Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/b3cb8ec6-90b4-3b9e-b890-6f9dfc6a3487.roa
File: b3cb8ec6-90b4-3b9e-b890-6f9dfc6a3487.roa (raw, json)
Hash identifier: qvrywA0PRvyU2U1MeL1AxBwF3gWI5HnM150UyzhWEZo=
Subject key identifier: DB:86:03:33:8D:78:A8:36:AD:D2:D5:EF:D5:C4:6E:6B:16:06:95:45
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F4328583EC55B654AAE17AB8E906FF180
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/b3cb8ec6-90b4-3b9e-b890-6f9dfc6a3487.roa
Signing time: Fri 21 Jun 2019 10:51:11 +0000
ROA not before: Fri 21 Jun 2019 10:51:11 +0000
ROA not after: Thu 21 Jun 2029 04:00:00 +0000
asID: 21859
IP address blocks: 23.249.16.0/20 maxlen: 24
104.143.32.0/20 maxlen: 24
104.251.224.0/20 maxlen: 24
172.81.96.0/20 maxlen: 24
198.176.48.0/20 maxlen: 24
205.210.164.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c5:5b:65:4a:ae:17:ab:8e:90:6f:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jun 21 10:51:11 2019 GMT
Not After : Jun 21 04:00:00 2029 GMT
Subject: CN=57517e0d-f69d-46ef-b61b-5cce9ccebf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:2c:62:1b:9b:30:e1:21:67:51:06:dc:a2:
6a:61:2a:06:99:43:a9:ed:3a:cd:73:40:ea:82:d9:
43:8d:2f:96:54:78:bd:7a:a2:a8:b6:fc:de:1b:41:
44:c2:23:77:44:6f:69:25:f6:47:a1:f2:72:cc:61:
67:bb:76:fa:53:06:8c:83:30:31:7e:4b:3d:b5:db:
ba:e3:fe:7f:f8:20:f8:01:1a:9c:ba:72:7e:6b:15:
09:7b:5b:3c:ff:60:92:5b:27:77:08:87:7a:62:45:
da:38:2b:00:fd:ff:8e:d2:8a:fd:07:42:81:36:84:
ed:0a:d2:84:d1:51:44:28:fb:cf:df:c3:9d:5a:e5:
a1:ef:1d:d8:27:7d:98:36:b8:dd:c0:17:7b:5b:a1:
8e:04:7a:dc:9e:27:b6:54:bd:7f:0d:a3:30:b8:01:
eb:62:59:a5:3d:11:d7:09:ac:9b:81:d5:99:d1:88:
6d:a7:e2:e7:e3:8b:56:ca:f7:6b:84:68:a4:ea:4c:
fa:1f:7b:cf:31:ca:ee:d6:a5:3a:3d:4e:da:fa:7d:
de:7c:cc:42:4d:0f:3e:f3:81:3f:69:14:16:87:5d:
69:ef:f7:16:5c:fe:af:c8:3e:c8:12:96:92:b5:ed:
43:24:b4:78:ae:b2:27:98:c5:8b:26:4d:99:68:e0:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:03:33:8D:78:A8:36:AD:D2:D5:EF:D5:C4:6E:6B:16:06:95:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/b3cb8ec6-90b4-3b9e-b890-6f9dfc6a3487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.16.0/20
104.143.32.0/20
104.251.224.0/20
172.81.96.0/20
198.176.48.0/20
205.210.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:19:cb:c0:3c:63:c8:70:56:cf:fd:2e:6b:d4:d4:a8:dc:71:
b5:26:80:4d:07:58:40:0d:de:69:1b:69:8b:73:c2:8d:de:f1:
bf:bd:1c:b0:fe:29:33:0d:99:04:45:03:15:8d:81:74:f1:6f:
26:a4:99:33:3d:d6:8b:c1:5e:c2:76:14:c6:46:75:7d:1e:93:
ff:20:a9:37:50:fe:cd:b6:e4:f4:92:eb:f7:59:a4:b2:4a:51:
39:94:3f:be:63:66:d4:0e:7b:1a:b2:62:97:78:4b:b6:fd:2c:
9c:51:ed:8d:53:26:d6:da:cd:61:db:5b:1d:92:42:df:39:1d:
34:69:34:53:69:50:48:a2:b6:12:7d:f8:31:c0:b5:1b:47:29:
63:67:1c:a8:d9:89:e4:d0:f9:ea:30:05:0e:ba:22:6c:e8:be:
8c:16:e8:f0:20:9e:3b:34:65:d4:73:a2:92:52:aa:0e:8d:4a:
39:b8:b9:78:c4:b9:5b:80:5f:c4:66:f8:1b:d7:71:4e:a5:c4:
a8:6d:34:07:89:25:a6:6e:7b:13:54:e6:cd:1a:e8:02:f2:69:
3c:84:3f:d9:69:3b:00:17:f4:ea:76:05:af:02:c3:66:90:55:
95:54:d9:93:01:13:e9:4a:80:b5:a5:9e:ce:09:85:fe:ba:64:
1f:b7:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org