Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/a1ea0d38-1960-375e-862c-a2f4ee5848a8.roa
File: a1ea0d38-1960-375e-862c-a2f4ee5848a8.roa (raw, json)
Hash identifier: ihyMw+naNXMRJUkSpWoLUNQ1MOSJraAVisFm4D6lw5k=
Subject key identifier: 89:5A:E3:10:75:D3:83:94:6A:04:62:CF:97:5C:6E:70:20:7F:75:52
Certificate issuer: /CN=de018715-dccc-4fe7-9768-b7eddacc397a
Certificate serial: 010D0C9F4328583B8043034075B73961D48F5F20
Authority key identifier: 4E:DE:91:46:45:F1:7C:5E:1F:94:4C:09:2B:64:09:11:67:3F:25:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/a1ea0d38-1960-375e-862c-a2f4ee5848a8.roa
Signing time: Wed 02 Jun 2021 04:00:00 +0000
ROA not before: Wed 02 Jun 2021 04:00:00 +0000
ROA not after: Tue 09 Jan 2024 05:00:00 +0000
asID: 1239
IP address blocks: 66.220.37.0/24 maxlen: 24
66.220.38.0/23 maxlen: 23
66.220.46.0/24 maxlen: 24
66.220.54.0/23 maxlen: 23
66.220.56.0/23 maxlen: 23
66.220.59.0/24 maxlen: 24
66.220.60.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:80:43:03:40:75:b7:39:61:d4:8f:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de018715-dccc-4fe7-9768-b7eddacc397a
Validity
Not Before: Jun 2 04:00:00 2021 GMT
Not After : Jan 9 05:00:00 2024 GMT
Subject: CN=3ce4a274-87d8-4469-9032-6cffb93ed6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:2e:92:b7:1b:4b:8b:ea:be:fc:d7:7f:e3:
3d:8d:45:a1:47:41:33:34:a5:1d:c2:f5:ed:58:22:
ae:bb:ad:59:f1:11:bb:58:bd:4f:7d:b5:f8:5f:48:
ce:a0:c0:40:ff:4d:63:aa:d2:ed:12:5f:55:f6:6e:
02:36:a2:ba:e4:a7:2c:e5:5d:ba:22:b8:74:a5:9d:
54:39:af:c8:3b:de:01:08:56:57:e0:b5:8a:2e:e4:
d8:1f:58:84:80:0b:61:2a:38:6a:35:b7:f6:d9:f8:
8a:f1:93:e8:24:b9:8d:85:c6:dc:d2:8d:ee:0a:c1:
d5:c2:99:69:fa:52:5a:a3:65:76:39:86:8f:e6:1c:
62:e4:70:ee:e3:c1:7b:f7:6b:78:91:78:aa:5c:07:
1d:11:02:5f:dd:1a:76:61:c6:e1:e7:c2:6a:b1:b4:
32:96:a9:9e:32:f4:e6:98:8d:7b:1c:3d:98:67:7a:
46:35:03:d1:f7:0c:7e:7b:e8:a7:30:5b:b1:0a:51:
7b:da:90:21:ef:14:5d:b5:79:f8:a1:c8:b4:12:2e:
21:8e:e7:58:97:77:af:80:a4:b5:4d:b9:6f:ed:8d:
ea:a3:4e:be:ac:7f:9e:18:a7:58:0b:a6:38:06:cc:
86:05:8e:e0:07:9b:ba:bf:33:59:cd:b7:b5:2f:e3:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:E3:10:75:D3:83:94:6A:04:62:CF:97:5C:6E:70:20:7F:75:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/a1ea0d38-1960-375e-862c-a2f4ee5848a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/de018715-dccc-4fe7-9768-b7eddacc397a.crl
X509v3 Authority Key Identifier:
keyid:4E:DE:91:46:45:F1:7C:5E:1F:94:4C:09:2B:64:09:11:67:3F:25:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.37.0-66.220.39.255
66.220.46.0/24
66.220.54.0-66.220.57.255
66.220.59.0-66.220.61.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:18:d7:89:8a:7b:0b:0c:a7:8f:19:c5:8d:14:f8:0d:b2:b1:
72:45:d0:90:de:46:a6:1e:a1:00:c0:52:92:26:16:60:30:61:
2b:a3:3c:f2:57:77:4e:0d:8a:4d:84:9b:da:b0:2f:1d:ee:8c:
81:f3:d7:53:31:8c:c0:43:98:d7:2b:5a:a7:5e:dd:6d:02:0e:
6e:64:2a:94:7c:a7:37:96:c7:19:7b:9e:e0:a8:cd:28:02:f4:
89:50:a9:37:05:3b:c1:cb:10:ac:1e:38:0d:2e:2b:68:c8:89:
72:0b:b0:78:5b:f9:c8:1f:ee:ce:dd:fc:03:2d:a1:1a:a2:38:
4b:60:13:d8:ef:6f:da:e8:93:64:e8:3d:c1:7a:80:60:9d:02:
bc:c1:90:42:74:80:63:0d:96:55:fe:b4:2d:77:58:24:4d:18:
05:f9:3b:8a:22:a8:3d:a8:0c:e3:85:ad:95:56:5f:17:f0:af:
8f:af:da:65:4d:5d:6a:86:22:75:19:e0:0f:9b:3e:6f:b6:2e:
1d:79:c5:c8:e3:44:8d:9a:46:d4:fc:50:42:8a:9f:da:da:d7:
6c:40:bd:09:f1:13:54:0a:ef:f2:54:b0:46:55:d8:60:67:c0:
13:00:66:75:79:99:c1:83:84:76:a5:77:b0:59:28:34:93:a2:
e5:f0:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:47 2023 by rpki-client on console-fra.rpki-client.org