Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/d195a81b-58e2-3e61-8e85-cd96a5313d40.roa
File: d195a81b-58e2-3e61-8e85-cd96a5313d40.roa (raw, json)
Hash identifier: fN0oL1+ZH6eNBkDOkff3LkDVZzJpjQ6511/8Qu/cZpk=
Subject key identifier: 50:B0:41:8F:46:E3:27:69:BE:A7:BA:66:12:5A:B3:5A:EE:06:40:12
Certificate issuer: /CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Certificate serial: 010D0C9F4328576D51CC73C042CFC16BB92B1ADC
Authority key identifier: C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/d195a81b-58e2-3e61-8e85-cd96a5313d40.roa
Signing time: Wed 03 Jul 2019 18:48:58 +0000
ROA not before: Tue 02 Jul 2019 04:00:00 +0000
ROA not after: Mon 02 Jul 2029 04:00:00 +0000
asID: 14455
IP address blocks: 173.252.147.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:b9:2b:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Validity
Not Before: Jul 2 04:00:00 2019 GMT
Not After : Jul 2 04:00:00 2029 GMT
Subject: CN=92582f73-6eb0-4135-b54a-65e325b1ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:63:b9:ba:2f:32:9c:38:8d:c0:32:95:83:5f:
f4:3d:ac:4d:e7:de:e9:2d:4d:f5:9d:fd:de:3c:05:
df:8f:f2:ef:e1:fa:bc:f0:f7:9c:9b:c3:c6:8d:5d:
5b:b6:14:91:69:5e:4e:2a:64:14:49:19:a6:52:81:
e6:74:a5:e6:c7:02:05:37:e8:5f:ae:a6:8a:06:96:
94:be:a3:36:75:8e:59:e9:dd:20:5d:93:11:fc:79:
90:19:a5:99:cd:93:e9:74:2f:f9:67:6a:63:34:de:
a5:48:c2:61:a4:ec:78:f0:d4:df:29:d0:4c:b7:a7:
35:a2:6d:86:f9:c2:07:05:11:0c:0d:87:97:2d:c6:
de:8a:4e:82:4a:c4:8a:1f:ce:c4:9f:5a:03:bb:12:
24:f2:a3:32:62:78:f4:ed:ee:bf:1b:8a:45:a4:75:
c6:99:71:f5:4d:30:49:1a:a2:15:98:ee:14:0c:16:
07:a9:34:85:57:10:06:63:4c:0c:60:39:7e:ab:b3:
5e:73:31:c7:e1:ee:f1:75:1d:5d:d4:88:dd:30:f5:
35:db:6b:cb:8f:b9:f5:d3:83:a6:20:2a:98:e5:5a:
32:30:5d:d1:05:8c:6c:e1:c3:aa:72:db:dd:68:88:
04:24:33:2b:13:47:3d:ff:1c:79:0e:3a:0b:d7:3f:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:41:8F:46:E3:27:69:BE:A7:BA:66:12:5A:B3:5A:EE:06:40:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/d195a81b-58e2-3e61-8e85-cd96a5313d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl
X509v3 Authority Key Identifier:
keyid:C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
sbgp-ipAddrBlock: critical
IPv4:
173.252.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b5:43:b3:58:56:2c:b0:ec:0b:46:6d:ad:c9:21:32:2a:53:
05:0a:92:f2:e0:f8:30:c1:59:e6:cf:00:f0:41:4d:ed:b3:74:
81:5a:f0:7e:8c:74:4e:a1:fe:72:17:08:57:f6:53:55:05:a6:
70:24:35:be:9f:d5:c3:c2:c5:32:5c:3b:d6:3b:c4:df:61:c8:
e1:c3:aa:60:11:a6:3f:78:87:83:38:1c:ec:f7:7c:af:fd:6a:
88:5a:ac:20:06:b7:ed:ee:ca:31:70:60:bc:db:3f:4c:88:ad:
e8:6f:18:27:c4:a6:4c:0d:8a:98:39:09:82:b0:2c:3f:26:c1:
a7:54:21:bb:36:c3:c4:13:a4:b3:86:da:41:d3:16:82:bc:c3:
d3:d8:b5:55:0c:19:2c:3c:e3:4d:55:11:1a:18:a2:65:1d:c5:
89:ea:7d:7d:38:25:ce:ea:4b:19:e1:89:49:30:a5:45:ea:f0:
42:c5:2c:38:11:5d:7e:15:40:2f:63:53:d4:5b:59:99:08:d1:
0b:4b:54:46:54:84:8c:7b:07:b4:09:48:b6:cc:04:2e:29:6a:
db:fc:89:e4:aa:f0:9b:9c:48:01:a1:c7:85:19:50:0f:53:7b:
c5:0f:4a:39:3f:3a:b6:ef:01:ec:9d:99:2c:86:bb:d0:b2:28:
b2:d2:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:42 2024 by rpki-client on console-ams.rpki-client.org