Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/36c3e57b-9e39-3f54-8462-817b4c1071a1.roa
File: 36c3e57b-9e39-3f54-8462-817b4c1071a1.roa (raw, json)
Hash identifier: SUhQPeqI2+eqaWxPyybuJsSejuX/4P+l3jfgdql3h9M=
Subject key identifier: 23:70:0A:11:85:67:2C:96:16:5A:F4:DE:EB:E2:89:D3:9E:5D:4F:9A
Certificate issuer: /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial: 010D0C9F4328583FD37B6DD962A385437C7BE740
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/36c3e57b-9e39-3f54-8462-817b4c1071a1.roa
Signing time: Fri 11 Jun 2021 14:17:03 +0000
ROA not before: Fri 11 Jun 2021 14:17:03 +0000
ROA not after: Sun 09 Feb 2025 05:00:00 +0000
asID: 21734
IP address blocks: 64.74.225.0/24 maxlen: 24
69.25.152.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d3:7b:6d:d9:62:a3:85:43:7c:7b:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Validity
Not Before: Jun 11 14:17:03 2021 GMT
Not After : Feb 9 05:00:00 2025 GMT
Subject: CN=e0d216d0-38fd-491f-a61b-501404566191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:c9:63:01:df:f3:66:82:48:d8:12:9b:94:
04:f7:23:d9:86:8f:85:c8:1b:9f:3c:5d:eb:05:08:
d2:55:6c:86:e7:f4:64:7f:f5:e4:a8:0c:4e:94:9e:
49:29:8d:d1:41:9f:90:42:1d:7d:45:12:69:d5:e9:
9e:07:25:a7:7e:98:dc:48:de:29:a8:65:23:79:11:
37:4f:ec:52:46:c9:db:02:ca:82:66:7d:6c:1f:a0:
da:30:c3:3a:61:99:ec:a6:9c:32:97:38:16:78:67:
05:50:15:fa:07:68:bc:4e:27:1d:0b:0d:1b:fd:1c:
5b:8a:e3:5d:54:26:da:df:ff:63:40:12:5f:72:33:
01:ee:d7:80:5f:e8:84:73:5e:88:40:24:ec:17:3a:
de:64:24:ca:be:1e:9c:3f:65:08:c3:55:c1:90:af:
86:9b:da:66:45:24:ac:46:6f:f9:d3:9c:71:41:8e:
91:1f:6d:57:a9:d6:df:6e:1c:c4:64:80:83:41:64:
3d:44:50:3f:7e:52:89:2f:e3:74:9a:62:01:5a:3d:
4e:df:15:10:48:c7:b9:38:2f:cd:f4:c3:c8:20:a2:
eb:37:8d:ce:e4:07:c7:76:29:d2:81:66:86:39:4c:
c5:b6:b2:ca:1a:14:43:08:dd:70:17:61:cc:41:46:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:70:0A:11:85:67:2C:96:16:5A:F4:DE:EB:E2:89:D3:9E:5D:4F:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/36c3e57b-9e39-3f54-8462-817b4c1071a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
X509v3 Authority Key Identifier:
keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
sbgp-ipAddrBlock: critical
IPv4:
64.74.225.0/24
69.25.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:c4:45:59:62:76:3f:f9:a1:0b:dc:e0:06:64:99:5d:6c:3d:
e0:9c:7c:c7:a4:52:94:a4:c2:e7:95:59:07:c3:a6:f7:90:27:
e4:c2:81:19:67:1d:6d:e1:6a:1a:48:32:fe:19:20:be:3a:57:
