Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/7d05eff0-c62f-3ff2-91a4-95d83f6948f2.roa
File: 7d05eff0-c62f-3ff2-91a4-95d83f6948f2.roa (raw, json)
Hash identifier: osbuXGBk2/ziE8kzTrP2QKOrD7sUX7d1EFMely5BMRg=
Subject key identifier: DB:6C:05:70:F5:22:42:33:03:51:50:2D:31:FB:45:6F:20:8B:23:4D
Certificate issuer: /CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Certificate serial: 010D0C9F4328576D51CC73C042CFC16BB8BF5518
Authority key identifier: C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/7d05eff0-c62f-3ff2-91a4-95d83f6948f2.roa
Signing time: Wed 03 Jul 2019 16:51:15 +0000
ROA not before: Tue 02 Jul 2019 04:00:00 +0000
ROA not after: Mon 02 Jul 2029 04:00:00 +0000
asID: 7381
IP address blocks: 173.252.128.0/18 maxlen: 24
164.93.0.0/17 maxlen: 24
74.205.224.0/19 maxlen: 24
67.20.160.0/19 maxlen: 24
65.79.160.0/19 maxlen: 24
64.238.192.0/19 maxlen: 24
67.202.192.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:b8:bf:55:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Validity
Not Before: Jul 2 04:00:00 2019 GMT
Not After : Jul 2 04:00:00 2029 GMT
Subject: CN=f6129a2d-d41d-4c13-b947-72223b75d2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:6c:49:14:75:40:8f:d2:27:db:03:ff:0c:
4b:a8:2e:c5:42:df:5e:5f:f0:2c:60:f0:18:f3:22:
62:0f:1c:15:69:c9:6c:69:34:34:b0:8c:3e:08:04:
4f:83:de:e2:79:cd:71:50:ea:ca:8d:ba:2d:70:e7:
3e:50:2f:41:be:cb:d0:60:68:e5:63:bc:1d:b5:68:
9c:1d:47:69:04:8f:f1:05:35:d7:25:cb:ff:72:65:
71:76:a5:ed:4e:a4:0c:d2:9a:53:0b:b9:e9:f7:55:
c9:8f:f7:c4:eb:b4:9f:02:35:42:e2:87:15:63:7b:
e0:97:b7:bd:80:88:ca:45:b8:7b:c7:45:e6:ea:5d:
d4:9d:f8:d1:b0:28:d8:78:40:a9:30:88:9c:9e:42:
26:d1:08:51:62:2c:2a:28:b0:fe:c0:37:21:a6:4c:
5e:ac:d0:51:2c:e4:12:e2:b8:7d:d3:7f:49:cb:06:
00:b5:d7:a1:fa:11:8a:e8:6b:b0:8b:31:7f:99:dc:
0b:a1:4b:71:cc:91:31:9d:2f:33:d5:5b:65:d4:c3:
32:ac:2c:5a:f6:ca:8a:df:76:7c:89:3e:79:c4:09:
88:9e:56:f2:5b:2d:cf:1d:6a:2f:d7:1f:93:ae:6e:
83:6c:3a:cc:72:4a:39:5f:42:e1:7f:3a:c3:2c:ac:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:05:70:F5:22:42:33:03:51:50:2D:31:FB:45:6F:20:8B:23:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/7d05eff0-c62f-3ff2-91a4-95d83f6948f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl
X509v3 Authority Key Identifier:
keyid:C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.238.192.0/19
65.79.160.0/19
67.20.160.0/19
67.202.192.0/18
74.205.224.0/19
164.93.0.0/17
173.252.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:17:f1:7c:8e:55:7c:ea:cc:bd:c0:cb:88:85:e3:59:be:d7:
