Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/684d4c8e-63e6-3d5b-b509-70c5eed982ad.roa
File: 684d4c8e-63e6-3d5b-b509-70c5eed982ad.roa (raw, json)
Hash identifier: ZufLbCbFZQKygDesG2Kc57l/raATSDKTFoCjKzphK2Q=
Subject key identifier: C8:A2:42:E3:5F:07:C3:55:D5:1A:31:CA:71:4D:E4:90:97:CA:AC:CD
Certificate issuer: /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial: 010D0C9F4328584444842443FF3FEC54DA88A980
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/684d4c8e-63e6-3d5b-b509-70c5eed982ad.roa
Signing time: Tue 19 Dec 2023 14:00:20 +0000
ROA not before: Tue 19 Dec 2023 14:00:20 +0000
ROA not after: Mon 18 Mar 2024 13:00:20 +0000
asID: 14618
IP address blocks: 204.75.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:44:84:24:43:ff:3f:ec:54:da:88:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
Validity
Not Before: Dec 19 14:00:20 2023 GMT
Not After : Mar 18 13:00:20 2024 GMT
Subject: CN=60f9211e-b598-4401-b6ed-6c756d8b78c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:ce:c7:c9:4b:3a:3c:99:f1:1c:e2:b5:44:
74:b5:6a:95:7f:96:20:70:6f:ab:a7:10:02:14:2d:
50:f4:f6:6c:14:8c:ba:74:ca:8e:4d:56:b0:88:a2:
f9:b8:d5:0c:12:a1:d5:8e:ee:dc:85:8d:0e:7d:10:
33:08:1c:d1:0c:ad:36:fa:c0:72:8f:db:8c:f0:19:
51:14:39:d9:5f:be:67:85:fd:d5:5c:be:20:9a:e5:
9b:b0:1d:b7:96:62:94:2e:b6:06:db:e1:1b:8e:3f:
77:d7:de:35:1a:0b:14:ef:77:b7:f1:7d:76:72:4b:
32:e6:d3:1e:5f:0b:c9:95:06:d1:8c:de:da:85:43:
83:91:c2:87:8e:ff:81:7f:95:10:e7:0a:6c:e7:39:
c1:5e:2a:5f:ae:6b:f2:91:44:4f:f4:16:67:71:bb:
e0:f8:da:5b:06:23:a7:c6:f7:61:8b:1b:b6:4a:6d:
11:5d:f2:7c:e9:c4:03:0a:50:5b:56:ad:2a:5d:b2:
db:a1:15:a9:e8:a2:fb:11:0c:80:31:9c:b3:0a:ff:
c4:7d:86:2d:96:88:6e:22:76:ca:7f:90:9e:62:04:
fc:2c:c1:9a:1f:07:23:71:24:37:d3:43:24:96:04:
ad:4a:4f:b3:62:df:f4:2e:28:4f:f4:1e:87:28:8a:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:42:E3:5F:07:C3:55:D5:1A:31:CA:71:4D:E4:90:97:CA:AC:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/684d4c8e-63e6-3d5b-b509-70c5eed982ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl
X509v3 Authority Key Identifier:
keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
sbgp-ipAddrBlock: critical
IPv4:
204.75.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:7b:0d:b6:3e:53:d0:35:82:b2:56:d1:e1:fa:0d:70:41:f2:
8c:42:d0:70:50:b0:f6:18:fa:08:43:16:f1:8c:ed:fd:48:76:
47:ee:ff:5b:ab:92:3e:79:ac:ee:a2:b0:3d:37:62:dd:1c:9c:
a9:1f:3e:ef:27:82:0c:ca:03:f9:13:4f:36:b6:6e:c8:35:4d:
f5:7f:a1:3c:1a:8a:22:41:2c:e8:df:99:1d:5a:34:08:de:6c:
90:13:0d:a4:b4:15:29:8c:49:c7:36:e8:95:75:d6:a8:a8:6f:
60:1b:27:a9:c6:f9:5d:81:dc:f8:4c:02:a2:c2:39:4e:46:e7:
9b:07:95:74:93:e6:9b:8b:15:e6:ab:ca:01:32:78:82:45:17:
be:45:8f:ca:52:45:7f:bb:56:4d:0c:07:ef:a5:10:75:c5:91:
ba:f1:b1:8d:eb:0c:44:85:fa:72:22:0c:9f:f1:8f:84:57:30:
89:bd:01:de:e8:4a:04:8a:58:1a:14:79:8c:04:67:77:50:23:
fb:8a:87:7e:4b:7e:49:fb:09:00:ec:dc:a9:46:80:3e:50:3a:
59:90:60:0e:72:17:a8:c4:6e:35:71:4a:ef:74:46:d3:cd:ec:
75:8d:ce:bd:0e:fd:5a:df:9f:7e:9f:02:7f:56:57:41:df:c9:
56:b1:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org