Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e005d7ca-6a93-399e-9639-d08e91c3ba87.roa
File: e005d7ca-6a93-399e-9639-d08e91c3ba87.roa (raw, json)
Hash identifier: YXY6d51gdQGYjPxlZrTdwL7eGhqVAJ0iDfiLQM4dT4s=
Subject key identifier: C6:10:44:A1:DE:2F:6E:0A:53:E7:C4:2B:16:4C:E8:D7:B4:38:45:CF
Certificate issuer: /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial: 010D0C9F43285847600B9A01267CA1E799119580
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e005d7ca-6a93-399e-9639-d08e91c3ba87.roa
Signing time: Sun 29 Sep 2024 13:00:41 +0000
ROA not before: Sun 29 Sep 2024 13:00:41 +0000
ROA not after: Sat 28 Dec 2024 14:00:41 +0000
asID: 199856
IP address blocks: 192.154.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:60:0b:9a:01:26:7c:a1:e7:99:11:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
Validity
Not Before: Sep 29 13:00:41 2024 GMT
Not After : Dec 28 14:00:41 2024 GMT
Subject: CN=f3e98efa-89e5-40e3-8d56-8e0eb35f4ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:8c:a5:40:de:e7:ea:79:31:fd:38:fb:f4:
f9:10:8f:6a:69:09:2f:b8:dd:8a:e1:55:0e:8a:45:
9e:64:c7:bb:d6:70:78:ee:30:a2:d9:fa:e5:c2:dd:
01:46:67:b7:d1:e6:ca:78:fa:47:9c:90:26:44:1d:
3a:88:02:00:aa:06:0a:94:95:2e:65:73:db:c1:c1:
61:f9:ba:2f:03:e0:36:b6:4c:a6:e1:b0:52:55:fb:
af:76:c3:2c:61:fb:91:26:04:3c:fe:80:64:4e:4f:
d8:04:e4:6f:66:c1:4b:dc:86:18:2e:93:67:2c:53:
2a:fb:98:30:61:fc:25:2b:59:a3:fd:70:95:42:17:
12:90:3d:60:7e:43:c3:9d:af:43:e7:45:2f:3b:44:
50:11:a2:b5:42:5e:02:c1:45:70:4e:5e:b6:8f:2d:
26:ec:f2:84:5d:d3:30:97:ee:c9:68:a0:f0:9c:0d:
67:f3:e1:73:7f:a4:42:4b:df:c8:1d:e2:77:7b:f7:
31:26:51:1c:2a:15:ec:44:f4:cf:7b:25:f8:ab:10:
48:54:b6:0b:90:15:2d:2e:7c:e0:09:82:84:f4:c1:
5b:5b:98:39:36:06:28:71:e5:db:14:4e:bb:d5:50:
55:9b:2b:8a:01:a3:10:32:d0:8b:58:b0:ab:b6:ea:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:10:44:A1:DE:2F:6E:0A:53:E7:C4:2B:16:4C:E8:D7:B4:38:45:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e005d7ca-6a93-399e-9639-d08e91c3ba87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
X509v3 Authority Key Identifier:
keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f5:95:94:29:41:84:ea:72:e8:90:0d:68:55:82:28:52:1c:
30:ac:e0:38:49:23:0f:3b:38:60:d2:fc:2d:fe:4b:e8:14:36:
09:76:ce:de:6c:f7:20:70:2b:26:75:33:a3:45:d7:b0:64:ce:
97:9c:8d:1f:5f:b3:7b:2d:cb:09:35:93:67:fd:d5:bf:09:1c:
11:d8:22:63:fb:1e:cc:de:6f:52:3d:f2:e9:e1:a1:02:97:93:
75:36:3c:88:95:60:c4:e6:f8:45:47:40:db:b2:09:1f:bc:6c:
f2:ae:fc:98:1f:b1:df:6b:31:f0:05:29:97:cc:fa:12:b1:c4:
96:77:56:74:9c:99:57:52:89:cb:2e:7b:7f:af:8d:e2:50:2f:
c6:11:00:14:ec:8e:4f:3a:a0:7a:06:d8:aa:15:7f:ca:cc:a4:
eb:b9:b8:f3:6d:59:dd:20:ff:73:5a:18:f0:cb:11:7d:2e:5f:
ea:62:55:33:25:dd:94:b8:9d:c9:09:3a:f9:0c:f1:d1:3b:64:
6c:6f:02:3e:a8:71:1b:fa:a3:4f:14:da:18:98:b6:6a:0d:ac:
4c:ab:ea:54:30:1e:44:b3:55:73:99:3f:4e:57:e5:05:6b:2e:
94:30:89:89:02:b6:11:49:c9:fc:ce:5b:bb:03:4e:74:e5:62:
f1:98:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org