Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/17054cdb-0a3e-38ef-8c7b-238ca2a7bab9.roa
File: 17054cdb-0a3e-38ef-8c7b-238ca2a7bab9.roa (raw, json)
Hash identifier: Lh6zNnoajWbyj0WB3mtq/HbzE+QXWy7mmRJIWqHQK1E=
Subject key identifier: C4:97:99:DC:30:FA:AC:F0:05:81:3E:38:58:EF:A0:E0:8A:71:79:68
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F432858430E847E0050D90ED2BC936080
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/17054cdb-0a3e-38ef-8c7b-238ca2a7bab9.roa
Signing time: Wed 30 Aug 2023 13:00:26 +0000
ROA not before: Wed 30 Aug 2023 13:00:26 +0000
ROA not after: Tue 28 Nov 2023 14:00:26 +0000
asID: 7922
IP address blocks: 172.81.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0e:84:7e:00:50:d9:0e:d2:bc:93:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Aug 30 13:00:26 2023 GMT
Not After : Nov 28 14:00:26 2023 GMT
Subject: CN=6e414adc-725a-40e9-a8bf-3491ee58d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:2b:bb:98:10:46:bd:dd:6f:07:bc:5e:49:
da:5b:91:b6:bb:29:92:90:66:2c:45:c9:68:e1:3b:
fb:7f:ab:47:58:61:30:1a:12:96:5b:b9:f4:c5:47:
f9:7e:e5:08:94:80:f9:8b:21:1b:e6:ea:d5:18:dd:
1d:42:c1:51:2c:cd:1e:79:db:f0:3a:c7:6d:7a:bc:
37:b6:f3:ee:67:23:d9:ff:07:10:82:57:78:a3:63:
35:46:0a:2f:cd:ea:b8:5f:1e:69:9b:58:38:f3:ce:
91:35:e0:00:a5:7c:64:29:48:de:a3:62:c3:ac:ac:
37:78:c2:5a:5f:03:ce:41:b0:07:bf:ff:e1:15:ad:
bb:fc:09:35:c0:b8:d7:65:87:54:18:6d:53:6b:2d:
61:4e:52:09:33:6b:48:17:5f:28:84:6c:39:d2:56:
5c:ab:12:01:10:d2:88:16:05:87:4e:19:86:37:75:
77:a3:fc:fb:2f:01:7a:cf:8e:7d:38:9c:24:7c:c8:
da:47:41:45:7a:39:83:5a:8a:73:6a:70:57:84:44:
78:cd:18:a2:4b:e4:57:da:04:3f:6b:38:b3:00:57:
f8:95:5d:ac:67:72:1d:41:d7:5f:a7:2c:e5:ed:08:
d1:81:76:48:d4:cb:d0:00:d6:b2:8c:87:e3:5f:6b:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:99:DC:30:FA:AC:F0:05:81:3E:38:58:EF:A0:E0:8A:71:79:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/17054cdb-0a3e-38ef-8c7b-238ca2a7bab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a8:7a:88:cd:42:56:0a:28:01:86:0c:d5:cc:3c:01:2f:1c:
25:aa:15:47:60:18:fb:85:d6:6e:a3:ec:4a:fa:1d:93:a9:63:
6b:a0:f2:6c:ca:2f:53:45:5c:45:f3:9b:8d:a3:3a:a9:1c:c5:
23:fa:d3:65:7d:59:99:18:8c:ab:0b:cd:dd:67:6a:94:50:9f:
ad:84:a0:9f:3b:ed:2b:ee:03:bb:f9:87:7e:37:7c:19:dc:65:
e7:ef:7b:f7:33:e9:78:67:f4:dd:3f:05:6b:8b:45:d8:4d:34:
2c:5f:12:9a:4c:f8:c4:87:86:9d:ea:26:c8:8b:b8:17:c0:43:
f2:19:8e:ab:94:14:1a:22:d2:ff:f1:a6:b4:3f:31:00:99:75:
b2:93:7a:f3:9c:1b:9b:f3:07:f2:56:65:56:12:63:c6:fc:ff:
8b:86:41:ba:fa:22:2d:4c:23:13:6e:9a:a5:de:d9:87:8b:99:
ae:14:5c:65:80:e2:00:d7:55:de:a5:ff:75:37:2d:0c:f4:cc:
47:09:de:76:1c:36:15:cf:19:d7:26:db:b7:44:35:3a:7a:38:
3e:a7:44:07:a0:70:dc:d0:a2:8b:74:30:3c:b3:a2:17:ca:4b:
9a:be:90:a7:63:0f:64:91:a1:1e:e0:46:75:39:ab:fb:71:fd:
1e:05:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:54 2024 by rpki-client on console-ams.rpki-client.org