Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/0be538f5-c00e-3c63-9777-b65e002bdadf.roa
File: 0be538f5-c00e-3c63-9777-b65e002bdadf.roa (raw, json)
Hash identifier: 3otgq0uB8f8M0FHZ1Wg/HNAPgF6iYUFLaNSrCiiN/cE=
Subject key identifier: 47:C0:32:B9:18:C8:C8:74:D8:C2:E4:53:46:F4:7D:48:44:D3:2E:1C
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E03C259D38B4E6D19CEC0
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/0be538f5-c00e-3c63-9777-b65e002bdadf.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 137443
IP address blocks: 104.251.226.0/24 maxlen: 24
104.251.225.0/24 maxlen: 24
104.251.231.0/24 maxlen: 24
104.251.229.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:03:c2:59:d3:8b:4e:6d:19:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=bfbe48c4-0e23-410e-bf55-944af95d649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:9b:b0:3d:b8:33:5a:7d:cc:8f:78:25:77:
c9:e7:3f:aa:39:e2:84:bf:ca:71:03:8f:00:6e:36:
8d:20:e9:38:2d:a6:fe:45:e1:bf:2d:9a:43:86:cb:
16:a4:a9:60:b1:19:db:23:07:58:b3:98:da:97:b2:
14:11:11:b0:f3:67:d3:5f:a2:98:13:69:5a:66:f0:
90:ed:47:21:bf:d2:2b:46:4d:81:53:5e:f4:43:2d:
94:a6:f2:f6:fb:bf:90:18:cb:d2:ff:d0:0c:76:d1:
a1:14:b9:6f:2f:79:1b:61:f0:80:bd:79:7b:d0:c6:
e9:8f:b0:26:89:15:50:39:9d:4a:80:e3:07:51:09:
06:68:3e:93:b6:18:49:fc:f3:7a:87:e1:0f:ac:b1:
56:4d:4b:f2:a3:51:1d:03:35:1c:bb:6f:4e:0f:f4:
df:2a:cc:32:19:46:3a:28:bf:41:57:08:09:97:bb:
3e:51:8f:fe:3d:ae:fe:ee:f7:17:96:43:ec:ba:72:
c7:d5:04:c6:8b:c5:0e:44:5d:f7:4b:bc:03:6f:ca:
28:6c:3f:9e:3c:0a:7d:0e:59:7c:ee:51:3f:4d:74:
4c:53:73:8d:00:ac:17:54:61:b4:e9:59:1c:e1:5b:
ae:66:eb:d1:1e:2e:e6:5c:e0:c3:37:8e:08:63:47:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:32:B9:18:C8:C8:74:D8:C2:E4:53:46:F4:7D:48:44:D3:2E:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/0be538f5-c00e-3c63-9777-b65e002bdadf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.225.0-104.251.226.255
104.251.229.0/24
104.251.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:8e:75:2a:7b:e6:46:35:7d:20:47:86:6c:f3:6f:ba:d9:00:
8a:f3:c0:e4:05:b8:b4:7a:39:c5:b7:12:47:b7:96:2c:89:93:
9c:64:65:f0:4b:d0:af:a4:4f:b1:5b:a4:2a:5f:b6:30:3e:cd:
7d:a2:bf:4f:64:7d:6e:1c:ed:42:7e:b5:ff:4a:7c:72:e5:fc:
e1:21:93:81:53:46:70:54:9c:84:c3:4c:88:92:1b:93:1c:6a:
9a:e6:b9:ac:b9:f5:f1:d6:cb:f2:3d:6c:94:5f:94:62:d1:9b:
a5:ea:ba:6f:50:eb:1a:7e:28:29:60:06:62:47:66:93:bd:05:
f6:70:35:94:12:af:b5:ec:91:e7:29:19:56:23:c4:44:a8:65:
f2:14:69:3f:b7:fd:42:ed:39:f6:ec:67:e4:c6:81:39:dc:cf:
91:7d:14:9b:ca:13:0b:0d:8a:2b:11:9b:b9:18:9d:b0:dc:42:
4b:d6:cf:82:1d:a1:f9:54:f6:0a:14:a1:e3:f4:97:29:22:32:
8e:49:09:35:c3:52:ef:61:5d:33:84:8b:b3:46:49:82:d4:cf:
b9:e0:1e:e8:d5:b7:f0:02:c6:87:89:64:f8:de:d0:fc:d4:8a:
b1:77:d3:99:4b:03:b6:b4:76:0f:e4:75:e6:60:58:fd:01:01:
4d:f0:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:42:12 2023 by rpki-client on console-ams.rpki-client.org