Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/14270307-fcb0-414a-be74-50d38ef8bf13/0e160d7e-6a46-3534-aeb4-5f511f5c221f.roa
File: 0e160d7e-6a46-3534-aeb4-5f511f5c221f.roa (raw, json)
Hash identifier: vVc0BF5j1t++CkCb0l9JGjoXS2sva0UDUi6ytg62h/s=
Subject key identifier: 93:CA:79:C3:55:63:E4:FC:70:E8:25:73:C7:F1:03:46:2B:09:56:73
Certificate issuer: /CN=14270307-fcb0-414a-be74-50d38ef8bf13
Certificate serial: 010D0C9F4328584444842ABF54CA324B656CA060
Authority key identifier: EE:77:CC:7F:16:B0:A8:C8:F4:75:87:0F:68:25:CD:D5:E2:D5:7C:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/14270307-fcb0-414a-be74-50d38ef8bf13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/14270307-fcb0-414a-be74-50d38ef8bf13/0e160d7e-6a46-3534-aeb4-5f511f5c221f.roa
Signing time: Tue 19 Dec 2023 14:00:20 +0000
ROA not before: Tue 19 Dec 2023 14:00:20 +0000
ROA not after: Mon 18 Mar 2024 13:00:20 +0000
asID: 31034
IP address blocks: 66.71.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:44:84:2a:bf:54:ca:32:4b:65:6c:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14270307-fcb0-414a-be74-50d38ef8bf13
Validity
Not Before: Dec 19 14:00:20 2023 GMT
Not After : Mar 18 13:00:20 2024 GMT
Subject: CN=3929c9a9-a6fa-4c89-ba79-ca28f6024cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:a2:85:46:fc:f5:99:b7:59:f1:45:a4:f0:
f5:e5:21:ab:38:2c:00:5e:e4:2d:b1:a3:23:86:f6:
7c:c3:a0:07:ab:40:64:b4:bf:a3:35:d4:49:53:14:
1d:ca:e7:cf:9e:c4:e4:31:09:a8:08:53:70:85:29:
ca:81:91:26:98:ce:f0:d6:64:1f:b1:7f:b2:6e:db:
54:79:c2:6b:9f:6f:4e:1c:e1:21:90:9d:2c:1b:7f:
a7:8d:b3:db:9b:70:51:0f:e5:bf:58:fb:ce:d0:12:
38:5a:0e:b2:a7:99:3d:78:2f:30:fb:73:cb:64:ff:
f4:1c:93:c4:f8:1e:98:fc:cf:51:1e:17:51:cd:4d:
8e:f0:2f:2d:4a:59:d5:0a:ad:ec:2e:34:c5:c4:c8:
d7:78:18:94:68:67:ee:ab:76:8c:3f:44:06:25:69:
70:ae:cd:62:93:36:5c:23:49:70:32:ca:9f:8c:70:
85:95:e4:e4:26:53:cc:7e:f1:8a:5d:a5:72:e1:36:
a0:5c:86:3c:f5:ff:95:00:bf:8c:db:09:ba:b4:7a:
0a:15:74:78:ae:d5:bb:74:9a:dd:9a:18:0b:e9:8a:
eb:b6:33:7a:1c:60:4a:1d:5a:8a:65:5d:a4:36:cc:
9f:6a:81:de:c3:bc:15:a7:31:01:e0:47:1d:c3:b4:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:79:C3:55:63:E4:FC:70:E8:25:73:C7:F1:03:46:2B:09:56:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/14270307-fcb0-414a-be74-50d38ef8bf13/0e160d7e-6a46-3534-aeb4-5f511f5c221f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/14270307-fcb0-414a-be74-50d38ef8bf13/14270307-fcb0-414a-be74-50d38ef8bf13.crl
X509v3 Authority Key Identifier:
keyid:EE:77:CC:7F:16:B0:A8:C8:F4:75:87:0F:68:25:CD:D5:E2:D5:7C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/14270307-fcb0-414a-be74-50d38ef8bf13.cer
sbgp-ipAddrBlock: critical
IPv4:
66.71.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c3:91:0b:66:f5:3b:d6:80:04:d6:3f:bf:f3:d3:9a:b3:5f:
b0:11:44:b3:c7:e5:4c:69:ce:49:b3:02:8b:ea:9f:08:8b:a5:
0c:17:27:8c:48:71:5f:17:5d:40:d0:f7:34:55:57:1c:e3:83:
e6:89:1d:98:0b:1f:a0:0f:1e:1e:d6:e5:f7:4b:e9:16:e4:24:
4e:ce:29:81:cc:be:64:e7:7a:ab:49:d3:b8:dd:3a:41:cf:22:
76:a5:a8:6b:71:79:5b:72:fd:3c:4b:4a:6a:88:29:f8:f5:e8:
c5:e1:22:2e:aa:d3:34:62:87:d9:cd:fb:c1:4f:be:19:f6:bc:
63:ee:1f:53:01:82:35:12:02:1d:6a:e9:2a:3e:54:d6:67:71:
8f:2c:81:40:fd:28:68:87:a2:3c:95:fe:81:82:0e:b1:2a:65:
f2:75:1b:2e:84:ed:82:9a:1c:f0:5f:9f:a1:71:54:0f:02:25:
37:0c:8c:36:2a:ea:06:39:c1:61:d2:4c:19:48:e5:f0:d8:69:
76:05:0d:c9:75:aa:8d:68:f6:6b:a5:3f:e8:9f:fe:6c:3f:94:
a0:35:95:9b:2c:33:96:85:5d:90:0d:c2:f8:56:ff:80:6a:9d:
15:40:1a:19:3d:21:62:95:13:82:47:e3:27:a8:50:b7:4c:1b:
4e:ae:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org