Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/1e53875e-d901-3f92-a3a5-63cc8f830897.roa
File: 1e53875e-d901-3f92-a3a5-63cc8f830897.roa (raw, json)
Hash identifier: 7/8WDOsYH7solW1izAViUiZLtUG5ChqdUH84sJ3JSy8=
Subject key identifier: CE:59:71:38:D8:3B:21:BA:70:F3:68:11:E5:39:99:2A:62:34:FD:F7
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F4328584290E3A6ED2BD7498198646298
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/1e53875e-d901-3f92-a3a5-63cc8f830897.roa
Signing time: Sun 16 Jul 2023 13:00:18 +0000
ROA not before: Sun 16 Jul 2023 13:00:18 +0000
ROA not after: Sat 14 Oct 2023 13:00:18 +0000
asID: 61414
IP address blocks: 172.81.104.0/24 maxlen: 24
23.186.64.0/24 maxlen: 24
104.143.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:90:e3:a6:ed:2b:d7:49:81:98:64:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 16 13:00:18 2023 GMT
Not After : Oct 14 13:00:18 2023 GMT
Subject: CN=88c050fe-cf68-4ea8-a02b-6cf6549752b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:c2:95:08:06:30:5b:62:d4:a1:9c:73:28:
2a:01:75:fc:db:0e:25:59:46:36:a1:fa:0a:0e:d1:
3d:55:92:06:75:68:68:e1:6c:40:74:87:eb:93:b0:
fa:5b:d1:01:aa:6f:5b:8b:93:2f:79:a4:2b:32:a7:
5c:66:04:96:40:b5:10:97:99:d0:57:e9:d5:70:07:
16:57:12:7e:be:e3:d5:14:81:07:4b:57:ff:5a:e1:
0e:6a:9c:63:31:3d:fa:75:9d:c2:3c:a1:94:fc:9d:
28:d7:34:d5:de:54:ed:5a:73:cd:65:b9:52:d1:01:
da:fa:4a:77:47:55:65:90:ee:a7:87:1f:d5:25:00:
25:67:89:9e:89:4d:1f:9f:65:8f:1e:90:1a:15:99:
37:12:07:36:4b:d7:ab:c9:5f:22:dd:d8:bd:ee:a3:
43:91:ad:7e:8a:a7:4c:14:48:8e:45:89:56:2d:ed:
9f:8a:7e:62:e3:43:67:c3:89:f4:2d:d9:5d:08:7b:
b8:39:4f:b2:06:ab:ab:d3:a1:99:fb:4e:7e:61:fe:
1b:d8:24:08:7e:d7:14:7f:0e:79:33:cc:37:d9:0d:
42:63:32:cd:27:1d:da:49:fa:5c:2b:79:df:bc:7f:
55:bd:a3:94:c4:7c:b9:d5:d1:3f:16:40:95:73:d0:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:71:38:D8:3B:21:BA:70:F3:68:11:E5:39:99:2A:62:34:FD:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/1e53875e-d901-3f92-a3a5-63cc8f830897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.64.0/24
104.143.43.0/24
172.81.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:df:58:be:27:78:ff:bc:58:bd:9a:74:61:a2:cb:69:01:5b:
51:66:e6:1c:b3:53:67:ac:06:04:bd:90:29:3c:26:85:90:3a:
48:eb:86:f4:5b:cc:76:4f:9d:5e:85:24:c8:e8:8b:eb:73:1b:
0e:6d:eb:65:a2:da:e5:2f:9a:71:32:97:ab:69:04:52:ee:8e:
18:fe:e3:49:69:c2:8f:c3:64:13:b8:0f:a4:3e:59:33:88:9e:
d5:a5:90:e9:00:7e:49:f5:06:13:74:81:16:4c:39:2e:0e:32:
93:14:e5:24:52:93:ee:63:c7:78:47:ae:b2:9c:a0:61:26:16:
24:5e:b4:7e:70:00:47:71:6a:8b:3f:19:02:8b:e6:74:10:35:
8f:08:61:dd:3c:1b:c7:cc:48:e6:d4:80:3e:16:31:2c:cc:6b:
06:a7:8a:ac:65:f1:45:c5:a6:c1:11:8e:60:64:75:2c:4b:67:
2f:a8:46:f7:92:e6:31:41:12:d7:ae:25:0e:e9:41:41:19:bd:
07:49:34:6e:ae:a5:4c:5c:f2:e1:3c:7f:e1:df:74:46:e4:14:
0a:00:77:5a:23:17:4c:fc:c4:a2:28:14:c0:b3:09:68:28:b2:
43:06:0b:59:8a:75:51:dd:81:7c:05:be:3d:c7:a4:2a:82:08:
69:96:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:54 2024 by rpki-client on console-ams.rpki-client.org