Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/78a833dc-7e3c-3020-add7-32ca326366d2.roa
File: 78a833dc-7e3c-3020-add7-32ca326366d2.roa (raw, json)
Hash identifier: l6PfaPJCM5HPrApA1YsCpK4EwRwxIyLilhYDT8I2iNU=
Subject key identifier: 51:F0:70:CD:CE:AD:8E:7A:E4:47:8D:B3:C2:A2:2B:6B:2A:D2:0C:1B
Certificate issuer: /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial: 010D0C9F4328583FFA0919DC135F03DAB3697200
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/78a833dc-7e3c-3020-add7-32ca326366d2.roa
Signing time: Fri 11 Jun 2021 14:17:03 +0000
ROA not before: Fri 11 Jun 2021 14:17:03 +0000
ROA not after: Sat 22 Feb 2025 05:00:00 +0000
asID: 21734
IP address blocks: 74.201.141.0/24 maxlen: 24
74.201.251.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fa:09:19:dc:13:5f:03:da:b3:69:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Validity
Not Before: Jun 11 14:17:03 2021 GMT
Not After : Feb 22 05:00:00 2025 GMT
Subject: CN=bcb06c04-e552-4795-80cc-3c993b930c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:54:03:3b:fe:de:29:91:a2:28:24:be:21:
92:87:50:c5:c6:0d:93:64:9f:19:47:41:e9:66:d8:
9c:e1:be:0b:64:3d:25:0c:51:6f:ca:ad:c0:a9:ab:
24:68:dd:d8:5c:93:ab:ab:22:c3:66:ac:ad:cd:d9:
53:13:05:75:13:ba:5c:92:69:89:2e:5a:c5:4c:31:
15:ad:42:52:4b:d7:4f:60:34:65:12:ec:92:43:b1:
a2:8b:97:67:5b:c9:32:dd:5d:58:69:27:8c:53:b4:
02:82:b3:62:9c:a8:70:75:e4:b4:88:ac:47:1f:c2:
4d:5f:05:b6:c9:6c:37:4d:74:7d:dc:00:ba:89:c4:
90:b7:4a:d0:b6:0d:a1:95:9e:a6:53:9a:3d:95:5f:
9f:9e:25:0b:fd:e0:6e:4f:83:3c:fa:78:ed:04:0e:
29:fc:0b:b1:1b:44:75:89:ac:e4:8a:68:a3:21:06:
12:d0:bb:cb:32:16:27:a0:95:44:cf:9a:79:0a:bb:
44:5e:49:84:47:0b:eb:d7:ed:36:d6:12:fc:4a:ff:
2d:d9:da:ff:f5:62:78:e2:cc:66:8f:73:ec:7a:e5:
61:eb:2c:8d:0c:74:af:f2:8c:de:f7:fd:2e:03:9c:
9e:e6:92:f3:7c:c6:f7:57:b2:3b:9b:07:9a:db:11:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:70:CD:CE:AD:8E:7A:E4:47:8D:B3:C2:A2:2B:6B:2A:D2:0C:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/78a833dc-7e3c-3020-add7-32ca326366d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
X509v3 Authority Key Identifier:
keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
sbgp-ipAddrBlock: critical
IPv4:
74.201.141.0/24
74.201.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:4c:30:c0:01:ff:7b:3c:77:c5:d9:3e:e0:fd:30:72:5f:03:
5b:c9:e2:47:df:8f:f6:8e:3e:68:c4:6c:e4:a2:19:13:4c:ca:
47:0d:a6:5e:e9:b4:ea:d5:55:1a:28:ff:22:4f:43:fe:3a:39:
d0:6b:8b:fe:d6:e3:14:ca:08:9a:19:8d:ec:af:92:c6:bb:54:
d0:a8:70:8e:cd:c1:e5:09:e7:c8:d4:d6:7b:5a:86:7d:5c:56:
57:e8:1b:a2:86:c4:80:90:3c:f6:d8:37:6d:43:06:57:b6:5d:
60:55:6c:64:d2:01:0f:a2:83:e2:30:86:ba:d4:46:7c:ae:4d:
07:cc:3d:3e:77:6e:5f:4c:de:9d:20:55:52:14:e8:41:80:44:
98:f9:e2:5b:06:96:f4:44:33:39:f9:cb:c4:e9:8a:89:97:1c:
4a:a6:c6:58:f9:de:6b:34:78:f3:5e:a8:92:00:8b:5f:39:24:
fa:a5:1a:14:93:10:9c:e9:c2:8c:f0:08:88:58:26:24:82:fa:
08:b5:56:f8:6e:96:2f:4b:ac:a9:17:16:8f:e0:97:00:b0:28:
f5:63:f0:c1:22:d7:23:bc:1f:75:a2:d9:7d:04:c2:76:3d:4f:
72:ab:8b:2b:2e:64:6e:55:e7:61:ed:38:61:40:96:c0:c7:65:
dd:d9:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org