Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/7c169064-695a-3e6c-b262-0236358ad229.roa
File: 7c169064-695a-3e6c-b262-0236358ad229.roa (raw, json)
Hash identifier: mU4rIzOXRG8Do+NQnPL+/9nw5oRrvttaH9gDF0ZSkg4=
Subject key identifier: C8:5A:EA:48:EA:47:51:D6:C2:C6:47:0C:D3:1A:9B:97:4A:DD:E3:53
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584221F32F3F1C4BE8665F43A640
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/7c169064-695a-3e6c-b262-0236358ad229.roa
Signing time: Tue 06 Jun 2023 19:16:55 +0000
ROA not before: Tue 06 Jun 2023 19:16:55 +0000
ROA not after: Mon 04 Sep 2023 19:16:55 +0000
asID: 39521
IP address blocks: 64.186.131.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:21:f3:2f:3f:1c:4b:e8:66:5f:43:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jun 6 19:16:55 2023 GMT
Not After : Sep 4 19:16:55 2023 GMT
Subject: CN=27f93e73-c9da-4827-ba03-0d1c6a8a3bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:23:df:5d:51:ea:f4:fd:32:85:fb:c2:14:
05:ac:8f:6c:41:2a:e1:fa:bc:81:7a:8f:9f:86:b1:
76:2c:de:7c:0f:5a:3b:aa:92:4f:42:fd:00:a4:c1:
ae:c7:13:11:f2:2c:74:a0:8e:7f:80:31:f5:d2:86:
e6:6e:f3:57:19:1f:e4:8e:92:cb:ac:26:35:97:2a:
6d:0f:9b:bb:fd:57:5f:03:bc:1e:dd:e7:0a:64:7b:
c1:ae:31:22:58:24:58:af:fe:83:7a:fb:a9:d5:34:
8a:46:0d:ae:a4:3f:aa:88:c0:54:dd:88:1a:2d:6a:
db:01:6a:0e:14:74:d2:c0:0b:81:0e:34:6c:31:10:
a5:ae:a2:e8:89:26:ae:1a:48:9b:0b:a2:c7:ac:6d:
10:fc:03:39:96:72:55:73:fd:4c:ff:35:68:b9:b7:
bf:95:4f:22:68:b1:77:ac:41:78:b9:d7:87:0b:e7:
00:be:2d:cf:8c:5e:b5:ef:cc:d8:84:bf:d6:59:e2:
de:3e:01:6d:66:f8:2c:8f:2d:93:e9:17:bf:4e:bf:
2e:e9:75:a1:ac:b0:8c:a9:71:a5:7f:10:32:5d:89:
3a:c3:51:00:50:9c:1e:92:04:13:13:39:d2:e8:b6:
fb:59:c2:bf:5d:24:f0:60:49:01:14:51:2d:a9:c1:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:EA:48:EA:47:51:D6:C2:C6:47:0C:D3:1A:9B:97:4A:DD:E3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/7c169064-695a-3e6c-b262-0236358ad229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:62:88:e8:a2:47:ae:d5:9a:75:04:81:72:94:40:80:7f:76:
62:df:21:a1:5a:63:ac:54:b5:3a:3c:a7:23:7b:17:07:e4:05:
0d:99:2d:2d:80:be:52:dc:ba:23:0f:07:bf:6e:87:10:69:56:
40:a2:f8:92:a0:46:72:75:3a:7d:6d:c1:9d:df:d3:21:65:d9:
e1:df:90:2d:08:eb:05:2a:3b:1b:92:9f:f4:eb:86:4f:60:b2:
66:bf:6b:17:5c:a9:c9:fc:44:7d:1b:b1:d8:75:68:37:40:dd:
d7:3e:2a:23:73:59:53:4a:b2:da:d1:49:a2:a8:4e:2a:02:04:
c9:49:0e:ef:9b:14:e1:5f:ba:eb:32:17:82:54:20:1a:be:86:
bb:b7:22:66:96:75:ac:cc:1f:21:df:b6:c5:ae:a2:18:8f:54:
05:fd:8a:86:e0:80:60:57:0c:c2:bd:64:ad:ce:a7:2d:ca:07:
ed:86:60:d2:65:98:d1:e8:b4:a0:dc:60:b4:38:e0:80:78:18:
3c:10:51:f4:8b:7b:8a:d2:53:d1:10:d4:33:7d:f5:ec:58:aa:
03:3e:f1:46:0c:32:bc:2b:c8:fc:90:07:a7:25:97:5f:e9:d3:
62:26:2b:e9:00:90:a4:17:0a:d9:d1:8c:0c:62:24:fa:f3:50:
0d:e4:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org