Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/e0767283-5519-3504-a0ce-c3b141b4a2da.roa
File: e0767283-5519-3504-a0ce-c3b141b4a2da.roa (raw, json)
Hash identifier: aECF7cL3/tDGQsoImsNQv/eU6tRh5AIyYA7xTe2EilE=
Subject key identifier: 26:EF:25:A1:11:C5:84:44:7C:FE:E7:EB:00:16:04:B9:0A:87:EF:61
Certificate issuer: /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial: 010D0C9F4328583FFA0A91BDBBFD882A7F7D6200
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/e0767283-5519-3504-a0ce-c3b141b4a2da.roa
Signing time: Fri 11 Jun 2021 14:17:03 +0000
ROA not before: Fri 11 Jun 2021 14:17:03 +0000
ROA not after: Sat 22 Feb 2025 05:00:00 +0000
asID: 19905
IP address blocks: 74.201.141.0/24 maxlen: 24
74.201.251.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fa:0a:91:bd:bb:fd:88:2a:7f:7d:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Validity
Not Before: Jun 11 14:17:03 2021 GMT
Not After : Feb 22 05:00:00 2025 GMT
Subject: CN=372a34b2-123a-498c-8386-685746e308b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:98:44:db:ff:14:c7:c1:de:ed:d4:9b:26:
1b:1f:da:00:bb:cb:0e:63:6e:5e:8a:65:ff:6e:cd:
cd:6d:38:a7:64:42:38:ac:30:af:e4:b3:69:e2:a8:
8a:a1:7d:59:52:35:88:15:50:2a:b3:67:ec:fa:9e:
df:c5:01:85:91:9c:c9:1d:45:be:83:45:2f:3e:53:
a7:1b:1a:21:84:68:0c:a1:83:b6:7d:d2:3f:ad:53:
be:25:ed:0b:62:69:31:ed:ac:96:ed:5a:75:53:9e:
36:3a:f5:0a:a7:ef:31:71:f0:ae:b6:cc:9f:8e:0e:
22:4c:bd:10:d5:21:50:b1:18:23:6c:61:8f:58:35:
64:38:27:6f:71:f3:9d:0d:8d:98:f2:3b:27:48:14:
17:2b:cf:1a:ac:2d:ee:a8:2a:90:7b:dd:20:aa:ee:
45:c5:f2:3f:cc:67:d5:c8:fe:47:48:c0:5e:5c:95:
15:2c:e5:52:63:7d:ba:e2:a6:b1:6e:b5:25:94:86:
80:17:41:5f:1b:4b:8d:95:89:20:59:bb:01:54:86:
ea:b0:44:74:cc:b2:cf:f6:99:80:5d:37:4a:22:80:
f7:53:44:85:66:d3:91:94:e0:5d:21:d4:8f:eb:e4:
a1:3e:1b:ad:6e:03:60:6f:79:a1:90:b2:1e:33:20:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:25:A1:11:C5:84:44:7C:FE:E7:EB:00:16:04:B9:0A:87:EF:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/e0767283-5519-3504-a0ce-c3b141b4a2da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
X509v3 Authority Key Identifier:
keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
sbgp-ipAddrBlock: critical
IPv4:
74.201.141.0/24
74.201.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:9d:2f:85:67:c9:68:73:23:37:8d:a7:b3:fa:92:24:c4:ec:
ae:aa:1d:ba:06:ed:88:60:18:db:80:4b:4d:62:fc:13:9a:b4:
63:63:d5:97:dc:89:03:1a:b5:3e:1b:6b:69:1f:50:40:e9:4a:
bc:65:fe:97:f6:58:00:4b:4a:48:a1:62:cf:a6:72:b7:33:81:
bb:e4:85:67:94:88:07:4c:5d:bb:d3:64:ba:4b:01:e6:42:cc:
5d:17:42:d2:c8:c0:fa:72:52:db:42:82:18:2e:37:74:72:04:
c7:f8:30:5e:56:bc:63:5a:50:c2:a7:e4:29:98:cf:76:c9:d7:
fd:65:d0:41:9c:76:ae:49:f7:71:75:3c:69:ee:50:75:d4:20:
b4:60:33:a7:f5:ad:db:1f:f8:93:d3:c0:8f:df:bd:16:a5:c8:
ee:5f:6c:92:81:3b:5c:5c:ec:ce:be:44:e3:e1:75:b4:c0:e2:
f9:41:79:69:4f:60:8e:e4:2c:b3:1e:90:f7:76:ca:ac:23:19:
b6:05:64:05:00:9c:ae:02:bb:b0:51:6c:78:5f:76:86:65:64:
af:70:43:f8:05:b0:1c:5c:b4:9c:12:3a:17:d3:7f:68:20:01:
be:d9:d0:be:1f:40:5e:ac:9d:d6:01:ab:7b:ef:31:cb:a8:14:
f8:5c:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org