Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/2407efcc-60f4-36cb-9d58-f9abb988c1e7.roa
File: 2407efcc-60f4-36cb-9d58-f9abb988c1e7.roa (raw, json)
Hash identifier: S5VWhiAGoWtWTLAL11f8e2sIwB89ikizoxX31bqH3cc=
Subject key identifier: 82:CE:F7:CA:EB:F4:C5:C0:EA:9B:9C:BC:CC:1D:9E:F7:9D:14:B4:35
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F4328576D51CC73C042CFC16CFFC63ACE
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/2407efcc-60f4-36cb-9d58-f9abb988c1e7.roa
Signing time: Thu 05 Sep 2019 04:54:37 +0000
ROA not before: Wed 04 Sep 2019 04:00:00 +0000
ROA not after: Tue 04 Sep 2029 04:00:00 +0000
asID: 16509
IP address blocks: 170.89.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:ff:c6:3a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Sep 4 04:00:00 2019 GMT
Not After : Sep 4 04:00:00 2029 GMT
Subject: CN=09f46d3f-f263-4a9c-abc6-e909b7645526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:f5:38:fd:9b:f5:f6:b7:8d:d0:61:9f:b4:
ea:df:ac:dc:e7:89:b8:54:2c:d1:94:de:b4:26:f0:
ff:ca:5f:41:ad:57:10:36:ca:1f:9e:a3:1f:c5:e5:
6f:54:d1:a9:43:98:c1:29:14:0e:df:95:44:b5:d5:
dc:59:f8:fe:b1:73:a9:b2:85:37:f7:e1:75:23:a7:
12:11:de:14:c4:0f:20:40:96:9c:65:ce:1c:26:d0:
e5:d7:66:16:98:ad:8a:a2:d2:75:21:3e:25:97:2b:
47:88:95:80:68:98:86:fc:df:f4:8d:ae:6c:ee:8b:
ae:46:3c:a7:26:d2:b8:1a:23:29:e6:26:ea:3d:49:
8b:fb:85:14:6a:bd:55:9d:c8:a4:c1:c6:0d:29:f2:
eb:91:98:52:9d:86:a3:04:9d:ec:6a:18:e4:5c:5e:
de:69:81:e9:c4:ed:4e:98:0c:4e:df:43:79:ef:04:
6b:7a:5f:ae:e9:84:d7:43:c4:5e:99:91:69:11:16:
90:00:dc:a7:9f:08:21:e5:79:ad:32:20:47:5e:70:
78:c9:51:19:95:e5:4d:a7:61:63:be:40:a9:ef:a7:
b9:b7:eb:dc:28:d3:9f:9f:a4:61:43:44:91:26:64:
ef:9e:41:75:05:7a:69:02:1b:c0:86:d0:4a:4a:af:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:F7:CA:EB:F4:C5:C0:EA:9B:9C:BC:CC:1D:9E:F7:9D:14:B4:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/2407efcc-60f4-36cb-9d58-f9abb988c1e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:d0:fc:76:41:35:ff:21:89:48:1b:56:22:c9:83:ef:30:b1:
2d:65:55:f2:e6:8a:8f:88:76:8c:f2:b0:90:62:70:22:6d:ca:
a3:be:35:b9:49:aa:84:5e:c4:df:ec:8b:42:a1:a7:f4:4b:4b:
c0:00:52:62:b9:30:97:41:e8:86:0b:35:67:2c:f4:c4:f2:26:
69:58:26:5c:50:74:9c:c8:19:75:26:a8:5a:c1:b1:f8:d4:39:
da:67:84:b5:f5:c0:50:58:e9:73:9c:38:2b:e4:c1:a7:44:ea:
2b:5d:8b:45:07:28:a2:38:0c:98:09:8b:b5:fd:e4:c5:98:4c:
48:3c:97:12:96:c4:b9:a3:5d:b1:64:55:f1:9f:ac:15:ee:24:
07:d4:ca:5f:c6:26:31:e6:67:f9:5c:6f:41:1d:62:9e:fc:03:
d3:80:f7:3c:db:e4:55:47:59:91:29:cb:71:68:c9:4c:b6:ed:
44:38:d9:c3:ac:6e:f9:fc:a9:17:b3:28:b9:47:5c:fd:f7:2e:
ed:65:b3:69:61:17:b1:e0:25:a6:3a:6b:f7:4d:99:5e:5d:ea:
a0:a3:c0:7b:b9:15:8d:c2:13:70:52:70:9b:2c:a7:ef:2b:0c:
6a:4b:4d:5c:53:2b:b6:06:5c:08:e7:70:4e:ff:bf:cf:ef:41:
03:06:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org