Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/a17eca20-1448-3439-b536-f977b31fb408.roa
File: a17eca20-1448-3439-b536-f977b31fb408.roa (raw, json)
Hash identifier: Xp4jy4xohNM1k8A1QXwrQ2ho0DX6l2Gx4bm8yYu0m+8=
Subject key identifier: E4:CB:D1:7D:B6:AF:94:39:BA:F2:EC:D6:C0:3A:71:AB:66:DB:1E:5C
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842AB6923467B8DD49E289061C0
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/a17eca20-1448-3439-b536-f977b31fb408.roa
Signing time: Wed 26 Jul 2023 01:00:16 +0000
ROA not before: Wed 26 Jul 2023 01:00:16 +0000
ROA not after: Tue 24 Oct 2023 01:00:16 +0000
asID: 997
IP address blocks: 172.81.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ab:69:23:46:7b:8d:d4:9e:28:90:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 26 01:00:16 2023 GMT
Not After : Oct 24 01:00:16 2023 GMT
Subject: CN=7df7bc3b-a720-4a38-b104-298ff5c903eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:95:fb:2e:3f:de:70:88:32:4b:e9:71:35:
12:70:6e:fe:7d:b1:88:14:7c:ad:1d:d3:c7:3e:a8:
89:cf:9b:69:c1:15:3f:5c:d6:d4:16:6f:29:49:48:
44:44:8d:4c:72:a9:8e:6a:df:c7:34:4e:f1:02:ff:
59:f6:10:e5:76:c6:d5:e0:85:79:d3:9e:4e:6d:7a:
62:e8:87:0b:e5:a5:15:7a:08:a9:b6:cc:97:cb:66:
b4:a6:fb:6b:89:59:80:f6:d1:04:e5:b5:62:38:3d:
77:94:89:c2:60:30:c2:e6:e0:4f:08:d4:ae:e9:76:
dc:2c:3d:40:50:18:ba:07:fb:a5:05:5d:b4:43:26:
2c:95:be:81:4e:08:41:e8:c3:9b:5c:dd:41:72:8b:
16:53:38:c2:11:f4:4c:2d:e6:79:ca:8c:57:a1:63:
36:85:07:eb:f3:4a:f8:a5:38:fa:a0:ca:70:21:84:
2a:35:62:46:cb:c5:da:3a:ac:a7:81:52:4c:47:c2:
9a:4f:a5:a3:5f:a6:77:ff:c3:4b:17:5c:37:ca:49:
93:58:f4:fb:f3:75:28:8f:6e:83:84:d4:a7:98:3b:
68:e5:a5:19:c6:71:23:49:cf:ec:71:19:82:97:6b:
4e:0c:ff:cd:3b:6b:e0:13:0e:a4:31:e4:25:02:2a:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:D1:7D:B6:AF:94:39:BA:F2:EC:D6:C0:3A:71:AB:66:DB:1E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/a17eca20-1448-3439-b536-f977b31fb408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:e7:8a:5f:c0:dc:d2:bf:c6:69:e1:8e:ac:f7:cc:c1:b2:d5:
46:28:0c:9e:16:a0:b6:0f:12:eb:81:77:32:cd:fc:2f:20:78:
ed:b6:43:03:48:fd:56:fc:cc:e2:0f:7c:2f:76:f0:3d:50:a0:
a3:9b:eb:6c:18:b6:3b:b7:b2:84:88:3f:24:e6:e2:e1:c9:f1:
10:79:fc:9a:66:95:58:8c:9b:1f:37:60:69:17:37:aa:0f:43:
46:a9:fc:7a:26:2e:e9:89:0e:94:23:66:8c:56:00:d9:e9:c2:
94:14:12:a3:df:ea:a0:91:3f:b1:b5:64:85:84:3e:c5:6d:c7:
5b:92:19:e3:aa:9f:15:21:47:cf:f8:53:86:11:12:22:f0:f7:
de:2f:8b:e7:4e:bf:39:33:32:ea:ff:79:5f:3f:25:00:06:2c:
d0:59:2a:74:5e:16:59:62:c1:90:2b:fd:64:20:12:a6:59:f7:
c0:45:d6:da:ba:92:9a:32:60:88:ee:81:a2:77:15:f7:e5:81:
ab:cf:ae:a9:2f:e1:e9:e3:b4:e8:54:70:38:71:18:48:4a:5e:
96:d4:79:31:75:a9:07:f5:67:0f:8b:61:3f:31:97:51:4d:e8:
16:7b:8b:d0:b9:af:83:eb:ca:01:d0:0d:0d:f4:fc:6a:34:64:
06:aa:7c:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKraSNGe43UniiQYcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2My
NDRjMB4XDTIzMDcyNjAxMDAxNloXDTIzMTAyNDAxMDAxNlowLzEtMCsGA1UEAxMk
N2RmN2JjM2ItYTcyMC00YTM4LWIxMDQtMjk4ZmY1YzkwM2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP2V+y4/3nCIMkvpcTUScG7+fbGIFHytHdPH
PqiJz5tpwRU/XNbUFm8pSUhERI1McqmOat/HNE7xAv9Z9hDldsbV4IV5055ObXpi
6IcL5aUVegiptsyXy2a0pvtriVmA9tEE5bViOD13lInCYDDC5uBPCNSu6XbcLD1A
UBi6B/ulBV20QyYslb6BTghB6MObXN1BcosWUzjCEfRMLeZ5yoxXoWM2hQfr80r4
pTj6oMpwIYQqNWJGy8XaOqyngVJMR8KaT6WjX6Z3/8NLF1w3ykmTWPT783Uoj26D
hNSnmDto5aUZxnEjSc/scRmCl2tODP/NO2vgEw6kMeQlAiqniwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTL0X22r5Q5uvLs1sA6catm2x5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgz
MWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvYTE3ZWNhMjAtMTQ0OC0z
NDM5LWI1MzYtZjk3N2IzMWZiNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmM4MzFmNmItNzFhNi00NmJiLTlm
NjQtMmRhODBjY2MyNDRjL2JjODMxZjZiLTcxYTYtNDZiYi05ZjY0LTJkYTgwY2Nj
MjQ0Yy5jcmwwHwYDVR0jBBgwFoAUqVBGpVp+uw/OBiK6pK8RWfI+zSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4
MGNjYzI0NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXnil/A3NK/xmnhjqz3zMGy1UYoDJ4WoLYPEuuBdzLN/C8geO22QwNI
/Vb8zOIPfC928D1QoKOb62wYtju3soSIPyTm4uHJ8RB5/JpmlViMmx83YGkXN6oP
Q0ap/HomLumJDpQjZoxWANnpwpQUEqPf6qCRP7G1ZIWEPsVtx1uSGeOqnxUhR8/4
U4YREiLw994vi+dOvzkzMur/eV8/JQAGLNBZKnReFlliwZAr/WQgEqZZ98BF1tq6
kpoyYIjugaJ3FfflgavPrqkv4enjtOhUcDhxGEhKXpbUeTF1qQf1Zw+LYT8xl1FN
6BZ7i9C5r4PrygHQDQ30/Go0ZAaqfPg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org