Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/680472c0-285e-3bd7-9454-ff12be267f97.roa
File: 680472c0-285e-3bd7-9454-ff12be267f97.roa (raw, json)
Hash identifier: ELnHlgnVy+sYh2BPkEYqJQtTPah8uSH0zyBxCDd4BZY=
Subject key identifier: 61:62:52:05:54:FA:42:8A:5A:68:B7:8F:CE:10:68:08:25:F7:3C:21
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F4328584282EE3E5449AEEDDD23E2C040
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/680472c0-285e-3bd7-9454-ff12be267f97.roa
Signing time: Tue 11 Jul 2023 13:00:18 +0000
ROA not before: Tue 11 Jul 2023 13:00:18 +0000
ROA not after: Mon 09 Oct 2023 13:00:18 +0000
asID: 62610
IP address blocks: 172.81.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:82:ee:3e:54:49:ae:ed:dd:23:e2:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 11 13:00:18 2023 GMT
Not After : Oct 9 13:00:18 2023 GMT
Subject: CN=ade6f497-8b2e-4488-9cdd-33a63eee720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:1d:af:79:34:9f:ce:9e:8f:d8:b6:71:6c:
ac:39:07:74:09:7d:a8:87:9a:79:9e:36:01:02:e1:
9a:59:c4:fa:2a:43:f2:4c:bb:99:50:4f:ae:d7:28:
4b:00:b3:14:6e:29:7d:d4:76:33:cc:fb:3e:03:4d:
3a:d7:23:28:93:72:f8:2d:7c:c4:c1:c2:b5:50:dc:
85:b2:78:5f:9e:83:68:4c:97:92:84:07:fb:b0:2a:
c5:c3:ee:16:a5:24:58:99:b1:21:85:72:b9:f7:7a:
4d:9b:43:15:fa:e6:80:79:72:65:db:08:22:5b:ca:
88:d0:a7:92:61:91:82:af:42:64:4c:ee:ce:20:db:
a6:28:8d:db:ee:8f:af:15:a3:2e:c7:32:33:43:26:
33:f8:5e:33:3f:6b:e8:ad:56:02:07:44:05:f0:63:
f2:eb:c9:9d:c1:6e:7b:63:c4:5c:35:2c:2c:79:89:
3f:c2:e6:fa:f7:39:33:85:51:d7:c0:51:95:fc:c1:
be:fe:81:95:79:06:7f:59:60:1c:3c:82:3d:b1:7d:
91:cd:06:64:4b:5d:c9:aa:eb:03:69:c7:b7:eb:26:
06:73:6c:97:33:a2:87:fb:74:7c:58:35:3e:35:36:
89:70:3d:bb:9c:dd:0a:10:60:c6:6c:c3:e1:ce:7e:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:52:05:54:FA:42:8A:5A:68:B7:8F:CE:10:68:08:25:F7:3C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/680472c0-285e-3bd7-9454-ff12be267f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:a5:89:56:88:0f:c9:aa:c7:06:3f:35:f4:61:ad:4b:21:1a:
4e:5b:51:7c:d6:6c:0c:e0:f3:b0:13:4e:c8:57:03:52:c7:88:
5c:c5:17:05:d8:70:5d:e2:83:dc:b1:26:4f:8f:b2:b7:ff:04:
75:ee:4c:57:d5:b3:15:96:c8:81:7d:a4:47:e5:8b:6c:53:d9:
1f:ec:cd:d1:b3:09:6e:29:8c:dd:c8:c5:04:26:7b:2e:ea:1e:
0f:0e:1c:00:be:3e:6d:9d:00:d6:3b:b4:1e:af:78:aa:19:84:
95:50:61:2e:95:4f:6a:37:42:82:87:36:88:b1:15:57:88:4c:
1f:f6:fc:58:9c:0b:58:59:0d:38:64:67:19:f0:ea:86:12:eb:
88:c8:5c:e5:41:65:8f:e6:8c:64:96:51:13:c5:19:f7:a4:40:
54:57:e4:d7:9c:07:54:da:86:49:ba:7d:07:71:db:f9:a6:e7:
da:e1:a4:30:12:b9:7f:ba:eb:bb:87:c5:2d:cf:ee:73:b0:f8:
80:c2:0a:df:3b:d9:b7:53:ce:1e:e1:ef:0c:17:a6:bf:2c:70:
d7:5b:d0:8c:18:d1:08:15:46:2c:97:75:cd:b0:f9:8b:01:ff:
bd:46:93:7a:c0:70:d9:94:38:a6:59:1e:69:22:4e:8c:a5:64:
4f:f6:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org