Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/cf392ca5-9a9b-3c18-8b98-4cb942426acc.roa
File: cf392ca5-9a9b-3c18-8b98-4cb942426acc.roa (raw, json)
Hash identifier: uX/PyDSNJISR2qQYKWbVcuR2el5z5iVbtT+ILTortOg=
Subject key identifier: 81:9B:9B:E2:33:6D:A8:3D:D5:22:7D:4A:42:14:9B:8F:4F:C0:EC:89
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285842659E07989F940AC0D87D0E60
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/cf392ca5-9a9b-3c18-8b98-4cb942426acc.roa
Signing time: Sat 01 Jul 2023 01:00:16 +0000
ROA not before: Sat 01 Jul 2023 01:00:16 +0000
ROA not after: Fri 29 Sep 2023 01:00:16 +0000
asID: 62610
IP address blocks: 198.176.52.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:9e:07:98:9f:94:0a:c0:d8:7d:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 1 01:00:16 2023 GMT
Not After : Sep 29 01:00:16 2023 GMT
Subject: CN=7f4f7a04-f9dc-4e12-a528-cdaf6d93d4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:04:3a:2d:46:02:0a:fb:5d:e2:de:21:73:
b5:d8:dc:d6:d5:c3:a1:81:d3:c1:2c:0d:0a:c8:77:
ec:2d:4f:87:30:7e:4d:a6:09:ed:95:5b:74:78:43:
b3:14:18:7a:1e:1f:79:3b:cf:bb:41:48:37:9f:fd:
8d:d4:97:c7:c9:98:2e:f7:62:41:bd:ed:25:59:c8:
03:64:62:8d:b4:13:73:03:fe:be:e9:77:de:b2:85:
80:a5:d4:f1:67:35:79:3e:c5:ba:c0:b0:2c:b3:4a:
5c:99:16:6e:6f:c7:bb:40:df:0b:02:47:ae:01:71:
ee:72:ca:11:50:7e:8c:a9:67:3d:d7:0f:c3:0f:e3:
0e:ef:28:d4:24:16:6d:9c:fe:e2:80:52:7a:e4:ec:
0e:dc:3a:66:97:93:51:9d:91:85:05:9b:3c:32:15:
dc:c0:02:09:d1:62:8e:b2:48:d6:2f:33:19:b4:82:
53:a2:bf:14:b6:c1:28:3e:6e:6c:97:a1:5b:d2:95:
04:cd:d7:ae:66:cd:6b:1b:4e:14:7d:2b:d5:af:8c:
9c:eb:29:3f:85:f4:0e:46:c4:00:16:18:b2:17:7b:
ab:cb:1f:46:c8:95:31:d8:3b:dc:c7:47:7f:f1:32:
60:3d:01:0c:ba:dd:d9:0e:c9:11:4a:05:60:04:90:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:9B:E2:33:6D:A8:3D:D5:22:7D:4A:42:14:9B:8F:4F:C0:EC:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/cf392ca5-9a9b-3c18-8b98-4cb942426acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:38:55:e3:6f:66:92:07:ed:b8:85:c4:d3:fd:62:13:92:2e:
2d:8b:56:d3:61:3d:d9:74:96:8e:b5:93:bc:d4:32:79:7b:88:
54:2b:33:2a:67:ee:ef:8a:31:aa:82:c0:06:05:5c:26:70:ca:
a7:1f:8f:23:46:be:ce:f4:b4:36:53:4b:df:4f:ed:b8:9b:c9:
0b:fa:9e:a0:67:89:c9:00:7b:47:a1:03:74:15:a5:3b:73:ea:
c6:19:4f:86:a5:1f:cc:1b:6c:43:ea:e8:d8:ae:7d:76:e2:c8:
3b:9f:d0:29:17:4a:b5:4f:44:7b:60:04:ea:fe:51:bf:1f:b1:
bf:6d:d9:86:7e:fe:45:ff:31:9f:cf:59:c0:9d:41:78:47:60:
89:65:ae:9c:68:9c:cb:49:ff:14:ca:48:69:9f:25:0e:86:55:
2a:17:58:e8:42:c7:dd:e7:69:4a:96:aa:d0:9e:f8:af:72:0b:
0f:89:f0:1e:3b:90:e6:ba:26:b6:e5:38:0a:22:6a:bd:2a:a8:
ce:67:16:09:b3:51:cc:f5:f4:b0:9d:16:d6:74:a3:cf:a2:34:
15:91:2a:a4:51:e9:d9:5e:19:86:53:ef:ce:a8:f5:a4:b6:ac:
dc:a2:a1:a9:b9:36:11:96:a3:aa:81:8b:93:a6:d6:ee:5a:eb:
e7:a0:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org