Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/c72ab22f-85d9-3cbe-a0dd-7658527c1f9d.roa
File: c72ab22f-85d9-3cbe-a0dd-7658527c1f9d.roa (raw, json)
Hash identifier: L9J8ELS+Rwt0hf6b8tlajxDI1o3HIDeTaQTLFUHc/zk=
Subject key identifier: 2D:2B:47:47:DC:31:C5:83:87:FA:73:A0:F5:B4:7B:DE:62:8A:14:39
Certificate issuer: /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial: 010D0C9F4328584384A7330EA814A31FE4F9C900
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/c72ab22f-85d9-3cbe-a0dd-7658527c1f9d.roa
Signing time: Wed 11 Oct 2023 20:35:47 +0000
ROA not before: Wed 11 Oct 2023 20:35:47 +0000
ROA not after: Tue 09 Jan 2024 21:35:47 +0000
asID: 2707
IP address blocks: 168.93.192.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:a7:33:0e:a8:14:a3:1f:e4:f9:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Validity
Not Before: Oct 11 20:35:47 2023 GMT
Not After : Jan 9 21:35:47 2024 GMT
Subject: CN=235b2f96-119e-4412-aea5-1b776a95e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:93:af:17:f9:d0:09:e9:ed:de:a0:5f:95:
cf:8c:23:24:94:46:12:13:87:79:db:dc:cb:47:cc:
43:d0:7b:eb:4e:c4:a6:09:6d:49:b5:d5:c0:53:cd:
a8:23:c2:d3:bb:ef:82:a3:28:5f:2f:e3:ea:d3:04:
02:fe:0a:c5:88:f9:c8:e3:11:70:b3:1b:5e:1b:77:
85:9d:a1:26:7b:34:7c:1f:ae:30:17:69:91:31:81:
8f:69:1e:3e:b1:8b:6f:50:33:f3:6a:44:5f:34:a3:
c7:89:93:2a:2b:df:e5:23:a4:ef:12:84:db:5f:f8:
50:9b:06:12:4a:c4:8d:25:49:99:aa:fd:25:bf:10:
3f:ac:c3:3f:67:a3:30:32:2b:b2:13:be:45:28:0b:
5b:80:22:1d:49:de:82:91:e2:53:fc:ef:08:f8:04:
b1:e6:a6:b9:14:84:d6:18:38:44:ba:20:19:36:3b:
1a:2b:22:72:d9:b9:7f:b3:2a:60:a4:15:19:22:9a:
56:ce:64:cc:e3:a8:ca:77:46:e9:aa:5c:18:c6:b4:
44:38:da:f6:56:9d:a1:b6:22:da:7d:21:d0:99:25:
9d:fc:dd:da:bf:32:aa:14:5b:3a:1d:f8:17:08:fd:
b6:a4:27:66:2b:93:7c:2d:fa:2c:a4:fe:da:6e:75:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:47:47:DC:31:C5:83:87:FA:73:A0:F5:B4:7B:DE:62:8A:14:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/c72ab22f-85d9-3cbe-a0dd-7658527c1f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl
X509v3 Authority Key Identifier:
keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
sbgp-ipAddrBlock: critical
IPv4:
168.93.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0a:79:95:4e:d4:68:78:e4:d7:f8:04:fe:2c:3a:a6:92:32:
22:91:43:08:f3:0b:cd:12:d7:41:62:ba:ed:7f:d3:84:93:cf:
33:02:ee:a8:89:66:78:ea:8f:1e:8d:c4:e4:5b:cb:70:93:20:
