Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/eace9ae0-b062-3c53-921b-fd01459d1589.roa
File: eace9ae0-b062-3c53-921b-fd01459d1589.roa (raw, json)
Hash identifier: BHE2o7qweETgdg896hwkSAFUwfuqDJZX5ojalRgiiHI=
Subject key identifier: 09:00:AB:06:EE:7F:87:FB:29:61:C7:30:24:3C:D9:72:95:32:D9:65
Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4
Certificate serial: 010D0C9F4328583D20763F2752C7574DDF3E1180
Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/eace9ae0-b062-3c53-921b-fd01459d1589.roa
Signing time: Thu 03 Mar 2022 05:00:00 +0000
ROA not before: Thu 03 Mar 2022 05:00:00 +0000
ROA not after: Wed 03 Mar 2027 05:00:00 +0000
asID: 13657
IP address blocks: 104.242.128.0/19 maxlen: 19
104.242.160.0/19 maxlen: 19
104.242.192.0/19 maxlen: 19
104.242.224.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:20:76:3f:27:52:c7:57:4d:df:3e:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4
Validity
Not Before: Mar 3 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2027 GMT
Subject: CN=26691fc6-aa42-4f0c-8ce3-181b9ff8660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:89:b9:1b:71:f5:a8:13:58:3d:4c:46:90:
6b:27:6d:c4:d3:e1:24:ad:ba:03:71:06:f4:db:1f:
a2:fc:b1:bc:a9:f0:b4:07:26:82:48:f3:41:aa:8c:
8e:73:df:47:c8:ae:04:7d:00:25:64:b3:b9:c6:12:
e5:b9:01:a4:ae:80:78:d9:a1:ed:e9:42:e1:0b:20:
d1:16:93:77:28:ee:24:87:1d:a1:86:32:60:1a:35:
4f:af:ef:e5:0a:3f:13:26:2b:3e:cc:83:77:4e:b3:
ea:7b:c6:54:53:6a:8a:bf:c3:3c:70:c1:66:d7:40:
f7:18:97:00:86:39:64:98:91:4a:23:59:97:72:0f:
fc:20:ee:da:09:63:0a:ab:f3:fc:a7:41:d2:28:6f:
c0:cb:8a:bd:dc:8d:5f:e1:51:0a:fe:13:21:04:89:
6e:cd:64:a4:57:c2:63:df:69:76:fd:ec:7e:1a:41:
c8:5e:33:f5:c0:32:bc:66:50:fb:f3:34:b5:f7:a2:
e3:0b:2b:91:7a:4d:4d:43:04:dd:33:cc:21:26:bd:
44:db:29:8d:7a:9d:bc:0f:bd:83:71:fb:e8:9d:de:
3b:76:fc:ca:9e:8f:ab:ef:f9:9f:01:d0:45:01:67:
14:86:de:29:d9:a5:a9:be:d8:ba:30:4b:37:17:eb:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:AB:06:EE:7F:87:FB:29:61:C7:30:24:3C:D9:72:95:32:D9:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/eace9ae0-b062-3c53-921b-fd01459d1589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl
X509v3 Authority Key Identifier:
keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
sbgp-ipAddrBlock: critical
IPv4:
104.242.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:fa:bb:3d:2a:85:0f:88:b4:81:74:f5:9b:05:18:fb:b5:90:
fb:fd:32:9b:cd:3a:69:43:75:a6:96:53:33:21:b2:2d:a4:4d:
49:7f:3f:07:8f:e7:c9:16:71:f4:75:42:8f:92:8f:9f:31:e9:
56:2c:9c:b0:55:79:19:7a:b5:85:11:86:08:6b:f8:ad:f0:82:
f8:37:09:74:0f:76:08:3e:7b:b9:10:fc:5f:90:c8:5e:67:85:
b2:90:02:93:32:4d:06:d3:95:b0:58:11:e1:db:33:33:96:12:
b8:96:44:b5:0b:6b:a7:5e:1f:2e:8d:ae:d8:18:05:f3:c0:b8:
46:0b:3a:f7:3d:f5:62:9c:65:7a:29:da:07:53:c5:ec:04:c8:
9d:d5:e8:a5:36:05:98:b0:b6:6b:17:88:37:1e:40:e4:ef:d4:
74:70:6d:44:7a:29:ee:45:f1:19:93:67:63:b0:e9:7c:23:8e:
a6:62:a8:9c:35:1d:f2:b8:18:86:a1:b0:c6:a6:01:ba:44:74:
eb:ac:75:e7:e4:55:20:3c:1a:b8:ac:4c:fd:f6:27:53:75:d5:
86:31:00:a5:29:e3:cf:be:94:88:42:af:36:5d:f7:34:2b:fe:
3b:44:70:2e:de:76:6a:7a:6a:9a:07:94:49:a9:86:2f:34:da:
c4:52:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:42 2024 by rpki-client on console-ams.rpki-client.org