Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/3d455df2-13d0-3992-9395-14a2c75ccdf0.roa
File: 3d455df2-13d0-3992-9395-14a2c75ccdf0.roa (raw, json)
Hash identifier: 84dfWn1Ix0VEGBymWnBW6P+Vxghevq4dnjGQQWBGj5Y=
Subject key identifier: 8D:BA:9A:97:FA:32:81:BE:EC:58:B8:20:17:FA:28:CA:4D:B2:AC:44
Certificate issuer: /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial: 010D0C9F432858475BDB6EB1FD39607B128B6248
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/3d455df2-13d0-3992-9395-14a2c75ccdf0.roa
Signing time: Sat 28 Sep 2024 01:00:31 +0000
ROA not before: Sat 28 Sep 2024 01:00:31 +0000
ROA not after: Fri 27 Dec 2024 02:00:31 +0000
asID: 53340
IP address blocks: 192.154.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5b:db:6e:b1:fd:39:60:7b:12:8b:62:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
Validity
Not Before: Sep 28 01:00:31 2024 GMT
Not After : Dec 27 02:00:31 2024 GMT
Subject: CN=79c6299f-04b5-4c3c-b807-8561890774e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8f:77:b8:33:64:c7:15:e5:11:59:8d:d7:3a:
a7:6d:5a:64:59:8d:35:ac:49:ab:45:ad:6b:5c:0a:
de:47:b1:9d:a1:00:37:cb:af:8e:60:9e:99:29:c7:
4e:e8:b2:c4:88:66:4e:6f:3a:d9:23:06:4e:c6:6b:
d4:15:77:88:ce:9a:e1:d9:56:85:54:f9:cc:e1:44:
cb:46:f3:8e:56:d3:2c:4e:aa:8e:aa:34:d0:87:fd:
12:d7:1d:ff:b5:c7:0c:b3:b3:a3:ee:40:42:f1:83:
d0:8c:80:b6:68:5a:d8:89:eb:cd:5a:2f:5d:1b:bc:
3a:69:f1:66:0d:9a:78:6e:31:59:16:40:f8:d5:a0:
24:21:70:7a:5c:0c:53:c8:0c:82:9b:83:0a:0c:db:
10:12:6b:52:c4:f4:f6:17:9d:d4:02:9c:a0:9b:33:
3e:32:47:49:26:1f:05:6f:75:6e:89:ae:2d:d4:a7:
e2:f8:83:80:a3:fd:3d:60:b2:c9:78:a1:b5:52:23:
55:4c:4f:5b:a0:ca:9c:e2:21:1c:38:83:10:7e:ba:
4a:fb:e2:04:3c:3a:7b:29:e6:e3:29:0e:1e:90:41:
28:ce:0f:1f:8c:5e:46:ab:6b:ab:80:82:37:64:c7:
e0:ed:dc:29:b2:61:8a:01:31:bf:70:04:cf:17:20:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:9A:97:FA:32:81:BE:EC:58:B8:20:17:FA:28:CA:4D:B2:AC:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/3d455df2-13d0-3992-9395-14a2c75ccdf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
X509v3 Authority Key Identifier:
keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:a2:80:53:2e:84:42:5e:57:4f:9d:b7:f2:bc:0c:81:05:46:
9b:55:68:2c:52:a4:8a:27:03:1e:7b:c1:4d:c9:83:1a:70:74:
f3:3e:5d:10:0c:79:ea:e4:19:9e:7d:08:67:36:ed:37:64:02:
96:d6:52:f7:0b:2f:c3:88:0c:b9:8f:41:7e:1a:e3:0b:ce:16:
db:a6:90:8e:27:a5:f7:20:ca:b4:16:05:af:14:02:b5:fa:cf:
2f:50:92:ef:e7:5b:fb:c4:48:2d:30:2f:c9:68:31:5d:aa:c3:
c6:b9:18:20:d2:75:6f:eb:39:4c:9b:06:1c:dd:e9:cd:c6:5c:
13:f7:df:3e:50:f0:f1:bb:f6:fb:a2:9c:3a:c5:51:ac:bc:42:
84:c4:29:21:98:8b:e1:1c:5f:01:b3:d4:fb:47:b6:40:14:fe:
46:70:8c:9e:8c:8f:38:47:f7:b3:d1:10:cc:08:50:3c:ea:a8:
e0:c7:df:5c:76:e5:b5:2b:f3:64:ca:49:3a:01:14:bc:9a:82:
e8:24:1f:d5:3d:60:fb:6d:d7:6b:5d:46:63:a6:80:ae:ae:0c:
7e:5b:b4:93:77:0c:20:68:3e:47:ad:be:1c:3d:fe:5a:0b:6b:
08:a9:54:49:f7:cd:b3:45:1b:40:ab:af:c3:2f:fd:fc:af:d9:
1b:59:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org