97:8d:a8:8b:75:d0:b2:40:d2:1d:d4:b7:7c:c7:3c:07:64:82:
35:13:03:50:21:bb:13:d0:19:82:aa:77:0e:11:c9:3d:23:c5:
dd:0b:59:a2:52:f7:9f:30:0d:9d:d7:c3:1c:d2:e9:77:f7:a1:
7b:97:de:1e:99:38:32:60:c3:9e:0b:8d:d1:c0:0c:3d:88:e7:
52:4f:08:f4:0a:2e:e8:5f:9b:b3:ac:e4:7d:0c:3f:0f:3d:b8:
71:f3:74:ca:e8:f7:89:88:51:b8:c2:17:7b:67:1b:50:c4:2c:
9d:77:5d:41:15:27:ad:b3:75:91:0c:e6:34:ef:25:5d:61:10:
a1:ae:7c:c8:0e:04:b7:48:d9:1d:0e:d2:6b:ec:d7:8e:ed:e6:
e0:ba:86:d1:0b:a7:c3:e0:6c:7c:66:3a:fe:d6:e3:60:21:67:
63:aa:3c:67:c5:17:92:97:ab:d9:91:ed:ba:48:07:5b:8e:1c:
80:57:37:fc:07:9e:e9:0a:2d:40:22:2b:81:f4:43:e0:5f:f3:
d3:fd:12:4e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWD/Te23ZYqOFQ3x750AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGExM2YyNjMtODRmYi00YTJiLWIxMzYtZDQ0N2VjYzIx
NTA4MB4XDTIxMDYxMTE0MTcwM1oXDTI1MDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTBkMjE2ZDAtMzhmZC00OTFmLWE2MWItNTAxNDA0NTY2MTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW7JYwHf82aCSNgSm5QE9yPZho+FyBufPF3r
BQjSVWyG5/Rkf/XkqAxOlJ5JKY3RQZ+QQh19RRJp1emeByWnfpjcSN4pqGUjeRE3
T+xSRsnbAsqCZn1sH6DaMMM6YZnsppwylzgWeGcFUBX6B2i8TicdCw0b/RxbiuNd
VCba3/9jQBJfcjMB7teAX+iEc16IQCTsFzreZCTKvh6cP2UIw1XBkK+Gm9pmRSSs
Rm/505xxQY6RH21XqdbfbhzEZICDQWQ9RFA/flKJL+N0mmIBWj1O3xUQSMe5OC/N
9MPIIKLrN43O5AfHdinSgWaGOUzFtrLKGhRDCN1wF2HMQUY9pwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCNwChGFZyyWFlr03uviidOeXU+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTEz
ZjI2My04NGZiLTRhMmItYjEzNi1kNDQ3ZWNjMjE1MDgvMzZjM2U1N2ItOWUzOS0z
ZjU0LTg0NjItODE3YjRjMTA3MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGExM2YyNjMtODRmYi00YTJiLWIx
MzYtZDQ0N2VjYzIxNTA4LzhhMTNmMjYzLTg0ZmItNGEyYi1iMTM2LWQ0NDdlY2My
MTUwOC5jcmwwHwYDVR0jBBgwFoAUyDfSb8ZRnO+8QbKDkS5zaaOzvqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTEzZjI2My04NGZiLTRhMmItYjEzNi1kNDQ3
ZWNjMjE1MDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQErhAwQA
RRmYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGLERVlidj/5oQvc4AZkmV1sPeCcfMekUpSkwueVWQfDpveQ
J+TCgRlnHW3hahpIMv4ZIL46V5eNqIt10LJA0h3Ut3zHPAdkgjUTA1AhuxPQGYKq
dw4RyT0jxd0LWaJS958wDZ3XwxzS6Xf3oXuX3h6ZODJgw54LjdHADD2I51JPCPQK
Luhfm7Os5H0MPw89uHHzdMro94mIUbjCF3tnG1DELJ13XUEVJ62zdZEM5jTvJV1h
EKGufMgOBLdI2R0O0mvs147t5uC6htELp8PgbHxmOv7W42AhZ2OqPGfFF5KXq9mR
7bpIB1uOHIBXN/wHnukKLUAiK4H0Q+Bf89P9Ek4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-ams.rpki-client.org