Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/a29228a6-cd9b-3e2c-8a64-7b1330cde644.roa
File: a29228a6-cd9b-3e2c-8a64-7b1330cde644.roa (raw, json)
Hash identifier: 5HD2v0HOXQYFFt1qxSKQwIZR5GPe8CTnIWdtvZm12M4=
Subject key identifier: C1:DE:D5:91:79:03:2A:6F:C9:50:7D:FF:01:3D:C6:8D:0D:7A:4B:61
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E049D571595C67F332860
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/a29228a6-cd9b-3e2c-8a64-7b1330cde644.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 49466
IP address blocks: 205.210.165.0/24 maxlen: 24
172.81.99.0/24 maxlen: 24
104.143.43.0/24 maxlen: 24
205.210.164.0/23 maxlen: 24
205.210.164.0/24 maxlen: 24
23.249.23.0/24 maxlen: 24
23.186.64.0/24 maxlen: 24
23.249.16.0/24 maxlen: 24
172.81.104.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:04:9d:57:15:95:c6:7f:33:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=b8d8d95e-bd1a-4e23-a96d-7b72c110c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:ac:ef:c8:a2:f2:db:dc:b3:c4:a4:54:60:
5b:f9:48:03:f7:72:83:f7:21:1d:c3:72:36:a7:fa:
b3:75:3c:7c:98:5d:2b:af:da:d4:40:99:f8:5a:98:
5e:da:93:a6:7d:1e:b8:7e:d5:46:73:a0:2c:f5:7e:
ac:f9:41:e5:32:cf:7c:7a:3f:1e:6d:f6:24:c5:2d:
76:62:07:87:c6:af:2d:2a:26:99:08:f8:ac:d5:52:
4a:39:97:93:f6:d9:4e:dd:08:b2:c9:fe:5a:2b:03:
a0:b0:b0:27:9d:34:29:66:83:7e:76:3b:dd:a7:f0:
28:30:6e:30:89:54:f3:dc:5e:53:4e:d8:cb:d8:33:
91:14:48:cc:1f:03:cb:fa:87:25:fc:06:67:4f:b6:
7d:6b:cb:a8:7f:45:ed:ae:8e:21:eb:87:42:10:22:
61:82:5f:d0:e7:49:e9:dd:e1:93:c0:07:f6:4d:57:
14:83:8c:ff:1d:b9:6d:ce:72:01:ff:82:4a:21:0f:
b6:0c:b9:cb:41:69:1e:12:87:8d:d9:3a:34:a0:ab:
e1:0f:4d:fd:70:af:7e:53:2c:c1:63:62:58:35:e7:
34:59:bd:46:09:61:ed:59:51:df:c1:b0:97:34:a7:
5b:f8:82:2f:18:bc:a3:4a:65:a5:36:57:e6:60:0b:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:D5:91:79:03:2A:6F:C9:50:7D:FF:01:3D:C6:8D:0D:7A:4B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/a29228a6-cd9b-3e2c-8a64-7b1330cde644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.64.0/24
23.249.16.0/24
23.249.23.0/24
104.143.43.0/24
172.81.99.0/24
172.81.104.0/24
205.210.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:6f:43:ed:86:e3:5c:d3:5a:94:82:35:c4:07:5f:b9:9b:cd:
09:9c:7a:89:5b:21:d6:e4:b6:30:62:f1:52:6e:94:0c:46:f4:
e4:3f:db:c3:2c:5d:1e:58:9c:50:21:31:ee:c1:18:54:26:25:
4a:b9:f1:a5:99:08:66:c7:da:09:c9:29:e0:41:3d:1a:96:10:
52:5f:24:f3:bb:04:11:d2:8b:a3:e1:16:c6:f2:2a:23:08:3a:
4f:7f:5d:fc:10:2e:84:66:8a:ca:34:5c:69:1d:ed:36:72:9c:
15:ab:97:94:6d:01:be:42:9f:a9:f7:61:69:bf:78:fb:b0:8d:
f9:d0:2e:93:a7:f8:3e:f6:34:83:f4:d1:45:fb:23:15:24:d0:
22:51:6e:c7:88:ac:b5:b7:3f:31:36:a1:cb:b0:df:7b:44:ae:
f3:be:c5:6c:74:15:87:63:21:29:db:ff:38:97:6e:dd:7b:6a:
17:b0:38:a4:68:80:92:3a:9c:11:88:b1:8a:36:24:43:09:fe:
5c:61:3b:13:52:85:50:9a:44:02:5a:73:86:fc:78:57:ca:52:
19:54:63:0d:6a:3a:b0:16:32:23:6b:60:58:29:f6:22:31:6b:
73:74:ff:8a:1d:72:4e:08:a1:b3:49:27:03:8a:e1:c3:06:ea:
6b:9d:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org