Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/01ba8c6c-20f6-3538-8d5b-97d4c91930ba.roa
File: 01ba8c6c-20f6-3538-8d5b-97d4c91930ba.roa (raw, json)
Hash identifier: Dp9gxDainbrAM1VLJMGK8aZC1NVDaFVgQ54/CxxTsxg=
Subject key identifier: 0A:64:F7:95:10:C4:8A:AC:B3:49:06:5F:81:14:4B:16:83:37:E1:98
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E024653FA23ED9C089100
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/01ba8c6c-20f6-3538-8d5b-97d4c91930ba.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 969
IP address blocks: 104.251.239.0/24 maxlen: 24
172.81.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:02:46:53:fa:23:ed:9c:08:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=e047547b-30f1-483b-a3b5-35e351d92a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:91:ad:8a:98:d7:d4:0d:56:24:ce:30:3c:
d5:9d:66:01:af:f5:ed:31:44:ff:87:2a:f9:79:84:
dd:21:27:93:d6:3b:33:95:00:af:c7:58:5f:a5:5e:
66:4e:e9:e7:36:2b:b0:44:77:04:53:83:4f:a6:68:
12:11:df:cc:37:b7:4c:e5:7a:dd:dc:b6:bb:79:51:
98:51:c7:58:66:c9:ea:fc:28:1f:5a:b0:ee:b7:41:
dd:4f:c5:b5:32:d6:3c:ba:ff:57:28:1f:4f:c0:f2:
ce:bf:64:7a:74:49:9e:ca:57:4f:9d:0a:af:68:b3:
4a:3a:3e:bb:99:a7:78:e6:5e:22:0e:d1:fa:05:cd:
5f:0c:4e:26:95:3b:66:e3:67:3a:ee:05:7c:8a:45:
81:19:97:cb:e3:da:23:56:cf:b2:89:59:82:a4:e8:
5e:86:18:67:83:cf:53:90:0a:72:74:72:93:d1:37:
d2:7b:5c:84:db:a7:a1:13:ec:22:be:2d:3e:26:7d:
fd:69:ce:77:0b:b1:bc:b0:b0:6b:c6:c6:9d:ac:65:
d7:fd:cd:c8:bb:99:db:d6:01:a2:68:e8:24:6d:77:
85:1f:b5:c3:e9:30:a2:a4:a8:09:22:4d:22:b1:f4:
b4:58:a8:81:09:0e:b4:cd:42:3e:84:00:c8:7e:4c:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:64:F7:95:10:C4:8A:AC:B3:49:06:5F:81:14:4B:16:83:37:E1:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/01ba8c6c-20f6-3538-8d5b-97d4c91930ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.239.0/24
172.81.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:2d:22:40:56:e4:a1:6f:0b:30:a7:d1:ae:85:44:0d:e6:cf:
63:9f:0d:1c:88:d5:2a:a5:1f:32:59:61:0b:a0:7b:20:b2:98:
7e:12:05:23:6b:ba:2f:8e:ab:37:e0:bf:67:17:6d:db:7d:27:
8b:90:76:dc:9e:30:3c:68:91:34:f1:02:b5:ef:f0:2f:28:72:
40:7b:f5:36:39:6d:c6:b9:8e:d8:6e:5f:d2:02:50:47:fb:2f:
39:61:42:f7:e8:63:76:11:49:50:57:25:74:57:2b:48:20:56:
0f:2c:07:79:51:5c:2b:51:c0:ea:c8:48:13:2a:86:24:25:ba:
28:e3:da:5c:13:f5:b6:ab:df:4e:d7:78:a1:49:d1:9f:71:34:
82:5f:7a:9e:5d:e8:3b:42:cc:40:20:81:00:21:f5:ec:7a:f3:
fc:27:d4:76:37:c6:01:6b:b2:31:12:24:9d:66:57:1f:ac:82:
71:45:61:4b:71:35:dd:c8:34:71:b7:0a:b7:cb:b8:cd:23:08:
9b:21:51:81:31:93:64:40:28:b6:ad:d5:29:56:af:fb:7d:4a:
4e:69:15:12:92:ff:f8:d9:bd:f4:ae:4f:42:88:7b:e2:15:64:
e8:52:9a:23:2b:a0:e7:a6:68:f6:d0:f7:91:2e:55:f0:12:3b:
bc:c7:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:54 2024 by rpki-client on console-ams.rpki-client.org