7a:dc:37:54:98:f7:96:35:16:80:0a:5d:7f:89:26:59:5c:61:
24:55:7b:ff:0b:65:8a:96:49:c5:54:d2:92:35:95:82:d1:7d:
11:4d:df:91:66:7e:4c:fb:73:7a:e3:e9:1c:11:75:dd:f6:e1:
6f:4b:71:24:21:2c:49:41:26:70:f5:26:7d:da:1f:77:34:ea:
a1:75:a2:b9:77:53:64:41:17:ad:5e:92:6d:b5:8d:48:87:ab:
b6:1b:a8:81:35:4e:22:0c:f9:1f:54:9c:cf:96:9f:5b:f3:d8:
1b:41:32:7b:e4:35:34:cb:cd:f1:c3:94:98:45:cd:e8:20:b2:
16:bd:23:6c:a6:7e:7d:14:41:99:0c:a5:b4:6d:e6:7f:7c:14:
99:52:6e:51:65:f0:9e:43:80:a6:e3:d5:88:d9:eb:58:09:57:
0c:8c:93:f0:cd:51:7f:a1:14:c7:11:fa:94:12:68:8d:b1:d7:
55:e0:c3:eb:b5:0f:50:78:2c:11:c2:9a:d0:86:a2:b4:b1:f0:
27:73:1e:39:c1:1b:55:68:51:a7:20:93:68:30:0f:2c:74:33:
51:ff:a9:1b:f5:8f:10:3d:59:43:e8:2b:05:81:f8:c2:df:8b:
35:4a:3b:b4
-----BEGIN CERTIFICATE-----
MIIGYzCCBU2gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Ba7i/VRgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGE4ZjhmOGNiLTVlN2ItNGUwMi1iMjdlLWM2OTYzNDc5ZThi
NTAeFw0xOTA3MDIwNDAwMDBaFw0yOTA3MDIwNDAwMDBaMC8xLTArBgNVBAMTJGY2
MTI5YTJkLWQ0MWQtNGMxMy1iOTQ3LTcyMjIzYjc1ZDJjODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANC7bEkUdUCP0ifbA/8MS6guxULfXl/wLGDwGPMi
Yg8cFWnJbGk0NLCMPggET4Pe4nnNcVDqyo26LXDnPlAvQb7L0GBo5WO8HbVonB1H
aQSP8QU11yXL/3JlcXal7U6kDNKaUwu56fdVyY/3xOu0nwI1QuKHFWN74Je3vYCI
ykW4e8dF5upd1J340bAo2HhAqTCInJ5CJtEIUWIsKiiw/sA3IaZMXqzQUSzkEuK4
fdN/ScsGALXXofoRiuhrsIsxf5ncC6FLccyRMZ0vM9VbZdTDMqwsWvbKit92fIk+
ecQJiJ5W8lstzx1qL9cfk65ug2w6zHJKOV9C4X86wyysBvcCAwEAAaOCA3kwggN1
MB0GA1UdDgQWBBTbbAVw9SJCMwNRUC0x+0VvIIsjTTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYThmOGY4
Y2ItNWU3Yi00ZTAyLWIyN2UtYzY5NjM0NzllOGI1LzdkMDVlZmYwLWM2MmYtM2Zm
Mi05MWE0LTk1ZDgzZjY5NDhmMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E4ZjhmOGNiLTVlN2ItNGUwMi1iMjdl
LWM2OTYzNDc5ZThiNS9hOGY4ZjhjYi01ZTdiLTRlMDItYjI3ZS1jNjk2MzQ3OWU4
YjUuY3JsMB8GA1UdIwQYMBaAFMBGjHrdb+bfNekmvNURXSc8f1KOMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvYThmOGY4Y2ItNWU3Yi00ZTAyLWIyN2UtYzY5NjM0
NzllOGI1LmNlcjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEBUDuwAMEBUFP
oAMEBUMUoAMEBkPKwAMEBUrN4AMEB6RdAAMEBq38gDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOCAQEABxfxfI5VfOrM
vcDLiIXjWb7Xetw3VJj3ljUWgApdf4kmWVxhJFV7/wtlipZJxVTSkjWVgtF9EU3f
kWZ+TPtzeuPpHBF13fbhb0txJCEsSUEmcPUmfdofdzTqoXWiuXdTZEEXrV6SbbWN
SIerthuogTVOIgz5H1Scz5afW/PYG0Eye+Q1NMvN8cOUmEXN6CCyFr0jbKZ+fRRB
mQyltG3mf3wUmVJuUWXwnkOApuPViNnrWAlXDIyT8M1Rf6EUxxH6lBJojbHXVeDD
67UPUHgsEcKa0IaitLHwJ3MeOcEbVWhRpyCTaDAPLHQzUf+pG/WPED1ZQ+grBYH4
wt+LNUo7tA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org