Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/f388cbcd-b5b4-32ea-9755-44684c5cd0c9.roa
File: f388cbcd-b5b4-32ea-9755-44684c5cd0c9.roa (raw, json)
Hash identifier: GkuklTanLupM9u8e8ch+rY3A4JQITV8jmc8VMfN/LjM=
Subject key identifier: 03:1B:A9:35:76:EE:E3:D9:E2:1C:49:15:38:91:EA:4B:0F:9F:23:D5
Certificate issuer: /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
Certificate serial: 010D0C9F4328583F4FB0EED2877774F4160D7E00
Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/f388cbcd-b5b4-32ea-9755-44684c5cd0c9.roa
Signing time: Fri 16 Sep 2022 16:48:08 +0000
ROA not before: Fri 16 Sep 2022 16:48:08 +0000
ROA not after: Wed 11 Sep 2024 04:00:00 +0000
asID: 54316
IP address blocks: 23.175.208.0/24 maxlen: 24
23.175.209.0/24 maxlen: 24
23.175.210.0/24 maxlen: 24
204.137.12.0/24 maxlen: 24
2602:fcad::/36 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4f:b0:ee:d2:87:77:74:f4:16:0d:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
Validity
Not Before: Sep 16 16:48:08 2022 GMT
Not After : Sep 11 04:00:00 2024 GMT
Subject: CN=10d066e3-539d-4608-b3c5-9e11b125b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:96:1e:00:98:19:bd:e6:1a:2a:b0:58:f2:
c7:7d:86:ab:a1:a3:8d:ae:c3:fc:3e:93:68:dd:cc:
a9:d9:87:8d:6f:aa:3d:c1:1a:94:b2:2f:21:cd:9c:
45:9b:3d:ab:60:1e:7f:d2:7c:60:45:04:e4:86:7c:
3b:2b:21:e7:c8:c6:cf:57:75:1e:f4:ca:90:ad:c5:
97:a6:94:3d:77:b9:b0:12:66:85:e2:7e:62:8e:34:
72:41:46:43:43:0f:fa:bd:4d:e9:1b:40:7b:77:2f:
c6:4b:be:ed:18:60:6c:34:21:79:fd:08:1a:f5:da:
df:2a:f5:63:ca:36:44:59:0d:f5:66:54:62:ff:f8:
8d:81:b8:e7:c3:30:48:53:cb:a4:8a:8f:ec:a5:a5:
ec:1a:9e:66:70:fe:a0:f2:8f:33:20:02:7f:7a:a3:
7b:2a:d5:54:84:5c:65:07:1a:71:d0:33:c3:cf:c4:
79:f3:b6:3b:26:2b:02:56:c1:3d:30:f1:c5:f1:47:
53:6b:ce:45:0c:24:0f:7b:f7:ae:0e:bb:73:05:fd:
53:08:37:82:70:8d:2e:7b:be:69:3c:63:81:c8:8d:
57:d0:3b:e9:14:4b:69:43:ea:68:aa:f0:1b:fe:f3:
7a:a3:9e:fd:56:4f:81:77:17:32:3b:5f:51:b5:8b:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:A9:35:76:EE:E3:D9:E2:1C:49:15:38:91:EA:4B:0F:9F:23:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/f388cbcd-b5b4-32ea-9755-44684c5cd0c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl
X509v3 Authority Key Identifier:
keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.208.0-23.175.210.255
204.137.12.0/24
IPv6:
2602:fcad::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:01:02:ce:6e:a2:f5:ec:5e:98:19:54:be:2e:e8:c5:87:5f:
53:f3:10:ff:62:54:84:df:61:04:97:e8:f8:88:fd:73:48:04:
61:4b:e3:ff:9f:52:9d:4d:05:a9:29:71:bb:66:c2:c1:fb:7d:
e5:89:01:ce:3c:c4:d2:3c:6d:d8:fd:4e:6d:27:de:6d:a4:e1:
40:45:56:8a:7e:58:e3:b9:30:61:30:7a:c5:ea:80:0a:46:91:
91:7f:a5:51:73:6c:f7:e9:79:e5:9c:7c:40:26:55:df:76:0e:
a3:c8:ba:67:55:57:6a:fc:9c:89:eb:a1:1b:ba:11:3c:91:65:
b4:61:b4:e8:94:dd:3c:ce:b3:35:16:9a:45:9d:44:e7:88:b4:
ca:1e:9f:16:cb:ee:d4:7e:b0:28:0d:38:cf:87:da:4f:d1:b9:
4f:5c:b3:63:ef:58:38:5e:46:d6:c0:51:83:ee:dd:4a:65:f2:
d8:f3:bd:4a:9e:c1:bc:a5:9c:93:ac:5c:7f:e4:de:45:97:47:
bf:81:43:94:9a:20:62:e0:8a:8d:01:0e:65:30:fb:82:8d:9d:
6a:22:1f:f4:f2:78:9c:ff:4b:ad:eb:a3:86:0d:b7:e6:6f:80:
14:3d:ff:ab:a7:4f:4c:ec:a6:7d:32:94:6c:1a:a3:e3:fd:0a:
39:d6:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org