Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/be0fb0ec-bf18-3d38-9696-f417a7ab646f.roa
File: be0fb0ec-bf18-3d38-9696-f417a7ab646f.roa (raw, json)
Hash identifier: UNzQU95Ic0x9u64jXjjVQL2gUniWftfJLVz7eGByU4U=
Subject key identifier: 87:52:FE:5E:A7:F9:67:CA:73:33:37:D9:3A:F2:AC:C3:2E:9B:64:79
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F432858430E8484F516F505AFAC707840
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/be0fb0ec-bf18-3d38-9696-f417a7ab646f.roa
Signing time: Wed 30 Aug 2023 13:00:26 +0000
ROA not before: Wed 30 Aug 2023 13:00:26 +0000
ROA not after: Tue 28 Nov 2023 14:00:26 +0000
asID: 7922
IP address blocks: 172.81.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0e:84:84:f5:16:f5:05:af:ac:70:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Aug 30 13:00:26 2023 GMT
Not After : Nov 28 14:00:26 2023 GMT
Subject: CN=5881d35e-5233-47b2-8139-382390e47324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:6c:6c:f2:8d:ef:30:d1:d5:82:4c:b3:1f:
0d:21:43:f4:31:dc:76:05:f5:77:41:53:e3:9b:a9:
8f:e2:e5:31:43:ff:18:95:08:b9:dc:9a:22:6f:19:
b4:d6:26:d0:1f:15:78:6a:10:94:03:5f:fa:9a:61:
77:51:e5:86:5d:5b:ba:bc:42:00:17:49:8f:de:42:
f0:7e:2d:d1:fa:1d:07:36:ec:65:15:eb:fc:4c:3f:
f4:b3:f3:55:e1:c9:3f:43:ed:74:c1:39:69:86:bb:
d2:d1:ae:80:6f:4f:4d:d1:f4:9b:6b:39:1a:91:61:
a1:b8:45:43:ea:13:9f:ac:b3:e7:b9:03:1b:2e:11:
61:39:26:62:1b:c0:10:9e:9c:5c:0e:c4:bf:e7:8c:
ab:cd:0c:2f:b6:37:c1:8b:1f:b0:33:7e:d1:13:43:
18:6c:75:c5:96:35:eb:96:dd:c0:24:b3:e4:72:fe:
e1:45:0e:88:2f:d8:70:6f:16:86:77:1a:b5:68:a5:
90:d0:00:17:33:94:fd:e4:87:ec:bf:a9:14:58:b6:
5c:d7:1f:7e:80:80:ea:93:c4:72:e0:4f:02:d4:1b:
d6:89:8f:3d:2f:fd:d7:18:86:13:af:1a:e2:31:be:
81:86:98:a0:bf:9b:3f:73:4e:38:9b:51:8b:5b:94:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:FE:5E:A7:F9:67:CA:73:33:37:D9:3A:F2:AC:C3:2E:9B:64:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/be0fb0ec-bf18-3d38-9696-f417a7ab646f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:82:c4:d6:0f:60:03:56:b5:fc:5c:7b:21:ad:de:cc:63:54:
12:7e:51:2a:df:f8:af:91:d7:ce:de:e0:49:ac:b1:00:ea:e9:
45:f6:ed:3e:31:4c:80:7c:b5:62:ef:81:35:3f:9f:c3:7b:ca:
8b:45:af:23:5f:1c:d9:f1:21:96:65:3b:89:fd:97:ea:95:63:
d4:b6:f5:88:dd:03:dc:e6:3c:22:8e:7a:cc:11:ef:b4:ac:d4:
fc:c6:a4:7b:27:f7:d1:14:2f:48:f0:92:32:58:d5:61:e6:4f:
3b:db:3c:ff:d5:2f:3e:b4:0b:0b:b3:e1:c0:b1:b9:84:7a:22:
df:ca:47:a2:2c:e9:2e:3e:c8:c9:e5:b1:f7:40:15:f4:09:d8:
aa:14:e0:72:49:c9:0e:e8:6e:ab:88:89:0f:21:f4:84:b6:f6:
4e:59:25:2e:c8:d2:dc:34:2e:61:c9:eb:38:1d:5b:31:50:bd:
2b:e3:10:9a:91:2d:85:6f:2d:11:4a:1a:b6:42:5e:00:9a:2a:
26:33:71:ff:c0:3d:fc:53:f9:10:0b:be:ca:58:f0:c8:e3:43:
7e:8b:11:ea:d1:e6:30:35:32:f0:cc:fc:7a:98:0d:b5:6b:9a:
bb:51:c9:ca:89:45:95:82:d8:a3:bc:83:48:2b:70:be:c8:fe:
3f:d1:b8:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMOhIT1FvUFr6xweEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2My
NDRjMB4XDTIzMDgzMDEzMDAyNloXDTIzMTEyODE0MDAyNlowLzEtMCsGA1UEAxMk
NTg4MWQzNWUtNTIzMy00N2IyLTgxMzktMzgyMzkwZTQ3MzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquxsbPKN7zDR1YJMsx8NIUP0Mdx2BfV3QVPj
m6mP4uUxQ/8YlQi53Joibxm01ibQHxV4ahCUA1/6mmF3UeWGXVu6vEIAF0mP3kLw
fi3R+h0HNuxlFev8TD/0s/NV4ck/Q+10wTlphrvS0a6Ab09N0fSbazkakWGhuEVD
6hOfrLPnuQMbLhFhOSZiG8AQnpxcDsS/54yrzQwvtjfBix+wM37RE0MYbHXFljXr
lt3AJLPkcv7hRQ6IL9hwbxaGdxq1aKWQ0AAXM5T95Ifsv6kUWLZc1x9+gIDqk8Ry
4E8C1BvWiY89L/3XGIYTrxriMb6Bhpigv5s/c044m1GLW5SibwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIdS/l6n+WfKczM32TryrMMum2R5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgz
MWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvYmUwZmIwZWMtYmYxOC0z
ZDM4LTk2OTYtZjQxN2E3YWI2NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmM4MzFmNmItNzFhNi00NmJiLTlm
NjQtMmRhODBjY2MyNDRjL2JjODMxZjZiLTcxYTYtNDZiYi05ZjY0LTJkYTgwY2Nj
MjQ0Yy5jcmwwHwYDVR0jBBgwFoAUqVBGpVp+uw/OBiK6pK8RWfI+zSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4
MGNjYzI0NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSCxNYPYANWtfxceyGt3sxjVBJ+USrf+K+R187e4EmssQDq6UX27T4x
TIB8tWLvgTU/n8N7yotFryNfHNnxIZZlO4n9l+qVY9S29YjdA9zmPCKOeswR77Ss
1PzGpHsn99EUL0jwkjJY1WHmTzvbPP/VLz60Cwuz4cCxuYR6It/KR6Is6S4+yMnl
sfdAFfQJ2KoU4HJJyQ7obquIiQ8h9IS29k5ZJS7I0tw0LmHJ6zgdWzFQvSvjEJqR
LYVvLRFKGrZCXgCaKiYzcf/APfxT+RALvspY8MjjQ36LEerR5jA1MvDM/HqYDbVr
mrtRycqJRZWC2KO8g0grcL7I/j/RuFI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org