Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/51d7bd31-8b10-3ffa-baf6-5da41105975c.roa
File: 51d7bd31-8b10-3ffa-baf6-5da41105975c.roa (raw, json)
Hash identifier: dLZ+XJZkjsK8X+QZllpPJiENsdZxmM97pe8cJPNS+2E=
Subject key identifier: D9:DF:95:D2:2C:09:4F:5C:4A:9C:7B:CE:9A:62:B9:AF:1C:80:7B:E3
Certificate issuer: /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial: 010D0C9F432858444484289E88BFEC34D171EC00
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/51d7bd31-8b10-3ffa-baf6-5da41105975c.roa
Signing time: Tue 19 Dec 2023 14:00:20 +0000
ROA not before: Tue 19 Dec 2023 14:00:20 +0000
ROA not after: Mon 18 Mar 2024 13:00:20 +0000
asID: 14618
IP address blocks: 204.75.186.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:44:84:28:9e:88:bf:ec:34:d1:71:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
Validity
Not Before: Dec 19 14:00:20 2023 GMT
Not After : Mar 18 13:00:20 2024 GMT
Subject: CN=9a19bbb5-da92-4038-b910-41a88a7b7720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:90:ba:02:50:57:50:11:c2:03:e8:d1:83:
3e:5d:83:a1:b7:3a:bd:0a:41:ba:4c:86:1b:f0:ae:
ff:56:f6:22:6f:66:7f:4b:fd:6c:ac:c9:0f:c6:cc:
71:62:5f:39:5e:5b:ee:7c:d5:98:f4:de:e8:57:25:
7e:55:43:a4:05:06:03:0f:e5:e8:ad:5d:d2:9f:94:
52:50:ac:c3:b9:1a:fc:d6:10:0a:2e:9c:80:ae:4e:
ff:39:fb:0c:42:ca:f5:2b:98:51:b0:b7:be:86:45:
fe:09:2e:eb:62:39:5c:ae:93:ed:43:7d:88:3d:f7:
94:cb:93:97:d0:76:67:72:e0:cc:0f:45:9a:e0:50:
af:18:97:be:21:f8:1c:8f:58:c1:11:a2:bc:06:e8:
df:56:11:ed:f5:9c:4c:f2:b1:6e:9e:27:0d:56:d7:
72:ce:dd:8a:98:ce:20:fd:ba:28:64:42:1b:b4:c9:
6f:99:34:80:e3:a0:8c:49:73:d3:23:1a:13:6c:ab:
9f:c1:dd:3e:91:98:de:97:dd:09:86:bb:1a:5b:c4:
fd:86:63:3d:56:dd:03:aa:be:c3:09:8f:16:12:52:
7a:2f:a9:06:fd:a5:5a:c5:b1:9d:c2:dc:b4:96:07:
ce:e1:52:4c:40:ac:e9:d7:23:2d:9a:25:3c:50:10:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:95:D2:2C:09:4F:5C:4A:9C:7B:CE:9A:62:B9:AF:1C:80:7B:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/51d7bd31-8b10-3ffa-baf6-5da41105975c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl
X509v3 Authority Key Identifier:
keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
sbgp-ipAddrBlock: critical
IPv4:
204.75.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:02:30:de:ac:02:c4:5d:e3:d9:19:de:9f:2e:81:a2:e6:0b:
81:3e:9b:b6:20:d8:95:6b:56:07:bb:10:d8:94:ca:ec:77:58:
88:f7:ef:a8:72:1e:bb:ea:62:1c:12:fd:b1:39:e1:bf:91:0d:
c5:36:29:d1:3d:7f:16:da:b8:82:d0:e8:8d:14:a9:39:ce:18:
de:bf:a0:8e:f9:f3:d2:60:94:1b:ae:08:2b:f8:87:20:be:2a:
f1:54:00:0f:17:a7:75:e6:d3:ec:dc:a8:f7:7d:40:ee:d0:ff:
32:0f:6f:f2:2a:5d:cc:d0:4a:01:2a:fa:e1:01:14:72:67:90:
f0:9b:f9:a2:ac:5b:a7:8a:61:29:2a:e1:32:e4:92:95:db:45:
cf:be:4d:49:9d:f8:f9:af:d3:93:8d:5e:d5:ac:bf:a7:9b:10:
03:b9:fe:da:73:db:64:cd:ab:9b:07:db:54:03:a5:07:bd:0f:
63:a2:fe:95:f6:d5:fb:1a:76:51:ac:d0:eb:e5:cc:ab:88:3e:
58:05:73:92:60:ad:7f:a4:1d:ce:5a:0e:94:9b:81:53:04:f1:
2e:6a:fe:59:98:3b:65:57:5d:ae:e5:63:fb:19:64:32:28:29:
b8:66:42:1a:27:36:2b:cd:6d:0a:75:43:86:cf:44:95:78:96:
3c:bc:ce:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEREhCieiL/sNNFx7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRhNTQ4OWMtOTQzZC00OTVhLTk5NWEtZWUxZDE2MDQ5
ZDI5MB4XDTIzMTIxOTE0MDAyMFoXDTI0MDMxODEzMDAyMFowLzEtMCsGA1UEAxMk
OWExOWJiYjUtZGE5Mi00MDM4LWI5MTAtNDFhODhhN2I3NzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDyQugJQV1ARwgPo0YM+XYOhtzq9CkG6TIYb
8K7/VvYib2Z/S/1srMkPxsxxYl85XlvufNWY9N7oVyV+VUOkBQYDD+XorV3Sn5RS
UKzDuRr81hAKLpyArk7/OfsMQsr1K5hRsLe+hkX+CS7rYjlcrpPtQ32IPfeUy5OX
0HZncuDMD0Wa4FCvGJe+Ifgcj1jBEaK8BujfVhHt9ZxM8rFunicNVtdyzt2KmM4g
/booZEIbtMlvmTSA46CMSXPTIxoTbKufwd0+kZjel90JhrsaW8T9hmM9Vt0Dqr7D
CY8WElJ6L6kG/aVaxbGdwty0lgfO4VJMQKzp1yMtmiU8UBB0twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnfldIsCU9cSpx7zppiua8cgHvjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGE1
NDg5Yy05NDNkLTQ5NWEtOTk1YS1lZTFkMTYwNDlkMjkvNTFkN2JkMzEtOGIxMC0z
ZmZhLWJhZjYtNWRhNDExMDU5NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRhNTQ4OWMtOTQzZC00OTVhLTk5
NWEtZWUxZDE2MDQ5ZDI5LzlkYTU0ODljLTk0M2QtNDk1YS05OTVhLWVlMWQxNjA0
OWQyOS5jcmwwHwYDVR0jBBgwFoAUaHtP8isvLA3Q1smJ/wBcoaVQuVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGE1NDg5Yy05NDNkLTQ5NWEtOTk1YS1lZTFk
MTYwNDlkMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwCMN6sAsRd49kZ3p8ugaLmC4E+m7Yg2JVrVge7ENiUyux3WIj376hy
HrvqYhwS/bE54b+RDcU2KdE9fxbauILQ6I0UqTnOGN6/oI7589JglBuuCCv4hyC+
KvFUAA8Xp3Xm0+zcqPd9QO7Q/zIPb/IqXczQSgEq+uEBFHJnkPCb+aKsW6eKYSkq
4TLkkpXbRc++TUmd+Pmv05ONXtWsv6ebEAO5/tpz22TNq5sH21QDpQe9D2Oi/pX2
1fsadlGs0OvlzKuIPlgFc5JgrX+kHc5aDpSbgVME8S5q/lmYO2VXXa7lY/sZZDIo
KbhmQhonNivNbQp1Q4bPRJV4ljy8zvI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org