Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ad11303a-387d-308d-b4a3-465f7e51982f.roa
File: ad11303a-387d-308d-b4a3-465f7e51982f.roa (raw, json)
Hash identifier: GSrU2spBOPMkdvGjpvF7IG3hD1QN2XRwHaYNGNIsW2k=
Subject key identifier: 0A:81:E6:94:62:1D:4B:D9:D6:FE:51:77:0C:B9:3F:CF:3E:54:03:C3
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E0E1EDA35164EC4999F80
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ad11303a-387d-308d-b4a3-465f7e51982f.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 62900
IP address blocks: 198.176.54.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:0e:1e:da:35:16:4e:c4:99:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=85ef8080-851f-4b01-9959-250b852cd7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:49:cd:18:7d:b1:30:d1:de:bd:94:54:9d:
21:3d:56:40:46:09:aa:30:40:42:29:4b:e0:ab:76:
7b:85:b2:8b:4b:ea:97:b5:85:b6:51:fd:63:f8:95:
db:f2:aa:e2:93:cf:d5:ae:22:f9:91:48:00:8f:32:
81:9f:01:e0:5b:5d:f4:ed:ae:51:88:9b:51:03:9d:
36:ad:3d:db:b8:04:bb:3d:33:d5:76:de:0c:90:c3:
7d:c4:17:d1:81:72:02:c5:0b:6f:c7:be:47:c9:27:
35:de:2b:62:f8:d8:e1:ef:6a:ce:36:ce:77:1f:bc:
55:21:9e:9d:da:c3:36:53:ac:71:13:c0:15:d5:af:
71:42:ab:28:14:5b:a9:2d:ef:8b:a7:bb:b0:f6:9f:
01:ae:af:e7:ef:bb:9b:3a:78:f1:df:57:a2:93:aa:
0b:5b:07:c1:25:43:73:5b:36:20:f9:21:c9:f5:c1:
d1:11:81:3a:18:48:92:c0:16:20:a3:08:29:d4:ea:
42:d1:af:ee:d9:c0:c2:ae:89:21:52:b3:c3:1d:35:
25:f8:a8:53:f3:36:81:03:14:ad:fc:d6:f0:14:a3:
d7:ab:e8:cc:19:4e:f4:63:36:3d:3b:9f:12:22:4a:
d6:cf:5a:c4:41:4d:5b:31:16:ff:f6:e4:08:e7:74:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:E6:94:62:1D:4B:D9:D6:FE:51:77:0C:B9:3F:CF:3E:54:03:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ad11303a-387d-308d-b4a3-465f7e51982f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:02:10:d9:fd:16:94:d1:ca:d8:9e:63:d0:cd:4f:72:0e:4e:
e1:37:4f:72:6a:6a:63:90:a2:f0:be:89:75:10:0f:ff:8d:67:
15:f9:07:dd:ae:96:19:ed:7e:db:f2:f0:9f:40:a7:12:6a:21:
10:41:de:c0:e9:8f:bd:19:97:e4:bd:d6:0a:b7:c4:1b:03:ac:
b0:b8:de:2f:0a:f7:3b:7f:89:97:16:79:4a:43:30:27:42:d0:
5a:a6:9f:b8:82:14:a9:2c:5c:f3:48:2f:48:46:46:ba:da:ea:
f3:47:6a:c8:3f:df:4d:50:61:44:21:77:35:c3:80:18:40:97:
6c:4b:09:24:a6:e2:10:b7:b6:06:90:b7:f2:49:ac:de:ee:67:
46:12:17:23:54:44:99:9e:38:54:0a:08:36:ea:65:0e:c1:4c:
68:cb:1c:37:78:fc:96:fd:5c:fb:b3:73:aa:f9:7e:80:1a:d5:
a3:f6:ab:a9:8b:0c:2d:bb:da:c2:3d:a7:8c:35:fd:f0:ae:70:
cb:e2:dd:48:b5:62:c9:80:45:f8:79:0d:3a:82:9d:79:7b:1e:
12:85:ee:47:eb:bd:e8:da:0f:c3:74:d5:ca:7b:af:9c:b9:c8:
07:95:e5:b8:9c:3c:fa:fe:ad:14:47:b9:80:4d:14:66:0f:d6:
e7:2b:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org