Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/c02b963e-0e68-3cf9-9d69-9e31428997e4.roa
File: c02b963e-0e68-3cf9-9d69-9e31428997e4.roa (raw, json)
Hash identifier: n/A7IjnqbsfcEmMfOc1XRso4O2g1Z6xbENv7cYG1PF0=
Subject key identifier: 6D:53:89:5A:D1:54:65:28:D8:DD:7A:E9:80:B3:8D:3D:1C:C3:74:8C
Certificate issuer: /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial: 010D0C9F43285846031416CD60A836D7FA1CDA80
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/c02b963e-0e68-3cf9-9d69-9e31428997e4.roa
Signing time: Mon 27 May 2024 13:00:34 +0000
ROA not before: Mon 27 May 2024 13:00:34 +0000
ROA not after: Sun 25 Aug 2024 13:00:34 +0000
asID: 14618
IP address blocks: 204.75.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:03:14:16:cd:60:a8:36:d7:fa:1c:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
Validity
Not Before: May 27 13:00:34 2024 GMT
Not After : Aug 25 13:00:34 2024 GMT
Subject: CN=d2489a08-3bbc-4576-948e-f1b263f782b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:37:7d:0d:95:28:4b:73:ca:de:59:f8:f0:
4f:39:62:2e:c2:69:06:9d:40:1f:a1:6e:76:bd:5f:
31:23:1e:37:6a:21:af:c5:12:5b:43:b8:d6:bb:15:
68:78:90:6c:9e:e9:a1:ca:88:4c:a2:d8:77:06:cb:
82:84:a1:55:e4:cf:8f:4f:eb:92:c2:49:60:d8:97:
61:0b:56:d7:22:c9:b9:be:95:d1:0e:60:61:01:4c:
aa:ba:cb:0c:a6:5b:07:ac:67:83:5e:d5:f3:f1:b6:
82:de:82:37:71:21:03:d9:69:a2:a2:43:b6:20:b1:
bb:b5:81:dc:6b:7c:10:eb:22:27:3a:74:16:03:b9:
4e:92:5c:d1:88:b2:36:25:75:9a:a2:36:1b:8e:74:
14:fa:c5:43:28:64:a8:5e:fa:28:e1:22:9e:3b:ec:
89:da:39:53:a3:0e:22:c5:a3:b0:f9:cd:43:20:c3:
b5:09:1b:07:98:1a:a2:36:f8:bf:f9:52:39:15:ca:
44:4b:3b:c8:88:75:c5:07:3a:1e:af:15:71:51:87:
54:dd:31:70:ce:87:33:a3:68:12:2d:ed:38:41:d9:
48:1e:a6:50:57:48:0c:97:a6:c9:44:49:a7:7d:86:
9d:59:ed:07:3d:39:a6:68:b0:64:ae:45:37:4e:59:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:89:5A:D1:54:65:28:D8:DD:7A:E9:80:B3:8D:3D:1C:C3:74:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/c02b963e-0e68-3cf9-9d69-9e31428997e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl
X509v3 Authority Key Identifier:
keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
sbgp-ipAddrBlock: critical
IPv4:
204.75.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:79:cb:37:91:5c:f7:1c:90:63:e1:6f:14:4a:a2:8c:47:a8:
6d:93:ec:12:25:ec:1f:94:94:c0:a2:6b:8b:52:5d:7a:97:f5:
51:ec:38:2c:fd:b4:0a:d5:d3:fb:d4:d8:bc:25:18:12:15:b3:
f0:c1:ff:66:7a:58:7e:9c:e9:90:80:82:47:3b:46:80:94:cc:
1e:0b:7d:1c:98:55:2c:27:6f:75:f9:68:b3:25:39:14:16:9f:
09:16:f6:df:8e:7d:3c:f4:73:2c:be:98:77:32:33:06:18:06:
5a:42:c2:d1:fe:0a:22:af:42:e5:83:d1:fa:c1:0e:16:32:d4:
4c:81:42:eb:0e:77:4a:26:22:d5:39:17:a9:14:e9:69:14:67:
22:89:40:2a:a5:66:d4:14:58:be:2d:c8:f0:95:da:8d:16:ec:
f1:02:b5:7b:78:aa:5d:c4:42:6d:1a:6a:b3:59:40:f6:8d:97:
ce:23:a5:c9:06:38:86:cc:d7:f3:21:c3:bd:61:3f:a8:54:a4:
c1:af:93:96:c1:20:37:6c:15:5a:30:ec:b9:19:c5:03:04:8a:
72:28:1b:df:d3:83:43:90:7d:8a:6f:d1:cd:5d:52:24:a4:43:
88:60:b7:4d:af:97:88:6e:fb:63:8b:b2:00:87:14:fb:1c:1e:
17:2d:2e:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYDFBbNYKg21/oc2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRhNTQ4OWMtOTQzZC00OTVhLTk5NWEtZWUxZDE2MDQ5
ZDI5MB4XDTI0MDUyNzEzMDAzNFoXDTI0MDgyNTEzMDAzNFowLzEtMCsGA1UEAxMk
ZDI0ODlhMDgtM2JiYy00NTc2LTk0OGUtZjFiMjYzZjc4MmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNI3fQ2VKEtzyt5Z+PBPOWIuwmkGnUAfoW52
vV8xIx43aiGvxRJbQ7jWuxVoeJBsnumhyohMoth3BsuChKFV5M+PT+uSwklg2Jdh
C1bXIsm5vpXRDmBhAUyqussMplsHrGeDXtXz8baC3oI3cSED2WmiokO2ILG7tYHc
a3wQ6yInOnQWA7lOklzRiLI2JXWaojYbjnQU+sVDKGSoXvoo4SKeO+yJ2jlTow4i
xaOw+c1DIMO1CRsHmBqiNvi/+VI5FcpESzvIiHXFBzoerxVxUYdU3TFwzoczo2gS
Le04QdlIHqZQV0gMl6bJREmnfYadWe0HPTmmaLBkrkU3Tll1YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1TiVrRVGUo2N166YCzjT0cw3SMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGE1
NDg5Yy05NDNkLTQ5NWEtOTk1YS1lZTFkMTYwNDlkMjkvYzAyYjk2M2UtMGU2OC0z
Y2Y5LTlkNjktOWUzMTQyODk5N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRhNTQ4OWMtOTQzZC00OTVhLTk5
NWEtZWUxZDE2MDQ5ZDI5LzlkYTU0ODljLTk0M2QtNDk1YS05OTVhLWVlMWQxNjA0
OWQyOS5jcmwwHwYDVR0jBBgwFoAUaHtP8isvLA3Q1smJ/wBcoaVQuVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGE1NDg5Yy05NDNkLTQ5NWEtOTk1YS1lZTFk
MTYwNDlkMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG15yzeRXPcckGPhbxRKooxHqG2T7BIl7B+UlMCia4tSXXqX9VHsOCz9
tArV0/vU2LwlGBIVs/DB/2Z6WH6c6ZCAgkc7RoCUzB4LfRyYVSwnb3X5aLMlORQW
nwkW9t+OfTz0cyy+mHcyMwYYBlpCwtH+CiKvQuWD0frBDhYy1EyBQusOd0omItU5
F6kU6WkUZyKJQCqlZtQUWL4tyPCV2o0W7PECtXt4ql3EQm0aarNZQPaNl84jpckG
OIbM1/Mhw71hP6hUpMGvk5bBIDdsFVow7LkZxQMEinIoG9/Tg0OQfYpv0c1dUiSk
Q4hgt02vl4hu+2OLsgCHFPscHhctLg0=
-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org