Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/d96d2537-2f74-3832-8cbf-83c8c7c5e82a.roa
File: d96d2537-2f74-3832-8cbf-83c8c7c5e82a.roa (raw, json)
Hash identifier: bKOeoIBgHuI3DxpQV0ZcQj/duEHnn6xz9KCmzMB3X+g=
Subject key identifier: 17:07:A7:AF:B6:75:86:ED:D8:99:C1:86:FD:C8:14:33:74:99:09:13
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F43285841E42AC5E27D403DCCB0E3D100
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/d96d2537-2f74-3832-8cbf-83c8c7c5e82a.roa
Signing time: Mon 15 May 2023 16:08:10 +0000
ROA not before: Mon 15 May 2023 16:08:10 +0000
ROA not after: Wed 19 Jul 2023 12:22:11 +0000
asID: 49466
IP address blocks: 104.143.43.0/24 maxlen: 24
172.81.104.0/24 maxlen: 24
172.81.99.0/24 maxlen: 24
23.249.23.0/24 maxlen: 24
23.186.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:2a:c5:e2:7d:40:3d:cc:b0:e3:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: May 15 16:08:10 2023 GMT
Not After : Jul 19 12:22:11 2023 GMT
Subject: CN=57f065aa-767a-448c-8c41-627aa47f42d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:d8:6c:33:e9:d8:63:96:98:d0:f1:df:be:
7b:72:fa:83:a2:01:be:95:45:01:e8:e7:2a:0c:94:
aa:a2:26:03:44:c5:7b:5f:ea:2e:12:74:f4:0e:7f:
bd:12:55:57:a2:c0:e2:02:4b:17:c9:b5:73:18:7b:
a3:fe:9b:00:a0:40:0b:e7:89:7e:14:50:56:45:0e:
6f:70:42:91:a3:69:b5:5e:c1:75:a1:ab:40:82:3d:
5d:a1:58:54:d3:11:48:00:2f:a5:75:e0:bd:63:d9:
9e:b8:de:b4:1e:86:46:0b:08:eb:1d:eb:31:8b:58:
5e:79:a6:65:c2:95:c3:fc:45:3f:4b:15:02:4b:48:
c2:30:42:a0:97:f6:1c:15:f6:f9:f7:9c:52:ca:18:
69:62:a6:ec:42:ee:cf:32:c2:bf:26:d3:c0:a5:02:
f1:f6:d1:e3:21:00:10:5b:f0:b6:df:66:a0:e8:a5:
00:85:45:1b:1b:3f:b2:f8:4f:30:a4:d2:b6:d0:c4:
f5:ae:99:c0:df:78:0a:a5:64:40:f7:44:e4:e9:4e:
ec:33:f9:7f:fe:3f:ad:71:e0:b3:24:2e:b8:2b:fc:
33:e2:6a:b2:26:0b:ac:be:4c:6e:f3:2a:60:7d:4e:
89:37:04:fc:af:af:b6:5d:9e:fa:03:57:6b:fb:4b:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:A7:AF:B6:75:86:ED:D8:99:C1:86:FD:C8:14:33:74:99:09:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/d96d2537-2f74-3832-8cbf-83c8c7c5e82a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.64.0/24
23.249.23.0/24
104.143.43.0/24
172.81.99.0/24
172.81.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ff:c0:8e:7a:a6:d8:9a:8f:97:de:a6:51:97:16:d3:39:31:
44:bf:3a:cf:d4:71:83:f0:79:6a:b3:32:8e:42:5f:14:75:b3:
c2:c7:8b:ea:19:a5:44:0f:03:ee:0b:7a:c9:27:80:ad:e0:45:
f0:06:1f:e6:ae:a1:52:05:37:9a:74:c7:b2:63:40:33:04:9f:
fb:6b:13:9d:10:56:e5:21:5c:dc:c8:2f:0b:c0:aa:2b:1d:c3:
de:8b:19:cf:f0:4f:3a:de:99:b5:fb:7b:64:5c:31:40:24:a3:
42:d8:f1:61:07:12:9c:7d:29:08:61:00:4f:f3:41:a7:d1:2c:
07:36:9e:71:2c:51:d1:7b:21:e4:c3:4c:6f:b7:b3:c5:8b:a7:
53:62:6a:d7:58:75:a4:1d:94:1e:62:2d:4a:9d:21:e7:2a:bf:
9f:dd:37:9a:98:01:8f:f2:b3:2c:7b:07:ec:ed:f2:cd:b6:a4:
8e:d8:74:bc:49:0a:cd:cd:3e:ce:f4:09:54:04:e8:a1:f4:9e:
53:3a:ba:c7:51:76:d8:6e:e5:ba:12:85:0d:ce:84:c4:8e:93:
7b:7e:88:5a:b9:fd:38:22:d5:bd:a0:2c:47:cd:9c:3a:2c:18:
1c:c9:aa:9c:4e:a3:cb:97:26:a5:fb:80:41:90:1e:b4:2a:4e:
a4:aa:5c:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org