Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/6a14079a-c13a-3f14-90af-5530b217bf59.roa
File: 6a14079a-c13a-3f14-90af-5530b217bf59.roa (raw, json)
Hash identifier: V1Dt2fQrm+cX01Bt+Lxs+w/bRtW+s9di4/Cv9UZY+r0=
Subject key identifier: 64:D8:14:2C:8A:4E:46:0B:9E:5C:7B:56:BB:64:DF:1A:65:33:B5:E3
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E02CEF88DFC3D3019D800
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/6a14079a-c13a-3f14-90af-5530b217bf59.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 36260
IP address blocks: 172.81.109.0/24 maxlen: 24
104.251.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:02:ce:f8:8d:fc:3d:30:19:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=d6b4c9db-455b-4ded-811c-12ef0077fd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:d7:ca:70:81:c4:cd:32:c6:49:eb:22:f8:
df:fa:11:5e:85:0f:15:c0:f7:d3:f9:fa:ce:94:0a:
1c:9e:60:1a:52:46:d9:86:85:d6:65:35:ef:6e:ec:
92:0b:8c:ac:7b:ba:7b:9a:4b:58:08:b3:99:41:05:
92:e0:32:c8:4f:a3:ea:57:8a:aa:11:f9:eb:25:8c:
0c:b4:de:cd:15:c4:f5:7e:e2:5b:54:61:c5:69:8f:
8a:a5:ef:e0:ba:e9:23:91:a6:84:b4:34:10:f2:8b:
d1:b3:cd:b5:0f:0a:02:0a:ad:93:df:68:c8:ca:6e:
53:0a:dd:f3:92:bb:90:02:01:f8:41:14:1e:44:60:
64:33:f4:f9:e6:b2:81:3b:78:4c:9d:73:12:74:50:
cf:17:65:d9:9b:34:a3:1b:6c:2c:a5:a1:f9:8c:08:
4f:2f:e7:42:6a:fd:97:23:9a:40:a2:f8:7e:0f:91:
e0:09:48:28:da:cf:cd:87:1c:60:b2:1f:be:32:22:
89:ea:da:ba:22:17:b0:ca:90:51:e2:17:06:dc:34:
32:70:de:73:d4:30:f4:38:4f:f2:83:65:86:8b:5f:
4f:b4:72:47:6a:66:30:47:01:ab:93:73:b4:30:1a:
ae:71:37:13:6c:69:20:fa:e1:5b:3b:8d:5a:a0:48:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:14:2C:8A:4E:46:0B:9E:5C:7B:56:BB:64:DF:1A:65:33:B5:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/6a14079a-c13a-3f14-90af-5530b217bf59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.239.0/24
172.81.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:3e:81:48:01:be:5e:c1:85:a3:2e:41:b8:cc:d9:4d:c4:53:
5a:a3:7c:a1:c4:78:fd:82:fd:6e:31:27:f5:40:91:61:52:e5:
b6:2b:3d:89:d2:38:80:ca:36:8f:fc:67:cf:51:5d:31:fd:98:
9d:66:4f:d1:c7:9f:5b:08:c1:0e:30:3a:cf:e5:45:87:5a:76:
0c:f2:ed:8c:5e:cc:e1:cf:bc:d7:95:50:9f:38:a7:95:00:26:
e5:64:87:cf:1b:5d:32:03:42:cb:91:cb:02:1e:86:fa:bd:f8:
88:62:90:f5:a1:7b:da:10:f0:c6:be:36:4b:23:10:dd:c0:d0:
ba:78:48:8a:7b:79:64:14:84:71:36:f0:c9:58:b3:1f:31:02:
1c:f0:fe:a9:2c:97:c5:25:7b:d4:1a:89:17:17:d4:03:ab:2d:
86:fb:ae:fe:20:51:6b:30:0c:76:2f:31:8a:04:c7:14:65:0b:
89:31:61:45:c0:96:c5:21:e0:bd:ce:da:50:10:bb:5c:e1:e3:
0d:e8:64:a9:25:9d:2f:31:2a:1c:79:09:74:b1:0a:b8:ad:ad:
2d:34:b4:1d:34:7d:b4:ef:c5:43:3e:7d:c8:a6:0e:84:1f:14:
cd:f8:32:57:b4:6e:16:92:04:0d:74:8c:6a:5a:df:0b:87:30:
ce:e4:4b:ce
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEJlngLO+I38PTAZ2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2My
NDRjMB4XDTIzMDcwMTAxMDAxNloXDTIzMDkyOTAxMDAxNlowLzEtMCsGA1UEAxMk
ZDZiNGM5ZGItNDU1Yi00ZGVkLTgxMWMtMTJlZjAwNzdmZDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VrXynCBxM0yxknrIvjf+hFehQ8VwPfT+frO
lAocnmAaUkbZhoXWZTXvbuySC4yse7p7mktYCLOZQQWS4DLIT6PqV4qqEfnrJYwM
tN7NFcT1fuJbVGHFaY+Kpe/guukjkaaEtDQQ8ovRs821DwoCCq2T32jIym5TCt3z
kruQAgH4QRQeRGBkM/T55rKBO3hMnXMSdFDPF2XZmzSjG2wspaH5jAhPL+dCav2X
I5pAovh+D5HgCUgo2s/Nhxxgsh++MiKJ6tq6IhewypBR4hcG3DQycN5z1DD0OE/y
g2WGi19PtHJHamYwRwGrk3O0MBqucTcTbGkg+uFbO41aoEhonwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGTYFCyKTkYLnlx7Vrtk3xplM7XjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgz
MWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvNmExNDA3OWEtYzEzYS0z
ZjE0LTkwYWYtNTUzMGIyMTdiZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmM4MzFmNmItNzFhNi00NmJiLTlm
NjQtMmRhODBjY2MyNDRjL2JjODMxZjZiLTcxYTYtNDZiYi05ZjY0LTJkYTgwY2Nj
MjQ0Yy5jcmwwHwYDVR0jBBgwFoAUqVBGpVp+uw/OBiK6pK8RWfI+zSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4
MGNjYzI0NGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPvvAwQA
rFFtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAk+gUgBvl7BhaMuQbjM2U3EU1qjfKHEeP2C/W4xJ/VAkWFS
5bYrPYnSOIDKNo/8Z89RXTH9mJ1mT9HHn1sIwQ4wOs/lRYdadgzy7YxezOHPvNeV
UJ84p5UAJuVkh88bXTIDQsuRywIehvq9+IhikPWhe9oQ8Ma+NksjEN3A0Lp4SIp7
eWQUhHE28MlYsx8xAhzw/qksl8Ule9QaiRcX1AOrLYb7rv4gUWswDHYvMYoExxRl
C4kxYUXAlsUh4L3O2lAQu1zh4w3oZKklnS8xKhx5CXSxCritrS00tB00fbTvxUM+
fcimDoQfFM34Mle0bhaSBA10jGpa3wuHMM7kS84=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org