Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/7b821d6a-8ccd-3cfa-a74a-6bf70627b2dc.roa
File: 7b821d6a-8ccd-3cfa-a74a-6bf70627b2dc.roa (raw, json)
Hash identifier: hsXGGINk4yArnhBOn0NZztDv/xN8OaFpjLNToZmL57U=
Subject key identifier: C3:F9:76:81:A2:87:97:16:83:21:3C:A0:7E:BB:FC:B3:26:32:5F:EE
Certificate issuer: /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial: 010D0C9F4328584384A6E82D684BAE9E3F46E960
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/7b821d6a-8ccd-3cfa-a74a-6bf70627b2dc.roa
Signing time: Wed 11 Oct 2023 20:35:12 +0000
ROA not before: Wed 11 Oct 2023 20:35:12 +0000
ROA not after: Tue 09 Jan 2024 21:35:12 +0000
asID: 2707
IP address blocks: 168.93.0.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:a6:e8:2d:68:4b:ae:9e:3f:46:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Validity
Not Before: Oct 11 20:35:12 2023 GMT
Not After : Jan 9 21:35:12 2024 GMT
Subject: CN=3b4f9717-f7e3-445c-8c1c-7cd09011acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:08:e3:42:c9:26:b9:7f:87:7a:99:16:e7:
bb:ab:86:33:52:2e:07:e6:76:7f:86:10:ea:e5:ec:
0a:81:10:b4:22:f5:ec:36:d1:97:e5:71:91:c2:49:
8e:ef:0c:21:d1:41:b3:fc:3e:0b:36:0f:ee:15:29:
44:f4:7f:54:6e:89:f6:c1:e5:21:a4:8e:73:3f:43:
ae:ff:1c:68:ee:7b:f3:30:e0:5e:2e:ee:34:0f:37:
aa:fb:f4:3d:33:09:77:08:88:32:fc:bc:04:07:d4:
08:59:4d:b4:e5:64:20:c3:9e:39:e5:20:cc:68:7b:
5c:a2:5f:0f:3d:c2:01:50:66:ed:e2:99:75:01:aa:
3b:1d:66:60:88:b9:50:6a:73:16:3e:24:05:0f:d1:
56:18:4d:b8:52:7a:8b:d7:d1:81:22:ec:fc:50:bf:
00:71:27:97:f1:e4:ad:7e:27:39:53:f3:21:4d:69:
b8:88:66:f0:d4:b4:db:fb:c8:8c:21:4d:1a:05:e3:
91:7b:49:a4:8a:81:62:a2:46:3e:63:84:d2:75:0a:
81:03:f5:40:47:ad:da:07:47:38:ad:d7:c6:12:ae:
c0:14:5c:1e:f7:49:19:3b:ef:14:9b:7d:bb:bb:41:
d1:60:1a:9a:91:58:bd:49:91:84:f6:31:99:1e:cd:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:76:81:A2:87:97:16:83:21:3C:A0:7E:BB:FC:B3:26:32:5F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/7b821d6a-8ccd-3cfa-a74a-6bf70627b2dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl
X509v3 Authority Key Identifier:
keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
sbgp-ipAddrBlock: critical
IPv4:
168.93.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:5a:7b:5a:d0:a3:a2:0c:5a:aa:f1:31:03:94:c1:99:35:1c:
0e:fd:66:6b:cc:77:a4:50:75:a9:de:df:89:60:ce:19:be:61:
fe:d8:45:8f:e7:d1:ea:e6:6c:05:e3:56:76:0e:6e:a4:19:a1:
1b:0a:16:64:27:98:94:37:28:19:04:ed:2e:a5:c7:33:15:30:
67:85:3c:cc:c2:89:e7:57:66:3d:e7:b8:9e:1b:44:9e:ff:b3:
46:5d:6f:d3:71:27:ac:74:f6:8c:fd:fe:01:ad:01:f2:0c:c9:
9f:9b:10:2d:19:92:7a:3e:e9:26:1e:d4:21:22:65:80:9f:29:
97:b0:db:65:36:c9:63:fe:1b:90:af:a9:fc:c4:94:ed:a0:4c:
ab:e6:81:70:5a:bd:0e:c6:79:64:81:78:b4:9c:cf:e4:98:76:
6a:dd:bb:0f:01:c3:9a:51:5f:0b:1f:e9:39:fc:a1:26:c9:d5:
5f:f0:b6:82:f1:22:bd:0f:f9:38:c4:3d:10:d8:40:1e:36:99:
0e:1c:9b:1e:b5:90:e3:28:f0:92:9d:43:98:29:d7:f3:fb:34:
16:77:3a:3c:d1:41:ba:97:57:f0:f7:f3:40:bb:b0:21:4f:92:
3d:1b:50:3e:ac:92:f8:c8:1f:41:cd:de:5f:38:ab:08:bd:ec:
c8:97:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org