Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/d3888b6b-8536-39cf-a20a-764dab28100c.roa
File: d3888b6b-8536-39cf-a20a-764dab28100c.roa (raw, json)
Hash identifier: zhRHXvZx+3e5sTbhKrA35vb40JrFFvcSyEjKKa91QNk=
Subject key identifier: 8D:63:BB:C9:5B:B9:BC:49:89:4E:12:2E:7E:64:F2:A5:2F:7C:72:5C
Certificate issuer: /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial: 010D0C9F4328583DA6DDB3EE38E6970570914CA4
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/d3888b6b-8536-39cf-a20a-764dab28100c.roa
Signing time: Fri 11 Jun 2021 14:17:03 +0000
ROA not before: Fri 11 Jun 2021 14:17:03 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 14745
IP address blocks: 64.94.234.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a6:dd:b3:ee:38:e6:97:05:70:91:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Validity
Not Before: Jun 11 14:17:03 2021 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=b72206e2-1d2e-4b2d-b333-c191b60e0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:63:10:51:d0:c6:3a:b4:d2:5e:54:54:7d:
0e:0f:d2:9c:78:4a:70:2f:38:28:b2:de:bf:a3:70:
0f:9e:c9:27:7e:b2:70:57:ae:9d:5a:c8:bc:51:23:
f9:d3:f5:21:2b:c9:84:d8:48:dd:ba:a2:29:b2:eb:
4a:28:3b:42:d9:76:39:b1:7a:27:bb:7e:04:1f:3f:
9c:f6:f5:19:98:69:c8:21:76:b3:cc:ef:22:1b:4a:
a4:37:2e:21:34:51:09:7b:0a:c0:d4:b7:ea:a0:96:
1e:52:c6:b1:d7:9b:d1:3a:c4:d0:c4:b6:f7:fd:e5:
c0:b3:8b:61:e0:21:cc:91:e3:a6:0d:29:db:64:a2:
06:34:69:a3:7b:63:0b:7b:51:18:41:a6:6b:1f:71:
9d:d4:11:90:80:be:96:1c:8e:0f:4c:cf:64:4e:2d:
eb:ef:91:5b:d9:20:e7:7b:f4:81:2c:c1:95:c2:0d:
8c:0e:fb:13:95:7f:be:5a:84:cd:8b:a4:80:ad:cd:
5e:c6:64:68:cc:73:1d:c3:ed:eb:f3:fb:1e:7f:38:
9a:06:17:6b:1f:30:45:6b:af:92:0a:70:21:7e:c2:
e5:01:f5:70:68:eb:1e:6e:f7:7a:b7:7d:4d:0f:db:
ac:eb:b5:cb:52:28:0a:6b:86:2a:25:b5:c6:31:f7:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:BB:C9:5B:B9:BC:49:89:4E:12:2E:7E:64:F2:A5:2F:7C:72:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/d3888b6b-8536-39cf-a20a-764dab28100c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
X509v3 Authority Key Identifier:
keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
sbgp-ipAddrBlock: critical
IPv4:
64.94.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:44:13:2c:30:e4:65:c2:38:de:45:54:15:4f:0a:42:6c:88:
cb:0c:d8:2c:09:4b:e0:ea:e6:b4:68:e3:0f:b8:ed:57:13:cf:
5f:41:5d:e1:4b:65:8b:47:38:91:2b:e4:33:6f:22:d3:a0:37:
2b:5a:5e:d0:22:89:4b:bf:f4:cb:4d:ac:b1:46:b3:cb:bb:a1:
22:af:5d:21:6b:91:e6:b3:88:aa:c3:c1:33:08:a5:f3:89:90:
38:b7:89:e4:bd:85:49:38:22:c0:f1:cf:3f:d2:a1:7b:cd:50:
2c:5e:e8:ee:86:09:ec:b8:f2:21:71:be:af:50:94:a0:59:2e:
c2:4d:2d:58:a8:d9:0f:84:67:62:ae:ff:e9:3c:d9:74:10:b0:
6e:c9:09:2f:86:07:af:82:75:d7:1f:b5:b4:cc:3c:3f:a4:1e:
7d:b2:9f:be:47:99:1f:29:1a:75:c3:3c:a7:b1:a2:cf:fc:2c:
84:28:c5:e2:66:1b:f6:f5:f2:95:65:7c:f8:97:19:4f:e4:24:
70:9c:24:e2:02:25:7c:f8:b8:d5:8f:dc:1a:3a:aa:f0:18:49:
7c:71:e0:2d:be:4f:28:f5:f6:5b:49:12:9f:f9:fb:06:b2:9b:
6a:74:45:2f:bf:57:1c:40:bc:4c:87:99:e7:c0:27:63:92:b2:
07:da:93:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2m3bPuOOaXBXCRTKQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGExM2YyNjMtODRmYi00YTJiLWIxMzYtZDQ0N2VjYzIx
NTA4MB4XDTIxMDYxMTE0MTcwM1oXDTIyMDcyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YjcyMjA2ZTItMWQyZS00YjJkLWIzMzMtYzE5MWI2MGUwMTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KxjEFHQxjq00l5UVH0OD9KceEpwLzgost6/
o3APnsknfrJwV66dWsi8USP50/UhK8mE2EjduqIpsutKKDtC2XY5sXonu34EHz+c
9vUZmGnIIXazzO8iG0qkNy4hNFEJewrA1LfqoJYeUsax15vROsTQxLb3/eXAs4th
4CHMkeOmDSnbZKIGNGmje2MLe1EYQaZrH3Gd1BGQgL6WHI4PTM9kTi3r75Fb2SDn
e/SBLMGVwg2MDvsTlX++WoTNi6SArc1exmRozHMdw+3r8/sefziaBhdrHzBFa6+S
CnAhfsLlAfVwaOsebvd6t31ND9us67XLUigKa4YqJbXGMfd8fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1ju8lbubxJiU4SLn5k8qUvfHJcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTEz
ZjI2My04NGZiLTRhMmItYjEzNi1kNDQ3ZWNjMjE1MDgvZDM4ODhiNmItODUzNi0z
OWNmLWEyMGEtNzY0ZGFiMjgxMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGExM2YyNjMtODRmYi00YTJiLWIx
MzYtZDQ0N2VjYzIxNTA4LzhhMTNmMjYzLTg0ZmItNGEyYi1iMTM2LWQ0NDdlY2My
MTUwOC5jcmwwHwYDVR0jBBgwFoAUyDfSb8ZRnO+8QbKDkS5zaaOzvqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTEzZjI2My04NGZiLTRhMmItYjEzNi1kNDQ3
ZWNjMjE1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF7qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpEEyww5GXCON5FVBVPCkJsiMsM2CwJS+Dq5rRo4w+47VcTz19BXeFL
ZYtHOJEr5DNvItOgNytaXtAiiUu/9MtNrLFGs8u7oSKvXSFrkeaziKrDwTMIpfOJ
kDi3ieS9hUk4IsDxzz/SoXvNUCxe6O6GCey48iFxvq9QlKBZLsJNLVio2Q+EZ2Ku
/+k82XQQsG7JCS+GB6+CddcftbTMPD+kHn2yn75HmR8pGnXDPKexos/8LIQoxeJm
G/b18pVlfPiXGU/kJHCcJOICJXz4uNWP3Bo6qvAYSXxx4C2+Tyj19ltJEp/5+way
m2p0RS+/VxxAvEyHmefAJ2OSsgfak1A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org