Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c4e6fe31-0d91-3898-acf1-294a012a39a6.roa
File: c4e6fe31-0d91-3898-acf1-294a012a39a6.roa (raw, json)
Hash identifier: AJV2ngZ/ezJj0C/WBCoiBrCdVQa3U6tJ6dl0KV5642s=
Subject key identifier: B3:C4:36:DB:3B:D7:D1:B8:66:3D:54:6A:9B:32:6A:69:4C:9A:BC:C3
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F432858425314BB750F5F7001150D1900
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c4e6fe31-0d91-3898-acf1-294a012a39a6.roa
Signing time: Sat 24 Jun 2023 09:39:08 +0000
ROA not before: Sat 24 Jun 2023 09:39:08 +0000
ROA not after: Fri 22 Sep 2023 09:39:08 +0000
asID: 43260
IP address blocks: 64.186.132.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:53:14:bb:75:0f:5f:70:01:15:0d:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jun 24 09:39:08 2023 GMT
Not After : Sep 22 09:39:08 2023 GMT
Subject: CN=60f52e51-e7dc-4fa6-94b5-cfab0e46f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:3a:6a:94:cd:d2:5d:92:74:eb:dc:03:d9:
b3:ad:1d:78:ee:db:c9:44:83:7a:c6:58:53:ea:53:
9b:a6:7b:ea:6c:0f:81:49:36:aa:66:cc:37:7a:ab:
aa:28:8b:94:45:4b:77:73:11:27:6a:d8:09:b6:dc:
81:75:4a:46:3a:de:fa:a7:60:03:65:ca:83:66:d0:
54:6c:36:af:b7:4b:8d:45:09:a6:55:20:20:9c:d2:
57:16:f5:c8:f3:af:43:41:95:43:be:ae:71:9e:e4:
fd:73:46:94:6c:26:55:15:bd:06:11:5f:a3:92:11:
4d:3b:2d:a5:09:be:39:c8:1f:7a:05:f6:70:85:48:
77:7b:33:ff:c4:4e:57:f2:1d:80:28:a3:84:44:d1:
58:3a:48:b6:9c:9a:5d:04:0a:db:e6:55:14:6f:3d:
82:9e:9c:64:0e:af:23:e2:e5:a5:d3:22:8f:55:ac:
56:ee:6d:df:e0:f6:46:ba:62:89:83:24:4e:3d:7b:
b7:a3:6d:f9:8d:ba:72:9a:21:8c:81:28:ad:b8:13:
f2:fe:af:f2:77:3a:e2:11:fb:ca:2e:d1:01:8d:b5:
7c:e1:5c:d5:79:17:17:03:37:57:61:ea:54:db:18:
17:a8:9f:7d:45:af:e4:14:b0:06:94:79:82:af:99:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:36:DB:3B:D7:D1:B8:66:3D:54:6A:9B:32:6A:69:4C:9A:BC:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c4e6fe31-0d91-3898-acf1-294a012a39a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:13:89:fe:e4:25:ef:3d:aa:d3:dd:fd:e1:97:f4:3c:65:b1:
25:c5:ab:66:f6:66:23:40:43:4e:89:ce:de:fa:dc:8f:4e:64:
c3:8d:b6:2f:d0:c2:ba:ae:a1:14:8d:bb:ab:70:12:37:95:34:
88:4f:d7:cb:cd:c9:24:19:7b:93:91:a9:3f:b1:22:7c:5e:c0:
2a:24:af:74:5e:86:15:9e:54:a9:77:4b:b2:92:4e:c6:10:b9:
e9:d8:27:6e:d4:b7:40:bc:48:f3:c6:d4:fb:f3:ee:1e:c1:31:
21:be:58:6e:5e:ed:0c:0a:e5:11:df:52:59:28:a0:44:f0:37:
bb:ab:64:7e:6d:26:17:52:d9:fe:af:80:32:ae:e8:1f:52:19:
8b:78:55:3d:83:aa:91:2f:ec:5d:13:6f:8b:af:38:8a:5e:87:
d4:79:e2:4f:cd:33:41:dc:fd:13:26:b3:be:ea:c9:b5:9c:55:
ac:3f:58:f5:cb:2d:c5:68:49:5b:f6:8a:0d:34:e7:d0:c2:74:
e4:74:bb:78:90:e2:d1:3e:d1:64:82:f1:2d:40:9b:2e:f3:67:
7a:23:ee:c7:4d:fa:4b:60:8b:49:d6:78:93:6f:3e:0e:c5:e2:
36:b8:22:26:ca:e3:27:06:95:c8:28:77:51:3a:6a:7f:94:a6:
67:ff:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org