Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/9f63e966-7856-3c45-a6b4-64b252ac1ac8.roa
File: 9f63e966-7856-3c45-a6b4-64b252ac1ac8.roa (raw, json)
Hash identifier: FAOVAKKG8PZnDG4rmI/mVb4EHs1UAejldWGaA2QcvZw=
Subject key identifier: 19:92:D9:93:E3:4C:C2:5A:39:5C:98:5A:15:67:71:57:6E:69:97:58
Certificate issuer: /CN=78840f5a-619f-4ff3-95b9-5b73beb3d2d9
Certificate serial: 010D0C9F432858439CE556D5A19A04A20F3AB040
Authority key identifier: 7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/9f63e966-7856-3c45-a6b4-64b252ac1ac8.roa
Signing time: Fri 20 Oct 2023 13:00:20 +0000
ROA not before: Fri 20 Oct 2023 13:00:20 +0000
ROA not after: Thu 18 Jan 2024 14:00:20 +0000
asID: 208398
IP address blocks: 100.43.64.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9c:e5:56:d5:a1:9a:04:a2:0f:3a:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78840f5a-619f-4ff3-95b9-5b73beb3d2d9
Validity
Not Before: Oct 20 13:00:20 2023 GMT
Not After : Jan 18 14:00:20 2024 GMT
Subject: CN=203f194b-6065-4b7c-bebd-c5d970d95054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:f1:76:9c:c9:b8:f7:f4:80:a2:4d:ca:cc:
9f:43:ae:f4:bc:9f:6f:2e:a0:37:36:82:ff:45:ee:
5f:d3:a8:ac:20:0d:3e:20:c7:1c:c6:39:ce:da:a4:
a9:b1:96:5c:00:f6:7b:c1:3e:c4:d8:dd:58:6f:2a:
88:46:e9:7f:30:a4:b3:11:3d:06:57:6d:7a:08:58:
a2:5d:23:c9:9a:a2:e9:15:c4:b8:ab:f8:5f:2f:f3:
4a:34:df:a1:59:65:1e:22:67:03:9b:92:ea:8e:ca:
62:09:e3:ea:b9:55:56:5e:3e:82:36:09:72:9a:16:
d3:c7:53:ce:c3:99:07:9a:c0:81:63:12:98:f6:09:
8e:6c:af:01:3e:be:a3:f0:27:66:af:4a:bf:a6:86:
f0:56:0f:87:6e:d2:ef:b0:1f:e5:e0:3b:7e:5f:cb:
86:59:e8:82:de:69:4d:72:6f:42:37:20:ca:01:06:
72:91:10:46:46:9a:4f:0a:18:0d:a9:d9:9b:eb:91:
b0:94:bc:26:e7:f3:a3:0d:39:e9:cb:b7:b7:02:89:
62:f1:49:47:59:ae:24:be:61:8d:27:3e:4f:e4:93:
f3:1c:7e:c8:07:cd:7c:25:49:7a:0c:a3:7d:52:b2:
18:73:ed:c1:32:7c:85:2e:fa:69:6b:14:c0:18:ec:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:D9:93:E3:4C:C2:5A:39:5C:98:5A:15:67:71:57:6E:69:97:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/9f63e966-7856-3c45-a6b4-64b252ac1ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.crl
X509v3 Authority Key Identifier:
keyid:7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer
sbgp-ipAddrBlock: critical
IPv4:
100.43.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:57:81:3d:f6:7d:c3:44:40:a5:5a:d9:10:b3:12:9f:c1:55:
e3:6f:30:bd:c2:94:b2:0f:e7:bc:cb:1a:db:89:e2:b7:5d:53:
df:d5:95:30:b4:ab:9b:43:fc:1b:94:e5:10:b6:6d:aa:e0:84:
e3:04:52:b7:5c:bc:50:f7:ac:23:3a:0b:60:c8:08:ea:f4:2a:
86:ca:37:26:1f:3c:dc:da:74:ac:24:77:cd:d8:8a:cd:c4:3f:
67:8c:e0:0f:30:f2:a3:c9:67:18:74:bd:73:7e:44:6a:67:f5:
1e:ef:b8:30:05:2e:1c:91:f5:f0:19:71:a4:56:6f:2c:ea:ab:
d6:0e:e3:29:60:f6:5f:66:7b:c9:d5:7c:5a:16:3a:63:e2:32:
d9:cf:af:87:1f:d6:c8:f4:ee:ac:99:ed:73:ec:d5:47:8b:94:
09:3d:f4:34:6d:e5:50:f0:7a:a7:76:4a:f2:d9:3f:bd:31:27:
bf:c3:a1:0a:48:e1:47:d5:17:94:4d:c7:c3:90:16:60:ff:de:
a2:72:cb:a3:a7:58:34:06:72:c2:46:ef:f8:eb:4e:e3:c6:98:
75:af:6e:2a:fd:04:71:13:00:66:f3:92:b3:7b:61:ad:27:07:
da:10:1c:bb:20:21:02:5c:d0:aa:80:4d:14:f1:78:43:19:f7:
a2:e6:b9:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOc5VbVoZoEog86sEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4NDBmNWEtNjE5Zi00ZmYzLTk1YjktNWI3M2JlYjNk
MmQ5MB4XDTIzMTAyMDEzMDAyMFoXDTI0MDExODE0MDAyMFowLzEtMCsGA1UEAxMk
MjAzZjE5NGItNjA2NS00YjdjLWJlYmQtYzVkOTcwZDk1MDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tzxdpzJuPf0gKJNysyfQ670vJ9vLqA3NoL/
Re5f06isIA0+IMccxjnO2qSpsZZcAPZ7wT7E2N1YbyqIRul/MKSzET0GV216CFii
XSPJmqLpFcS4q/hfL/NKNN+hWWUeImcDm5LqjspiCePquVVWXj6CNglymhbTx1PO
w5kHmsCBYxKY9gmObK8BPr6j8Cdmr0q/pobwVg+HbtLvsB/l4Dt+X8uGWeiC3mlN
cm9CNyDKAQZykRBGRppPChgNqdmb65GwlLwm5/OjDTnpy7e3Aoli8UlHWa4kvmGN
Jz5P5JPzHH7IB818JUl6DKN9UrIYc+3BMnyFLvppaxTAGOxMowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmS2ZPjTMJaOVyYWhVncVduaZdYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODg0
MGY1YS02MTlmLTRmZjMtOTViOS01YjczYmViM2QyZDkvOWY2M2U5NjYtNzg1Ni0z
YzQ1LWE2YjQtNjRiMjUyYWMxYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4NDBmNWEtNjE5Zi00ZmYzLTk1
YjktNWI3M2JlYjNkMmQ5Lzc4ODQwZjVhLTYxOWYtNGZmMy05NWI5LTViNzNiZWIz
ZDJkOS5jcmwwHwYDVR0jBBgwFoAUfH3MHWR/MfRzvET1c1YrAk4wS+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODg0MGY1YS02MTlmLTRmZjMtOTViOS01Yjcz
YmViM2QyZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFZCtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtXgT32fcNEQKVa2RCzEp/BVeNvML3ClLIP57zLGtuJ4rddU9/VlTC0
q5tD/BuU5RC2barghOMEUrdcvFD3rCM6C2DICOr0KobKNyYfPNzadKwkd83Yis3E
P2eM4A8w8qPJZxh0vXN+RGpn9R7vuDAFLhyR9fAZcaRWbyzqq9YO4ylg9l9me8nV
fFoWOmPiMtnPr4cf1sj07qyZ7XPs1UeLlAk99DRt5VDweqd2SvLZP70xJ7/DoQpI
4UfVF5RNx8OQFmD/3qJyy6OnWDQGcsJG7/jrTuPGmHWvbir9BHETAGbzkrN7Ya0n
B9oQHLsgIQJc0KqATRTxeEMZ96LmufU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org