Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/39c17460-07e7-3cfb-9f4c-1cba3235b06b.roa
File: 39c17460-07e7-3cfb-9f4c-1cba3235b06b.roa (raw, json)
Hash identifier: AAGC3uK0Hz/E8obAqGqHH3jyJqPgugKyodUFfaz3y/k=
Subject key identifier: F9:73:9A:9B:07:DE:DA:FD:A3:D2:44:C1:EB:61:7C:50:7F:CD:16:AD
Certificate issuer: /CN=8a51dfd1-7ee3-4268-b22f-5f94c97d631b
Certificate serial: 010D0C9F4328583C910CB7399A6B6B5B81562400
Authority key identifier: 1B:67:24:CF:BE:F2:80:32:84:08:FD:2A:D7:1B:E5:9B:BB:A4:4F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/39c17460-07e7-3cfb-9f4c-1cba3235b06b.roa
Signing time: Tue 09 Apr 2019 04:00:00 +0000
ROA not before: Tue 09 Apr 2019 04:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 33361
IP address blocks: 204.15.32.0/21 maxlen: 24
208.89.48.0/21 maxlen: 24
199.83.240.0/22 maxlen: 24
2605:b000::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:91:0c:b7:39:9a:6b:6b:5b:81:56:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a51dfd1-7ee3-4268-b22f-5f94c97d631b
Validity
Not Before: Apr 9 04:00:00 2019 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e49c9315-db0d-459c-9d81-6d913d45c6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:16:20:bc:a8:83:ea:5a:e3:e4:34:ca:60:
1a:0e:11:06:09:ad:b1:99:fb:ff:f3:2e:e2:52:b6:
28:72:f2:29:65:6a:9e:ac:eb:d0:9a:32:7a:48:8e:
36:2f:89:45:c3:a7:73:ba:d2:a4:f9:07:53:f7:92:
e3:a6:57:e4:78:5a:8d:a4:2b:f3:82:2d:4d:02:76:
17:7e:49:4e:69:99:b2:bf:e8:26:0b:8e:05:69:d8:
e8:a5:3c:9b:0b:92:1f:86:53:6d:8f:4b:20:37:62:
6f:51:ef:12:bf:32:23:f5:2c:33:51:a9:ae:a2:69:
85:65:61:ed:22:9b:b7:a5:4f:a9:d1:5e:ce:84:e8:
83:43:77:f8:c1:fe:6a:68:5a:53:cb:3c:f3:47:90:
9e:87:b8:13:2f:94:bd:73:32:88:22:7a:0e:b9:00:
c2:6c:c7:03:27:01:5b:a5:10:20:a3:15:5e:01:3a:
37:a3:88:de:6c:63:b7:a0:ae:af:a5:9f:46:00:a1:
ee:ff:8f:70:b5:80:b2:64:3e:f6:de:0b:4f:cd:c3:
45:9e:7c:de:61:63:d5:f7:20:cf:3d:19:9e:a6:39:
2b:d6:a5:1c:31:d3:fb:16:24:8f:45:e1:cc:ba:23:
3a:c8:46:dd:6c:61:f7:fa:01:4a:63:3e:e2:2c:78:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:9A:9B:07:DE:DA:FD:A3:D2:44:C1:EB:61:7C:50:7F:CD:16:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/39c17460-07e7-3cfb-9f4c-1cba3235b06b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.crl
X509v3 Authority Key Identifier:
keyid:1B:67:24:CF:BE:F2:80:32:84:08:FD:2A:D7:1B:E5:9B:BB:A4:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.83.240.0/22
204.15.32.0/21
208.89.48.0/21
IPv6:
2605:b000::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:18:c3:55:16:d6:4e:16:5c:83:3a:76:e1:1c:ca:22:7b:e1:
9d:10:03:52:51:91:44:b4:73:b4:e7:9e:2d:68:bd:6c:25:00:
db:fb:87:9a:a6:fa:69:80:e8:05:c0:f6:42:bf:32:c4:15:7d:
ec:48:f3:14:59:08:c1:8f:ff:52:aa:d1:f6:45:2a:da:c6:5f:
f5:f5:63:e7:11:53:33:8b:2e:8d:41:41:6a:d8:57:1d:be:89:
6d:ef:bf:99:0b:3d:9e:2f:21:b6:9e:ae:36:25:39:18:ad:f3:
2d:98:63:36:c3:f6:d7:f7:3c:b5:9b:9b:2a:0e:cb:80:ed:2a:
71:f2:55:d5:91:d3:3c:16:7d:23:57:e4:10:d9:64:7f:64:5f:
f6:33:c9:a2:52:94:f0:11:61:7a:9d:96:40:6f:4e:ad:65:99:
70:be:3e:30:35:f8:93:f2:62:eb:12:18:ad:39:0b:3e:22:6d:
d6:2a:fd:60:3b:04:ca:66:d2:62:ca:68:40:a8:94:4e:68:15:
10:e6:24:6e:55:4a:eb:55:f0:f3:85:ab:65:b8:2a:9e:c0:14:
ee:fe:ea:63:ff:1e:4b:7b:fd:ad:ee:82:db:11:f8:cc:29:58:
d3:e2:66:be:46:4b:a0:39:00:82:53:9c:3b:d1:5f:15:dc:30:
93:2d:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org