e2:0b:ea:3f:74:9a:9a:8f:16:cf:94:6f:d3:19:71:94:94:d4:
27:1e:77:5d:a3:11:c6:18:8d:34:4a:cf:9b:d8:25:b9:7e:37:
87:33:60:17:e2:fc:4d:d9:46:fb:02:e6:9f:7c:ca:87:1f:71:
1a:81:9e:de:5f:fc:b8:c7:86:9d:3d:21:bb:13:9d:24:e0:7f:
73:7c:a7:ed:5a:18:e7:5a:8a:c2:ce:ae:07:1d:dc:b8:2f:91:
f4:2e:67:4b:e0:5a:a0:db:31:b8:bd:5a:6c:90:64:d8:19:ee:
69:70:5f:35:e1:4c:df:2f:b0:b6:ca:ac:cb:40:b4:c2:9e:6a:
54:20:4a:c6:e4:d1:65:3e:a0:c9:a5:7e:b7:b5:13:83:19:18:
54:22:63:8d:6f:bf:58:72:37:2e:44:65:9c:0e:cc:1a:26:c0:
ae:51:a5:98:e4:26:53:c4:16:45:66:ca:57:0f:8c:0b:ba:6d:
26:7f:6f:c1:89:1e:73:64:dc:06:4b:96:85:bb:b4:c4:83:df:
62:e3:36:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOEpzMOqBSjH+T5yQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc4MzZlYWEtNzIxNC00YTY5LThiNWEtNDFiNTVkOTNl
Njg5MB4XDTIzMTAxMTIwMzU0N1oXDTI0MDEwOTIxMzU0N1owLzEtMCsGA1UEAxMk
MjM1YjJmOTYtMTE5ZS00NDEyLWFlYTUtMWI3NzZhOTVlMmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOyTrxf50Anp7d6gX5XPjCMklEYSE4d529zL
R8xD0HvrTsSmCW1JtdXAU82oI8LTu++CoyhfL+Pq0wQC/grFiPnI4xFwsxteG3eF
naEmezR8H64wF2mRMYGPaR4+sYtvUDPzakRfNKPHiZMqK9/lI6TvEoTbX/hQmwYS
SsSNJUmZqv0lvxA/rMM/Z6MwMiuyE75FKAtbgCIdSd6CkeJT/O8I+ASx5qa5FITW
GDhEuiAZNjsaKyJy2bl/sypgpBUZIppWzmTM46jKd0bpqlwYxrREONr2Vp2htiLa
fSHQmSWd/N3avzKqFFs6HfgXCP22pCdmK5N8LfospP7abnVu3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0rR0fcMcWDh/pzoPW0e95iihQ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83Nzgz
NmVhYS03MjE0LTRhNjktOGI1YS00MWI1NWQ5M2U2ODkvYzcyYWIyMmYtODVkOS0z
Y2JlLWEwZGQtNzY1ODUyN2MxZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzc4MzZlYWEtNzIxNC00YTY5LThi
NWEtNDFiNTVkOTNlNjg5Lzc3ODM2ZWFhLTcyMTQtNGE2OS04YjVhLTQxYjU1ZDkz
ZTY4OS5jcmwwHwYDVR0jBBgwFoAUM+Ri1EenQRVSou8moXwJk4kpQxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NzgzNmVhYS03MjE0LTRhNjktOGI1YS00MWI1
NWQ5M2U2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqF3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsKeZVO1Gh45Nf4BP4sOqaSMiKRQwjzC80S10Fiuu1/04STzzMC7qiJ
Znjqjx6NxORby3CTIOIL6j90mpqPFs+Ub9MZcZSU1Cced12jEcYYjTRKz5vYJbl+
N4czYBfi/E3ZRvsC5p98yocfcRqBnt5f/LjHhp09IbsTnSTgf3N8p+1aGOdaisLO
rgcd3LgvkfQuZ0vgWqDbMbi9WmyQZNgZ7mlwXzXhTN8vsLbKrMtAtMKealQgSsbk
0WU+oMmlfre1E4MZGFQiY41vv1hyNy5EZZwOzBomwK5RpZjkJlPEFkVmylcPjAu6
bSZ/b8GJHnNk3AZLloW7tMSD32LjNkA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org