Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/79719afb-46b3-3f72-9139-98e73b2dcd05.roa
File: 79719afb-46b3-3f72-9139-98e73b2dcd05.roa (raw, json)
Hash identifier: hY7J0PQ+J6XtleHkZSGOM0ZLyTZkMDJ42KYumbIKr68=
Subject key identifier: 94:96:A1:92:40:2A:99:88:B8:4C:44:C2:82:37:92:53:2E:00:65:F5
Certificate issuer: /CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Certificate serial: 010D0C9F4328576D51CC73C042CFC16BB8D26CCB
Authority key identifier: C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/79719afb-46b3-3f72-9139-98e73b2dcd05.roa
Signing time: Wed 03 Jul 2019 17:12:06 +0000
ROA not before: Tue 02 Jul 2019 04:00:00 +0000
ROA not after: Mon 02 Jul 2029 04:00:00 +0000
asID: 7381
IP address blocks: 216.83.160.0/19 maxlen: 24
208.99.160.0/19 maxlen: 24
199.167.32.0/21 maxlen: 24
216.203.0.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:b8:d2:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Validity
Not Before: Jul 2 04:00:00 2019 GMT
Not After : Jul 2 04:00:00 2029 GMT
Subject: CN=fe732cd3-975c-4683-a356-3e10b2e2119b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:36:05:b8:aa:b4:7e:85:4a:a2:01:7c:e1:
4a:82:6a:5c:a8:35:0c:bb:a4:21:49:e6:3a:51:e6:
90:bf:78:6e:7b:97:e9:fe:47:b7:36:34:dc:75:6f:
6c:30:d7:36:6d:7d:97:f9:09:53:58:cc:94:7c:e5:
d5:92:c6:53:45:1f:17:5b:be:16:b0:4a:a8:ff:ae:
39:29:2c:8d:f6:5a:1b:48:91:a7:ae:66:2b:39:2a:
a1:8f:cd:94:ad:4a:e6:8a:02:89:b1:92:9f:d7:72:
09:06:4f:48:26:ac:ab:b5:09:31:94:7f:fe:f4:f2:
bc:f5:10:68:72:a4:be:ee:60:97:5c:5d:3c:80:47:
50:88:45:38:38:65:a3:75:06:f8:dd:22:04:3c:03:
e0:e7:cb:c7:55:24:72:c5:08:69:50:0b:37:fd:9a:
e2:fd:36:65:5c:05:79:b0:b9:42:d3:31:36:8e:f3:
21:cc:5b:0f:2b:ce:f8:fa:d7:1d:68:31:1a:4e:81:
13:18:1e:0d:e2:e5:12:2a:af:c8:74:65:1a:bc:c3:
f3:ef:a2:40:85:32:56:a4:c4:90:12:ed:67:52:32:
90:52:ac:d2:d9:63:96:d7:1e:0a:a8:60:ec:bf:13:
72:cd:48:05:db:cf:2e:c9:ac:31:44:16:5c:30:5c:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:A1:92:40:2A:99:88:B8:4C:44:C2:82:37:92:53:2E:00:65:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/79719afb-46b3-3f72-9139-98e73b2dcd05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl
X509v3 Authority Key Identifier:
keyid:C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.32.0/21
208.99.160.0/19
216.83.160.0/19
216.203.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:2d:b9:db:15:15:de:00:bb:2b:39:21:81:74:7d:3a:9c:6f:
0d:d9:c0:5a:6b:66:ce:4a:5f:31:b2:b9:2c:e7:ee:a6:e8:69:
22:60:44:3d:e7:d4:cb:96:b2:4f:e2:34:ae:fb:16:60:53:76:
0a:0c:37:6e:fd:ea:dd:49:df:d8:d1:1b:1a:9e:0b:14:b0:e4:
70:78:b5:f2:19:8e:06:fd:74:a9:84:d8:2c:e3:04:60:f7:46:
f0:2f:ac:65:64:d2:b6:8f:54:f5:31:b5:12:1e:ac:5d:6d:08:
22:03:01:22:da:8f:cc:b6:52:79:42:ab:d2:12:19:02:ec:f9:
4b:a0:7f:55:be:e0:7d:d0:01:da:b4:53:6b:65:4a:2f:24:15:
44:80:07:b2:b7:1c:d5:3a:8b:d2:a7:e2:bd:66:75:fa:91:ad:
23:98:4f:90:1f:3d:01:ad:3e:43:6a:7f:9d:1f:e5:f7:7a:a8:
8a:88:40:72:c5:84:32:35:73:33:a8:64:fa:a1:20:aa:f8:3b:
5d:a6:ee:85:3b:9f:41:b3:b6:c7:11:da:6a:f0:be:89:d5:b1:
03:fb:b0:cc:91:53:fa:59:92:1f:6a:fb:60:c8:06:12:b4:2e:
d6:d9:e0:fa:a2:d6:f6:24:52:dc:ac:08:ba:19:b6:cf:ec:12:
1e:8c:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org