Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/15bbff47-f345-3b26-a312-d9ac39b112f5.roa
File: 15bbff47-f345-3b26-a312-d9ac39b112f5.roa (raw, json)
Hash identifier: VWBEFxnIkdgSXuBVBLJ9qCj8Iq8E/u1PQABwCOiUZOg=
Subject key identifier: 42:93:EA:D2:F9:FA:D7:21:49:60:F6:BB:84:78:C2:DE:8D:7F:21:1C
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842B52E943DAF754DA9023EF9C0
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/15bbff47-f345-3b26-a312-d9ac39b112f5.roa
Signing time: Sat 29 Jul 2023 13:00:21 +0000
ROA not before: Sat 29 Jul 2023 13:00:21 +0000
ROA not after: Fri 27 Oct 2023 13:00:21 +0000
asID: 61414
IP address blocks: 172.81.96.0/20 maxlen: 24
198.176.48.0/20 maxlen: 24
104.251.224.0/20 maxlen: 24
104.143.32.0/20 maxlen: 24
23.249.16.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b5:2e:94:3d:af:75:4d:a9:02:3e:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 29 13:00:21 2023 GMT
Not After : Oct 27 13:00:21 2023 GMT
Subject: CN=bda164b5-da13-44e6-9352-da95a5330c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:c1:fb:51:0b:4b:26:e5:c9:d4:e4:30:1d:
47:e2:1c:76:9e:ac:0b:b8:dd:b8:11:16:7b:a3:be:
c2:88:4c:b1:69:da:ec:2d:24:12:b6:f7:97:ef:34:
6c:29:fe:ce:42:34:c9:de:ad:7f:22:09:ad:3f:6e:
9e:2d:08:65:ab:c7:21:b8:1d:9f:79:f7:c4:7f:46:
27:03:6a:65:c2:34:d5:2b:67:3d:4a:54:9a:a9:c9:
5e:3a:c2:1b:2c:56:74:09:1f:df:dc:ae:d5:85:25:
fa:94:30:c5:0a:8b:60:5c:ce:80:6c:0e:84:e1:aa:
c5:bb:99:62:f4:71:9a:0e:bc:b9:f4:ae:10:97:fa:
8b:ef:a0:b4:de:9e:bc:20:9c:c2:bc:e5:9a:39:75:
00:03:4f:03:f1:64:0c:6e:96:80:da:c9:9a:77:e4:
bc:fd:8f:ea:09:36:32:44:eb:ed:7f:b9:68:37:c1:
79:65:e4:ec:4b:82:4f:de:b6:7e:99:a2:1b:68:30:
7d:aa:57:e5:95:8e:64:d1:1a:89:c7:17:74:c3:6b:
c1:27:53:8f:ed:b7:52:7f:85:54:ea:45:ef:32:79:
62:ce:87:e3:48:e7:8a:d8:8d:1c:da:c6:4f:0b:ba:
e2:4a:fc:95:fe:f7:90:6e:6a:fb:44:bd:9b:9a:a3:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:EA:D2:F9:FA:D7:21:49:60:F6:BB:84:78:C2:DE:8D:7F:21:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/15bbff47-f345-3b26-a312-d9ac39b112f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.16.0/20
104.143.32.0/20
104.251.224.0/20
172.81.96.0/20
198.176.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:35:93:fa:e0:d2:24:f3:77:05:f7:82:8e:6b:f2:aa:8a:84:
4e:f7:e7:f1:cd:96:01:4a:c0:ed:fb:85:3e:ec:9f:63:e0:83:
de:2a:c7:b1:bc:de:d7:73:3a:96:b9:41:2b:fd:29:a2:33:97:
af:73:8d:a5:1f:be:e2:bd:6e:a8:f0:50:00:dc:a2:e0:a0:fc:
a8:c5:e3:6f:d8:6b:dd:a4:5b:d4:20:ad:77:29:18:be:66:b5:
24:cf:7b:d8:01:81:c8:78:7b:ef:53:f6:b9:5c:27:35:88:02:
b7:ea:da:b7:e4:3c:9c:87:55:1b:27:72:74:0f:0d:e1:fa:28:
25:0a:bc:b6:b1:48:b3:64:ee:60:15:f0:f7:a2:86:05:ff:de:
11:f8:d9:24:34:fa:2c:50:30:58:d4:81:1c:92:c0:11:66:a4:
35:fc:e8:3e:b1:2b:ee:2f:9c:85:85:a2:65:d9:b3:5c:d8:ab:
df:b1:74:37:7c:e8:bc:5a:8e:f3:84:a7:1a:7b:e4:05:fb:03:
38:ed:5a:46:6c:38:95:cc:f3:99:32:74:83:6e:14:62:91:af:
8c:3d:36:40:9d:17:c4:4e:e6:68:8d:a3:5b:23:d8:ae:92:92:
a5:ce:5d:39:32:50:b6:f5:09:ac:cc:ab:97:b7:68:35:4b:72:
e9:42:86:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org