Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/1fac6d5e-cea1-380f-a7b9-adc185d62b68.roa
File: 1fac6d5e-cea1-380f-a7b9-adc185d62b68.roa (raw, json)
Hash identifier: ic278IyrECTEoh3n1e1aymES1ByademOS5rRdQJ5IIQ=
Subject key identifier: F7:CE:D6:FD:46:7E:6A:74:AB:DF:0A:7E:A5:34:8C:3E:A8:C0:68:D2
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E0EC18121E713E6B1BC80
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/1fac6d5e-cea1-380f-a7b9-adc185d62b68.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 62900
IP address blocks: 198.176.53.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:0e:c1:81:21:e7:13:e6:b1:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=f014e295-d2f8-4963-82a2-c1be250f9ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:e3:82:bf:79:a8:9c:e9:43:86:8d:a7:9c:
b5:1f:e3:48:68:bf:f4:12:b6:0f:70:90:c6:e7:21:
f5:81:b7:c9:05:72:6e:a5:86:83:ff:71:e8:ae:b6:
64:c6:d4:e0:f5:96:d4:2f:14:89:e0:4c:d3:24:0d:
be:32:2f:5f:ec:d6:b9:a8:c4:a8:49:57:d3:9f:95:
62:88:6c:10:08:71:40:e5:a2:96:55:24:6c:11:94:
be:e8:16:ed:55:28:80:f7:3d:1a:f6:4c:bb:c4:3e:
67:b3:c4:8d:1a:5d:4d:b6:bf:ff:a6:1c:da:ed:36:
a9:77:00:ed:fb:7a:59:32:57:ef:8d:1e:7b:0d:f1:
8d:43:fa:e0:0f:13:43:e2:23:cb:1c:23:0b:e1:67:
df:d7:21:d7:1a:40:06:83:19:18:c4:c8:b3:9f:b1:
2b:67:a7:d8:92:f5:7b:a8:f8:4f:6e:36:b0:53:20:
65:a8:8d:e9:f7:6d:4d:08:70:4d:be:3a:f9:f5:a3:
8b:1b:90:78:ad:f3:9a:eb:c8:3f:9a:bc:4e:fc:4b:
67:a5:e2:72:c8:df:c6:53:89:d7:91:15:7e:ec:3e:
20:40:22:fd:2c:9c:f9:92:35:75:17:12:fd:17:52:
98:1f:01:f6:1a:19:d7:fc:63:c3:09:d2:24:5a:c8:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:D6:FD:46:7E:6A:74:AB:DF:0A:7E:A5:34:8C:3E:A8:C0:68:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/1fac6d5e-cea1-380f-a7b9-adc185d62b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:70:7b:1c:f2:f6:a4:fe:1e:68:85:46:65:ec:11:68:45:e9:
1b:bb:89:87:69:65:05:e8:cb:5c:48:5d:10:c6:0e:60:05:93:
ae:ac:89:74:75:b3:bf:cc:51:ae:55:c1:e8:08:04:84:04:ff:
cc:e9:c9:bd:fb:6f:16:56:63:1f:d7:c7:48:a1:22:e0:8e:5c:
bb:0e:2a:41:0f:9e:32:f1:6d:f2:d9:16:96:9f:49:e0:83:9d:
f5:1d:36:8d:ba:a7:d5:61:d2:51:8a:33:52:44:b3:c1:be:b1:
e2:eb:4e:e8:61:f0:4c:5f:b1:3c:c2:95:e9:b5:45:87:9e:f7:
2e:86:71:5f:f9:03:8d:92:f4:39:f7:d7:7c:24:1d:f9:8e:b0:
d9:bd:c6:b6:f1:6a:ed:1f:77:a9:2b:97:98:70:3c:15:db:3f:
3d:38:1e:5c:48:56:83:71:94:44:46:73:54:48:31:ae:67:9e:
9a:46:28:62:72:4f:eb:67:b6:da:b6:7a:db:d7:cf:3f:88:94:
3c:0b:d4:ea:f7:36:3d:a1:99:8e:8a:44:08:38:4a:d9:93:9e:
06:c0:e5:eb:9c:e4:70:15:8a:d3:86:4b:8e:42:b7:e3:f7:54:
1f:78:65:77:13:e1:54:e9:5f:f1:ff:37:0b:31:cc:7e:71:57:
f2:28:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org