Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/e0bf1e15-032c-3be4-8020-aa0cedf37c92.roa
File: e0bf1e15-032c-3be4-8020-aa0cedf37c92.roa (raw, json)
Hash identifier: 0eg2gce6icgqyRa4/Y95ftYRjKsoLg3+SJFhgCzAL1k=
Subject key identifier: 4E:2A:F2:E8:9B:76:D1:94:3C:80:06:FA:1E:13:13:03:67:B1:45:07
Certificate issuer: /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial: 010D0C9F43285846031414354BED26715BF99980
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/e0bf1e15-032c-3be4-8020-aa0cedf37c92.roa
Signing time: Mon 27 May 2024 13:00:34 +0000
ROA not before: Mon 27 May 2024 13:00:34 +0000
ROA not after: Sun 25 Aug 2024 13:00:34 +0000
asID: 16509
IP address blocks: 204.75.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:03:14:14:35:4b:ed:26:71:5b:f9:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
Validity
Not Before: May 27 13:00:34 2024 GMT
Not After : Aug 25 13:00:34 2024 GMT
Subject: CN=a6b661be-23ff-4f43-84da-8e30f767a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:35:4b:80:db:44:14:4a:57:d2:d5:33:76:
0d:5e:53:4f:95:01:8f:08:73:ac:71:ab:d5:7a:c6:
61:e3:c3:4a:03:6b:5d:58:44:3d:5b:0d:97:36:19:
e8:eb:02:50:34:0b:ff:10:f0:5d:6e:db:30:a3:fa:
29:10:fa:52:51:79:d5:4a:0e:59:cd:64:5a:a6:ea:
36:25:a3:04:86:e0:5c:3d:e0:56:a0:f1:bb:12:af:
19:bc:6a:53:fe:cd:88:12:7f:f7:e5:c0:32:2b:c4:
89:1d:64:0b:a5:21:ff:46:ef:f4:d4:f3:3b:a4:a6:
45:3d:ff:66:ad:e7:cb:f5:6a:ff:08:90:af:d3:7f:
00:82:55:8f:a3:10:87:28:1e:73:5f:4f:cf:be:8f:
99:80:14:ce:2c:33:90:aa:46:a7:e0:fa:03:0a:38:
e7:56:46:91:33:4d:11:e0:a9:33:a8:ea:fc:2e:f8:
72:9e:94:5f:53:32:51:78:25:8e:e6:e7:a0:99:90:
19:b3:55:1f:c7:0c:8b:05:cf:a1:a3:87:4a:7e:71:
32:9a:27:52:41:cf:74:92:71:82:02:d6:cb:80:d3:
76:3a:e0:1e:c4:ba:a4:81:a2:4f:e9:ed:41:1c:d4:
6d:f0:94:66:c2:99:5c:50:c0:63:8c:23:d5:e4:5e:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:F2:E8:9B:76:D1:94:3C:80:06:FA:1E:13:13:03:67:B1:45:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/e0bf1e15-032c-3be4-8020-aa0cedf37c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl
X509v3 Authority Key Identifier:
keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
sbgp-ipAddrBlock: critical
IPv4:
204.75.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:69:0b:b0:0d:c1:e0:3d:c1:61:6e:61:69:a2:69:4e:b0:bf:
b9:0a:33:38:b7:79:de:60:49:f4:16:a3:c2:fc:46:82:db:2c:
e0:ef:f4:fc:e4:7b:8f:ac:03:e5:79:6d:96:8c:6c:23:b3:ae:
24:a8:7c:61:ee:a6:5d:98:ad:09:2c:7f:01:8a:2b:b3:1f:7e:
c0:49:7c:4d:58:79:8f:bf:ea:7b:32:5b:fa:59:1a:fe:61:cf:
5d:a9:d8:1d:3b:eb:5f:20:8c:22:fe:41:c1:91:6b:5f:09:58:
5d:58:26:c7:b2:8d:7d:65:b6:38:fd:fb:d6:10:b2:79:64:16:
7c:d5:82:bf:65:6a:a9:e7:79:22:7c:bc:6e:63:0b:af:53:0c:
87:07:da:28:33:89:e6:64:a9:93:c3:59:40:e4:2e:b5:b1:1f:
c1:1b:34:a8:31:5e:09:f2:3b:91:da:d4:0f:da:10:73:b9:94:
26:8f:9e:50:a6:b5:1b:51:a7:60:a3:66:74:b3:62:5e:37:01:
04:5c:f9:4f:4d:90:3a:cb:00:e7:66:a8:6e:86:20:88:2c:cd:
8b:c1:bf:79:16:61:42:37:3f:5d:50:ae:ec:fa:dc:cc:96:a7:
8d:05:07:4d:46:c5:8d:71:bd:e7:56:fb:f4:d7:a3:be:d7:6b:
2e:b4:e2:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYDFBQ1S+0mcVv5mYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRhNTQ4OWMtOTQzZC00OTVhLTk5NWEtZWUxZDE2MDQ5
ZDI5MB4XDTI0MDUyNzEzMDAzNFoXDTI0MDgyNTEzMDAzNFowLzEtMCsGA1UEAxMk
YTZiNjYxYmUtMjNmZi00ZjQzLTg0ZGEtOGUzMGY3NjdhNzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApus1S4DbRBRKV9LVM3YNXlNPlQGPCHOscavV
esZh48NKA2tdWEQ9Ww2XNhno6wJQNAv/EPBdbtswo/opEPpSUXnVSg5ZzWRapuo2
JaMEhuBcPeBWoPG7Eq8ZvGpT/s2IEn/35cAyK8SJHWQLpSH/Ru/01PM7pKZFPf9m
refL9Wr/CJCv038AglWPoxCHKB5zX0/Pvo+ZgBTOLDOQqkan4PoDCjjnVkaRM00R
4KkzqOr8LvhynpRfUzJReCWO5uegmZAZs1UfxwyLBc+ho4dKfnEymidSQc90knGC
AtbLgNN2OuAexLqkgaJP6e1BHNRt8JRmwplcUMBjjCPV5F7D9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4q8uibdtGUPIAG+h4TEwNnsUUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGE1
NDg5Yy05NDNkLTQ5NWEtOTk1YS1lZTFkMTYwNDlkMjkvZTBiZjFlMTUtMDMyYy0z
YmU0LTgwMjAtYWEwY2VkZjM3YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRhNTQ4OWMtOTQzZC00OTVhLTk5
NWEtZWUxZDE2MDQ5ZDI5LzlkYTU0ODljLTk0M2QtNDk1YS05OTVhLWVlMWQxNjA0
OWQyOS5jcmwwHwYDVR0jBBgwFoAUaHtP8isvLA3Q1smJ/wBcoaVQuVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGE1NDg5Yy05NDNkLTQ5NWEtOTk1YS1lZTFk
MTYwNDlkMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlpC7ANweA9wWFuYWmiaU6wv7kKMzi3ed5gSfQWo8L8RoLbLODv9Pzk
e4+sA+V5bZaMbCOzriSofGHupl2YrQksfwGKK7MffsBJfE1YeY+/6nsyW/pZGv5h
z12p2B07618gjCL+QcGRa18JWF1YJseyjX1ltjj9+9YQsnlkFnzVgr9laqnneSJ8
vG5jC69TDIcH2igzieZkqZPDWUDkLrWxH8EbNKgxXgnyO5Ha1A/aEHO5lCaPnlCm
tRtRp2CjZnSzYl43AQRc+U9NkDrLAOdmqG6GIIgszYvBv3kWYUI3P11Qruz63MyW
p40FB01GxY1xvedW+/TXo77Xay604mE=
-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org