Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/71657708-f268-32b0-a17a-f584a7a5b8b8.roa
File: 71657708-f268-32b0-a17a-f584a7a5b8b8.roa (raw, json)
Hash identifier: Uip2GCu5mw4ivfJMIVQ2+2nRCoohiagepF2gmcby8MM=
Subject key identifier: 82:5A:9B:46:E7:47:C7:6F:BB:D7:A9:88:31:22:7A:24:D4:B2:57:4F
Certificate issuer: /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial: 010D0C9F432858475BDB8506737C0F96C6449E80
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/71657708-f268-32b0-a17a-f584a7a5b8b8.roa
Signing time: Sat 28 Sep 2024 01:00:31 +0000
ROA not before: Sat 28 Sep 2024 01:00:31 +0000
ROA not after: Fri 27 Dec 2024 02:00:31 +0000
asID: 397373
IP address blocks: 192.154.205.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5b:db:85:06:73:7c:0f:96:c6:44:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
Validity
Not Before: Sep 28 01:00:31 2024 GMT
Not After : Dec 27 02:00:31 2024 GMT
Subject: CN=866c03f8-da75-457e-ab84-2a2108138793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:bf:b5:58:52:b3:39:00:d7:1c:fd:89:5c:
d9:d7:0e:b7:82:e5:b4:45:9a:af:cb:bf:43:37:83:
44:a1:a1:02:05:36:e1:af:f9:e7:a5:e4:70:e3:a0:
21:c4:7e:0b:2e:24:52:10:31:72:1c:33:d1:bb:fe:
1f:a2:8b:28:d8:7a:e0:86:53:f7:2e:0e:5e:8d:c2:
85:ea:0c:9b:b7:94:52:56:b0:63:60:e2:59:b1:9e:
71:1b:90:2c:16:47:15:aa:cd:46:e5:46:79:69:97:
fc:7c:fe:0c:1f:3e:d9:55:cc:3d:89:7c:81:7c:9f:
85:4e:e3:8e:e4:98:65:9b:e9:af:6d:3e:77:b2:c7:
88:9e:47:d2:f9:91:97:97:76:8d:95:5c:f6:7c:e4:
bd:5f:da:87:3c:b4:28:c9:74:89:d4:3e:b2:3b:c7:
62:fc:94:ff:fe:74:c1:11:9d:99:d3:31:48:da:14:
af:48:d2:1b:d6:7d:bb:a1:da:61:00:c5:24:48:4b:
cb:08:2b:0f:23:7d:6e:70:82:43:2b:b4:0e:2e:ca:
5c:c5:fc:60:09:46:d1:cc:83:e7:21:04:76:db:a9:
e2:4b:da:ee:0a:2e:bb:c8:88:67:94:ff:46:0f:04:
1d:e4:66:48:39:2f:5b:15:6f:50:06:27:39:95:71:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:9B:46:E7:47:C7:6F:BB:D7:A9:88:31:22:7A:24:D4:B2:57:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/71657708-f268-32b0-a17a-f584a7a5b8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
X509v3 Authority Key Identifier:
keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:6c:c4:2f:01:80:40:8f:14:83:a2:70:96:8f:bb:d8:8d:cb:
03:e1:8d:da:5e:46:c3:11:30:13:c9:33:ea:8c:0c:6c:4a:9a:
1d:f3:ff:b5:62:ad:61:b4:84:69:e7:1d:d7:f8:79:86:bd:db:
21:69:40:e4:dc:04:3d:93:99:95:68:c4:22:3f:23:eb:39:4f:
83:0f:9a:f9:73:6a:3d:db:3c:e5:97:9b:7e:f9:93:8e:33:16:
f4:69:10:68:bb:50:ff:82:65:fe:5b:48:b3:73:08:84:78:d6:
30:76:6d:1a:89:ed:05:43:9d:4f:ec:53:58:d5:f3:69:62:b7:
0b:f0:23:26:6a:bf:7a:be:11:c7:df:62:b0:fe:56:8e:49:f0:
32:bf:17:8d:fa:21:4a:d5:2a:b3:63:e2:8a:7a:6a:e4:89:0d:
e9:32:f4:a9:7c:92:5b:f2:df:a7:37:d3:1f:da:a9:5b:39:ab:
a1:16:9e:ef:5b:b1:d4:89:3e:0e:3f:08:e8:67:68:58:76:e3:
b2:20:39:e1:ff:32:7a:8f:91:eb:1d:7a:bf:4a:fc:e9:e0:6d:
f7:da:a8:2d:59:05:04:a3:27:8c:b4:1d:5f:d7:06:a6:7f:42:
a9:31:db:40:02:29:00:85:26:b3:cd:07:bb:f8:11:e7:90:cc:
17:7c:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org