Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e26f8bff-b11a-3124-bd0f-646882fdb9cb.roa
File: e26f8bff-b11a-3124-bd0f-646882fdb9cb.roa (raw, json)
Hash identifier: yEDK+kuZSMbylPwJpScInoUubAUzEJtsjygDu3pqQNc=
Subject key identifier: B5:C1:94:46:ED:10:18:04:E0:CC:EC:54:7F:B6:E9:2F:54:10:4A:54
Certificate issuer: /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial: 010D0C9F43285847686B8EB642CFA09D71524400
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e26f8bff-b11a-3124-bd0f-646882fdb9cb.roa
Signing time: Wed 02 Oct 2024 13:00:42 +0000
ROA not before: Wed 02 Oct 2024 13:00:42 +0000
ROA not after: Tue 31 Dec 2024 14:00:42 +0000
asID: 13768
IP address blocks: 192.154.204.0/24 maxlen: 24
192.154.214.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:68:6b:8e:b6:42:cf:a0:9d:71:52:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
Validity
Not Before: Oct 2 13:00:42 2024 GMT
Not After : Dec 31 14:00:42 2024 GMT
Subject: CN=5f3ef04c-d064-4fbc-8120-69ff6ea56887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:a6:7b:ca:bc:e7:3f:46:17:dc:43:b9:cc:
13:06:e4:50:11:9a:73:8b:fd:f1:67:8d:d5:7f:cd:
5a:33:da:82:07:2a:f1:37:83:f3:0e:25:7b:48:de:
27:64:af:f1:5d:e4:6a:d1:0c:1b:38:a6:15:c6:af:
81:6e:66:b2:ec:08:84:fd:08:a0:55:70:0c:d7:a9:
e1:16:26:b1:d5:a0:ed:f5:7c:63:cb:b6:f2:96:7c:
55:1c:ea:2a:1b:38:d0:5d:68:23:65:15:85:91:8f:
b9:5b:48:3e:fb:cf:75:fa:4f:10:c2:7d:9a:b8:1f:
20:49:27:7b:19:cc:f6:7c:63:ad:12:61:8a:9d:68:
b7:ca:8d:a8:16:58:5c:2c:b1:16:1c:a9:d7:78:b9:
d2:36:74:b4:34:33:8f:de:d0:a3:19:62:09:65:85:
ab:ab:b4:e1:f5:b1:22:23:0f:53:57:36:06:a7:7b:
d3:69:6c:dd:1c:20:19:f0:39:4b:24:1b:66:3d:8e:
f7:94:d7:c0:62:7a:28:54:7c:73:13:79:69:f1:b5:
7f:df:63:c4:b0:da:a6:c1:a7:e6:ce:7a:16:63:b2:
f2:fc:66:8e:0d:12:7e:fc:91:41:b9:79:fd:60:76:
e3:74:6d:30:29:56:f6:91:8f:1e:1b:80:11:47:41:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:94:46:ED:10:18:04:E0:CC:EC:54:7F:B6:E9:2F:54:10:4A:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e26f8bff-b11a-3124-bd0f-646882fdb9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
X509v3 Authority Key Identifier:
keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.204.0/24
192.154.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:bf:7c:5f:ab:7a:01:ec:67:3b:f4:aa:dc:7c:e1:8c:9f:f3:
b7:fc:95:2e:8d:ee:67:d7:a5:2f:34:74:74:a4:af:af:bb:f8:
d8:15:f5:fe:4e:2a:92:54:d6:3d:c3:1e:ea:37:b6:2f:32:e8:
f8:33:08:d0:48:62:e6:8f:3c:4e:b0:df:fc:98:92:6d:b9:5e:
b0:61:3b:d3:fd:3a:f3:dd:33:f7:96:c1:33:18:5e:76:2e:d1:
1a:65:d8:d2:67:ec:7f:47:31:28:63:70:74:51:96:fd:c2:d6:
d8:a5:46:8e:90:5c:25:ed:42:ba:33:31:7c:2b:36:43:65:7d:
2e:03:4d:c1:f2:33:0c:27:14:c4:df:7a:08:4c:1a:f3:80:d9:
9f:78:07:dd:1d:8d:84:c0:07:fb:f0:3e:5a:ae:a0:90:9e:88:
84:2c:66:f1:7c:27:20:80:93:32:8c:a0:b9:ed:15:de:2c:2c:
36:fa:fb:89:11:6a:d6:8b:62:4d:15:25:56:d1:eb:6a:59:51:
84:d9:2c:06:4f:ad:f7:b4:12:c2:2d:52:8a:09:dd:7e:2a:a7:
e8:74:4c:ef:15:b7:a7:81:ee:7b:58:ad:91:16:3e:c9:2c:85:
cb:fb:01:fe:fc:bd:0b:29:f0:19:86:1e:e4:d7:57:79:4f:3a:
8d:4f:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 17:43:10 2024 by rpki-client on console-ams.rpki-client.org