa:26:
d8:13:f8:12:16:06:c2:47:5a:29:06:4a:55:e4:56:
54:26:c1:ea:59:3f:30:72:1e:31:a6:90:81:28:0b:
28:ee:ca:5c:a4:34:78:d7:34:8c:e7:7b:47:77:6d:
d6:4b:fc:08:d2:6f:22:bf:11:cd:3e:dc:ea:ca:1c:
d7:a8:2e:4d:f0:74:e4:05:dc:bf:9d:a8:26:df:29:
38:88:3d:ef:4f:ef:73:a2:47:44:00:6a:2d:27:fb:
64:c8:9c:48:32:3d:e1:cf:3e:84:ea:29:9b:d2:c1:
70:d1:c0:f1:7a:a4:11:ea:ae:5d:ee:57:ae:bd:56:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:92:C7:A6:AC:00:D3:42:35:6E:0F:43:5F:76:8E:B9:A5:46:69:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/133c85ac-f432-353b-a2ad-93f4b78aeacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
X509v3 Authority Key Identifier:
keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
sbgp-ipAddrBlock: critical
IPv4:
64.74.225.0/24
69.25.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:e5:1a:5f:2f:35:ed:cb:b4:83:1b:65:66:8b:e8:2f:7e:ae:
8a:fd:d1:e0:b9:b6:ed:86:b1:64:32:04:3d:45:a8:f8:66:23:
3b:6e:88:c0:f3:b4:a5:d8:69:75:27:1c:31:37:9a:43:07:41:
23:41:52:83:51:0b:4a:23:40:7a:5b:a5:f2:f7:d8:ce:f2:60:
80:74:08:9f:a8:09:8b:f5:7b:f8:8f:51:62:3f:cb:a6:c9:17:
2a:c0:ab:bb:ba:a4:63:67:f8:21:9a:82:4f:2b:96:0e:1d:07:
3f:53:57:10:e0:80:89:15:a8:67:ae:05:34:2a:b1:22:8a:9b:
21:d7:02:8a:dd:2c:f4:24:50:59:d0:e3:0e:d4:7d:03:3b:e5:
ee:8d:18:f1:e2:8e:b5:03:6f:3e:9a:0d:43:cf:c3:5b:5f:89:
ee:f2:0a:4c:8e:0d:19:fb:01:01:01:98:9f:3c:80:25:85:7f:
6e:2d:70:1e:81:e6:a2:d6:17:fa:37:0a:7b:46:5d:66:42:60:
32:08:7e:6e:af:0b:a8:71:01:d3:0b:59:bd:55:90:1e:ab:32:
c6:f9:7e:1a:22:0c:73:5e:29:96:22:46:49:b9:fc:95:80:bb:
fd:11:24:86:a7:fe:8e:2e:f3:90:61:17:ae:10:29:13:59:44:
85:7c:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org