Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c010cb66-82d9-33fe-81c8-27eebb6f5b7a.roa
File: c010cb66-82d9-33fe-81c8-27eebb6f5b7a.roa (raw, json)
Hash identifier: gNfx57noIxpxdhCXGEQi2BuDbAzNZs8BaZxwKeroARI=
Subject key identifier: C0:FD:22:6B:87:85:48:9C:8B:F2:39:65:A7:32:A7:58:FF:18:93:E0
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F432858425932C7091465DEB93B4496C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c010cb66-82d9-33fe-81c8-27eebb6f5b7a.roa
Signing time: Mon 26 Jun 2023 14:14:31 +0000
ROA not before: Mon 26 Jun 2023 14:14:31 +0000
ROA not after: Sun 24 Sep 2023 14:14:31 +0000
asID: 39521
IP address blocks: 64.186.131.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:59:32:c7:09:14:65:de:b9:3b:44:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jun 26 14:14:31 2023 GMT
Not After : Sep 24 14:14:31 2023 GMT
Subject: CN=7a216be0-b15b-490d-b194-6c938a6f5341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:be:e7:cc:01:a9:a3:b9:86:34:85:ac:9b:
67:44:4e:b4:bd:98:c9:1c:aa:84:f9:c7:90:e6:2e:
ab:ea:16:63:3d:8b:2a:de:eb:96:c5:cc:ef:e2:ab:
fc:ec:86:43:dc:6b:8e:d7:6c:2e:2f:97:1b:41:07:
e9:a2:32:2e:b0:8c:29:6c:68:d4:d7:62:0a:66:aa:
f6:97:b4:84:ce:cc:ea:7c:c8:86:04:31:91:d0:dc:
09:d3:b6:3f:03:15:ec:73:08:b5:9c:ed:9c:93:a2:
69:e2:78:2f:f7:1e:f2:06:a7:6b:d7:79:1a:69:60:
51:96:db:9a:10:99:49:a3:f1:4a:7b:5a:78:cd:e2:
57:91:bc:e3:78:e9:f0:51:b2:9d:67:a6:75:2a:c8:
49:8d:cb:3c:03:1c:15:9c:01:99:f5:88:0c:50:75:
e2:e2:3e:a5:91:59:66:72:ee:ca:52:b1:b7:4d:88:
92:15:da:e1:ed:d4:50:13:7e:11:c9:c4:a7:cb:3e:
31:27:3c:d8:14:dd:24:8e:7a:ee:09:3b:7a:7f:3c:
42:bd:61:36:af:ef:e2:23:59:05:bc:81:22:37:36:
27:80:73:61:88:1b:68:18:f3:de:0c:3a:42:dc:8b:
f4:59:29:67:28:fb:19:26:30:34:1c:9c:ad:57:42:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:22:6B:87:85:48:9C:8B:F2:39:65:A7:32:A7:58:FF:18:93:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c010cb66-82d9-33fe-81c8-27eebb6f5b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:19:20:69:cb:6d:c1:54:17:67:df:8a:d6:fb:9c:0d:4e:ef:
b9:09:96:b3:a9:cb:a1:05:9c:2c:a9:a0:79:1d:8d:7e:03:cb:
fe:d2:80:25:55:03:90:f5:b7:83:c9:9f:41:cd:c8:21:14:c3:
b3:35:85:7c:bc:18:61:d8:7f:29:23:da:1a:77:c3:e1:97:06:
62:93:b7:89:d9:5a:0e:2a:1b:16:6a:7b:96:a6:86:22:75:75:
15:33:1a:aa:f0:de:bc:d7:0f:05:c0:b3:8a:19:b2:af:97:81:
9e:cb:93:7b:8c:fe:12:d8:66:36:db:e2:42:5c:03:8f:53:c4:
50:5e:1c:e2:ae:ca:6a:ce:8e:61:c4:b4:bb:e3:2d:5c:85:31:
1a:eb:77:0b:03:14:9c:58:f7:49:6c:f6:24:0c:84:e9:f7:e1:
eb:b1:78:5f:f5:7d:4d:8e:fd:5d:54:60:84:b4:a3:05:a8:df:
3d:28:f7:64:97:51:65:13:16:0c:9b:b6:42:f6:4f:fa:ff:b1:
47:cd:ee:db:54:13:f8:3c:88:ae:8b:27:69:7c:59:98:59:ea:
71:b1:44:b5:d0:cd:2c:de:d1:87:10:c2:13:72:1b:24:0a:22:
ae:09:9b:7f:ec:e5:bf:2f:a8:3e:19:89:bc:04:a1:3b:30:a6:
82:16:1c:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJZMscJFGXeuTtElsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTIzMDYyNjE0MTQzMVoXDTIzMDkyNDE0MTQzMVowLzEtMCsGA1UEAxMk
N2EyMTZiZTAtYjE1Yi00OTBkLWIxOTQtNmM5MzhhNmY1MzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gy+58wBqaO5hjSFrJtnRE60vZjJHKqE+ceQ
5i6r6hZjPYsq3uuWxczv4qv87IZD3GuO12wuL5cbQQfpojIusIwpbGjU12IKZqr2
l7SEzszqfMiGBDGR0NwJ07Y/AxXscwi1nO2ck6Jp4ngv9x7yBqdr13kaaWBRltua
EJlJo/FKe1p4zeJXkbzjeOnwUbKdZ6Z1KshJjcs8AxwVnAGZ9YgMUHXi4j6lkVlm
cu7KUrG3TYiSFdrh7dRQE34RycSnyz4xJzzYFN0kjnruCTt6fzxCvWE2r+/iI1kF
vIEiNzYngHNhiBtoGPPeDDpC3Iv0WSlnKPsZJjA0HJytV0L+DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMD9ImuHhUici/I5Zacyp1j/GJPgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYzAxMGNiNjYtODJkOS0z
M2ZlLTgxYzgtMjdlZWJiNmY1YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkZIGnLbcFUF2ffitb7nA1O77kJlrOpy6EFnCypoHkdjX4Dy/7SgCVV
A5D1t4PJn0HNyCEUw7M1hXy8GGHYfykj2hp3w+GXBmKTt4nZWg4qGxZqe5amhiJ1
dRUzGqrw3rzXDwXAs4oZsq+XgZ7Lk3uM/hLYZjbb4kJcA49TxFBeHOKuymrOjmHE
tLvjLVyFMRrrdwsDFJxY90ls9iQMhOn34euxeF/1fU2O/V1UYIS0owWo3z0o92SX
UWUTFgybtkL2T/r/sUfN7ttUE/g8iK6LJ2l8WZhZ6nGxRLXQzSze0YcQwhNyGyQK
Iq4Jm3/s5b8vqD4ZibwEoTswpoIWHMU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org