Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/ff26a12d-e558-33f4-80c6-19618080038f.roa
File: ff26a12d-e558-33f4-80c6-19618080038f.roa (raw, json)
Hash identifier: h3ahBaGzajanfvPVUiNFz3k0yXuWG1AuyF3dyWTO+GU=
Subject key identifier: 7B:ED:62:C5:BF:9E:BF:B8:89:66:D7:9A:10:E7:7A:96:E4:EF:82:B1
Certificate issuer: /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial: 010D0C9F4328584384A66929234861127CF4A880
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/ff26a12d-e558-33f4-80c6-19618080038f.roa
Signing time: Wed 11 Oct 2023 20:34:12 +0000
ROA not before: Wed 11 Oct 2023 20:34:12 +0000
ROA not after: Tue 09 Jan 2024 21:34:12 +0000
asID: 2707
IP address blocks: 168.92.64.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:a6:69:29:23:48:61:12:7c:f4:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Validity
Not Before: Oct 11 20:34:12 2023 GMT
Not After : Jan 9 21:34:12 2024 GMT
Subject: CN=c2261809-80ad-4701-b437-4d3717813cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:b8:a4:2c:73:cf:47:5e:97:bf:8a:f9:0e:
79:3f:19:ac:f1:21:c7:5f:62:96:94:3a:44:3c:a4:
21:99:18:24:71:50:dc:2d:cc:e3:61:f1:44:84:9e:
e6:7e:ea:c4:62:6a:92:fb:eb:d9:c1:1f:1d:70:27:
4c:87:33:34:56:a1:89:67:2f:ff:35:e6:22:b0:3a:
cd:59:7c:08:87:27:d2:00:a8:f3:04:24:ab:31:64:
98:e2:26:1c:5a:3d:58:93:58:68:6b:69:92:15:c3:
bc:01:06:3e:84:c8:96:14:62:fa:9c:88:3d:4c:74:
15:9b:3f:81:8f:62:d8:c0:6e:33:f3:b4:4c:26:8e:
c4:a2:88:2f:7a:48:f3:e6:bd:54:47:91:ab:41:f9:
eb:84:c0:01:16:00:36:0e:86:77:bd:ed:fc:67:ef:
e2:1e:ea:a8:cf:fa:72:99:b3:d6:dc:db:10:c4:9b:
54:8e:a8:47:f7:97:30:c0:b9:52:3a:b0:52:69:7d:
bd:d1:c3:63:c5:af:05:8f:fa:aa:98:4e:2a:32:17:
13:db:e3:53:5a:27:3f:dc:22:57:4f:93:8e:e5:8c:
d9:36:5d:02:d2:46:11:32:81:ab:9d:79:e5:55:12:
0d:e6:02:ec:ab:a5:c3:d6:85:1d:e1:a2:e0:8f:67:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:ED:62:C5:BF:9E:BF:B8:89:66:D7:9A:10:E7:7A:96:E4:EF:82:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/ff26a12d-e558-33f4-80c6-19618080038f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl
X509v3 Authority Key Identifier:
keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
sbgp-ipAddrBlock: critical
IPv4:
168.92.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:21:5b:f3:c2:e4:95:6d:9a:68:99:a9:82:32:4e:19:73:de:
93:82:bd:bb:cf:0f:d4:d9:a5:57:a1:12:7f:92:5b:61:2a:77:
1c:09:41:24:fa:a8:85:fa:b0:c1:80:f2:5a:17:c9:9f:95:5e:
f4:85:36:07:d9:59:0e:2c:d6:c3:7a:85:9d:f3:07:99:37:0d:
23:cc:7e:f7:68:25:0c:a8:02:3c:1e:88:9d:e7:ba:61:b7:7a:
16:0e:35:93:6d:ad:c1:c6:fe:06:c5:9a:bb:ce:de:f6:b1:83:
48:26:be:c7:b7:f7:ae:88:31:47:34:a4:20:92:11:48:28:cc:
f1:9e:00:18:da:5a:58:b1:c8:d4:85:ed:c6:8a:8a:0d:33:f1:
fb:a2:b3:12:38:bc:3e:c1:89:17:33:e2:c3:5d:98:8b:df:73:
29:47:aa:ac:4a:6e:87:29:06:ce:39:e7:2e:ea:50:8f:2e:67:
f2:eb:3e:57:b3:a8:f2:19:1b:1e:e8:8c:19:6c:a5:55:32:e2:
38:a0:48:f2:6b:80:74:db:d6:50:38:25:a6:2b:8e:ec:e0:70:
c6:a8:52:88:b6:ef:6e:4b:0f:c2:84:ec:23:fc:35:30:92:a6:
60:25:46:07:9e:6e:d8:b6:ba:79:d3:6d:44:f6:66:ce:8b:ab:
b1:46:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org