Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/616b236a-26e6-3eb9-a12b-c4b863089c58.roa
File: 616b236a-26e6-3eb9-a12b-c4b863089c58.roa (raw, json)
Hash identifier: HUmSiVj3JG2D0moa0Nd767/CRANPe1N4jjux4mrHxkM=
Subject key identifier: 60:68:86:E0:3A:EB:C9:DB:03:2D:86:1E:86:21:E0:4C:1D:D8:6C:BE
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842802390A7A4E3D3C0F71B6200
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/616b236a-26e6-3eb9-a12b-c4b863089c58.roa
Signing time: Mon 10 Jul 2023 13:00:18 +0000
ROA not before: Mon 10 Jul 2023 13:00:18 +0000
ROA not after: Sun 08 Oct 2023 13:00:18 +0000
asID: 49466
IP address blocks: 23.186.64.0/24 maxlen: 24
23.249.23.0/24 maxlen: 24
104.143.43.0/24 maxlen: 24
172.81.104.0/24 maxlen: 24
172.81.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:80:23:90:a7:a4:e3:d3:c0:f7:1b:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 10 13:00:18 2023 GMT
Not After : Oct 8 13:00:18 2023 GMT
Subject: CN=a4e86ff6-4ea7-415e-8673-d0c56210f542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:9e:2f:9e:0e:1f:af:3d:3d:c5:89:7d:47:
f9:81:83:63:b4:01:8c:a9:6c:7d:4a:94:6f:e9:7e:
88:e4:ae:13:4f:bf:c6:ee:e2:bc:7f:a1:fd:42:85:
94:37:85:fc:8e:4c:60:30:4f:a3:b5:62:ef:d8:74:
8d:18:07:19:25:e8:94:02:53:a1:18:f5:46:47:e6:
d4:5d:73:70:b4:53:5c:ce:51:20:eb:6f:b2:de:d0:
fe:21:f7:74:dd:c6:5a:57:b9:2d:52:a4:09:64:60:
20:89:30:d4:92:e6:24:43:f1:4e:9a:92:06:ef:00:
da:f5:47:22:14:2b:a2:09:73:0e:c2:c2:68:4a:a6:
32:3e:0e:e4:f5:8a:58:6f:e3:83:1e:31:ff:26:a6:
06:a0:ac:27:e8:35:f4:f3:38:4d:aa:83:9e:c6:69:
36:f7:1a:31:fd:f3:c7:f3:3d:7f:1a:0d:b4:b1:d3:
61:c0:e7:d8:03:ba:3d:a0:34:9a:ac:4f:5b:21:df:
ca:ef:02:61:e4:3f:7e:4e:c4:b8:6c:d3:8f:6b:da:
ed:52:f9:cf:6d:e8:eb:b8:7a:e7:8a:69:c2:14:2d:
ae:75:4b:e1:af:7a:72:62:25:38:29:56:d7:09:96:
8e:97:f7:51:9e:a8:0f:62:bd:60:01:39:c0:4e:cc:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:86:E0:3A:EB:C9:DB:03:2D:86:1E:86:21:E0:4C:1D:D8:6C:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/616b236a-26e6-3eb9-a12b-c4b863089c58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.64.0/24
23.249.23.0/24
104.143.43.0/24
172.81.99.0/24
172.81.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:54:40:9d:21:e5:43:f7:f0:b6:11:b5:dc:37:46:15:55:9f:
d8:bc:74:b8:f3:cc:24:26:b7:5e:94:16:46:e1:4c:b9:41:aa:
52:b2:a6:53:a9:ef:e1:fc:87:d4:03:3f:d0:68:85:a8:eb:18:
d4:ef:05:bd:68:b7:32:98:32:6f:d5:db:97:6d:13:97:98:80:
0d:9b:7f:4f:8d:bb:d0:9b:7a:ab:11:89:5c:95:7a:77:fd:de:
c4:30:d9:46:08:5e:69:c2:eb:b7:77:a8:fe:d7:9a:ac:e1:0b:
bd:46:82:81:23:3c:44:8b:44:6b:51:14:46:76:67:79:a2:88:
6d:9e:79:66:86:0b:6d:6a:1d:35:9d:ae:b1:c3:31:ba:b2:37:
e4:41:b2:8c:b2:82:ae:12:a5:2e:e8:b6:1c:4d:45:54:f5:25:
3e:14:ad:56:64:72:e0:17:ed:0e:5f:29:8e:2f:64:c2:62:59:
bf:0d:15:4a:02:1c:1e:12:7f:b3:dc:f0:4f:9c:95:5e:78:48:
56:67:44:df:8e:f2:0e:aa:43:1f:f5:a5:35:b2:60:40:cb:74:
07:6e:3c:14:38:7c:d4:74:c0:4b:39:95:dd:06:3f:db:3c:aa:
ec:62:34:1e:c1:7d:fa:41:34:93:0a:86:de:41:ab:50:d7:5b:
a8:0e:80:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org