Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/2d9c230a-21c6-3b05-bdb9-7c36f04ef045.roa
File: 2d9c230a-21c6-3b05-bdb9-7c36f04ef045.roa (raw, json)
Hash identifier: dKRxGIemR+vn7cH5jA5nkxgzHfeo8pwatA9Wy6aiN9g=
Subject key identifier: 39:2F:41:39:DE:00:A9:60:C0:58:67:32:C9:60:40:D7:81:07:06:AC
Certificate issuer: /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial: 010D0C9F4328583C1966E6545E3AF9E53D9DA580
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/2d9c230a-21c6-3b05-bdb9-7c36f04ef045.roa
Signing time: Fri 11 Jun 2021 04:00:00 +0000
ROA not before: Fri 11 Jun 2021 04:00:00 +0000
ROA not after: Mon 04 Mar 2024 05:00:00 +0000
asID: 13896
IP address blocks: 66.151.176.0/24 maxlen: 24
70.42.233.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:19:66:e6:54:5e:3a:f9:e5:3d:9d:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Validity
Not Before: Jun 11 04:00:00 2021 GMT
Not After : Mar 4 05:00:00 2024 GMT
Subject: CN=21403202-7ddd-4bf8-88d8-a4e2203b5d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:58:c2:14:e3:6e:52:bd:f9:03:01:82:33:
23:3c:42:25:59:84:0c:e5:34:e7:6a:1f:db:e9:7f:
9d:71:87:1b:9e:40:84:d7:6e:71:c6:03:93:d6:d7:
89:d7:42:0b:90:22:b9:31:ac:b9:bc:6f:18:2c:c0:
6b:97:65:93:8c:46:77:3e:0c:1d:12:cc:8e:63:d4:
0e:16:1c:10:c3:5c:c8:da:1c:43:e3:07:7c:b9:44:
56:0d:ef:b3:06:50:f4:88:1b:5e:59:b0:ce:b6:66:
14:e8:6d:0b:6c:29:19:6d:8b:d8:55:f4:15:2a:fe:
4d:6f:4b:1c:e2:c0:fd:8a:a4:44:5e:aa:eb:b6:9d:
61:20:7d:6a:6d:1a:6b:4d:a1:86:a7:13:9b:68:a8:
d2:17:bb:f8:6f:64:cd:ea:d9:98:13:54:76:99:23:
4a:5b:15:04:c9:37:ec:92:2c:ba:5a:53:eb:b5:fe:
1e:3a:ee:60:17:bf:f7:ec:66:1a:95:ba:5d:63:33:
15:83:e6:e6:ed:bc:06:61:f3:a9:2e:fd:b2:7c:d2:
6c:b4:83:04:28:14:28:4b:b5:4d:e7:8e:a5:56:e6:
b1:72:ba:58:9b:5d:f7:ee:1b:61:8c:43:fd:c3:e8:
66:45:ff:34:76:27:77:47:79:22:78:4e:f3:45:b9:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:41:39:DE:00:A9:60:C0:58:67:32:C9:60:40:D7:81:07:06:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/2d9c230a-21c6-3b05-bdb9-7c36f04ef045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
X509v3 Authority Key Identifier:
keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
sbgp-ipAddrBlock: critical
IPv4:
66.151.176.0/24
70.42.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ce:c6:10:f7:45:af:4d:41:7b:d0:4d:3f:24:12:65:15:c4:
87:d8:c9:5c:b1:ee:91:98:6f:ce:27:97:37:a8:73:85:86:66:
cb:01:79:ba:5e:72:03:c2:dc:ef:2a:4e:7a:3a:56:52:3e:df:
33:62:6e:09:67:ad:ce:25:a7:85:fa:32:f5:0c:9b:bb:d4:e2:
48:a6:1e:8a:a4:58:9f:9e:01:99:81:84:8c:e1:6e:0a:d6:27:
c7:7e:21:0d:91:45:4d:d7:aa:f1:01:d6:62:e4:6f:cb:b5:19:
dd:de:1d:b4:64:85:a7:0b:5f:7b:a5:15:2d:36:75:07:ed:80:
db:5f:ed:6c:31:3e:81:58:a2:32:a7:bc:c5:dd:a2:0a:21:10:
90:fc:79:d7:f1:5c:6d:3f:7c:cf:d2:0d:68:2c:b5:51:65:53:
16:f4:b8:43:9e:cd:c2:d7:0d:0e:d3:0d:7d:60:fa:60:9e:bf:
ee:8d:74:43:85:5a:92:9e:6e:54:48:b2:d6:41:f6:09:73:11:
0f:20:78:0b:62:03:32:a8:98:7d:a0:da:62:bd:cb:6d:ae:c9:
1f:b8:45:a1:fc:6c:88:61:32:4b:f0:62:81:66:f1:04:9b:f3:
3d:fc:91:a4:f9:39:3f:ba:1a:35:c2:99:a1:3e:ae:66:09:94:
7c:b2:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org