Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/474d32d1-aa98-3662-aa9b-f82c48f0b0d0.roa
File: 474d32d1-aa98-3662-aa9b-f82c48f0b0d0.roa (raw, json)
Hash identifier: CI2fDNHYjE5suAkSwv2lvuksgAeI+3iNmop5We0hXU0=
Subject key identifier: 72:CF:3A:7D:A1:F2:65:8F:1E:8D:C7:AB:B2:4B:B4:C3:3C:96:F4:8D
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F43285843359A08AB7F6AE69C01D53100
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/474d32d1-aa98-3662-aa9b-f82c48f0b0d0.roa
Signing time: Wed 13 Sep 2023 13:00:23 +0000
ROA not before: Wed 13 Sep 2023 13:00:23 +0000
ROA not after: Tue 12 Dec 2023 14:00:23 +0000
asID: 16509
IP address blocks: 170.89.64.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:35:9a:08:ab:7f:6a:e6:9c:01:d5:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Sep 13 13:00:23 2023 GMT
Not After : Dec 12 14:00:23 2023 GMT
Subject: CN=5226a496-ec9b-44a4-8023-03597f516ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:09:5a:45:35:a1:af:9b:fb:03:c0:82:af:
8a:de:ec:99:a5:a1:25:c4:11:7a:bc:69:5e:09:0a:
5c:43:12:ac:f0:58:ee:e2:43:4a:21:aa:9b:fe:aa:
27:67:9a:f2:f4:01:8e:17:87:69:8b:f1:0b:e2:b2:
8a:a2:ed:ed:18:42:ef:ea:50:62:e0:a7:ad:fc:cb:
19:4e:ce:24:79:1d:eb:ff:38:09:1f:c0:23:e6:31:
4f:47:6a:d3:8c:2f:97:eb:28:73:c7:e1:02:c4:6e:
1c:0d:90:9f:2f:d6:5d:25:b9:84:34:e1:68:c5:56:
bc:43:92:88:a1:ad:f7:7f:75:0d:33:bd:b9:43:42:
9a:99:4b:4a:82:cb:24:f0:3e:6a:8a:d5:3f:e7:ea:
0d:4f:39:ef:c0:73:3f:30:a2:80:0a:a2:b1:92:61:
75:ad:64:43:c0:5a:28:c7:b3:bb:d1:98:9a:fd:43:
6f:48:a3:de:13:e6:d1:96:0c:5e:41:96:b5:70:07:
3e:4a:0f:a4:ff:cf:f2:f9:f1:2b:9b:63:d2:52:49:
d6:d4:76:40:f9:43:e2:39:a2:7f:68:8b:ac:68:2b:
48:73:e4:64:36:17:ab:cc:d9:9a:88:97:60:e6:60:
f5:61:08:52:17:41:eb:15:80:cb:79:ed:b3:2f:77:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:3A:7D:A1:F2:65:8F:1E:8D:C7:AB:B2:4B:B4:C3:3C:96:F4:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/474d32d1-aa98-3662-aa9b-f82c48f0b0d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:18:ee:99:c7:95:45:78:bc:c6:5b:fb:fb:8d:51:65:79:69:
c8:4d:8e:a1:a0:a4:a8:de:1a:35:fd:8f:9b:00:de:48:38:c2:
45:44:0f:62:34:64:c7:ec:9a:b3:3d:5c:e6:05:b7:eb:0e:d8:
c4:be:b4:ff:ff:33:fd:95:db:f5:a4:60:03:10:53:94:6b:42:
36:6a:5d:61:e9:b2:88:5e:27:e7:b2:52:6c:ba:bd:bc:08:14:
6c:3c:6d:03:90:9e:32:c2:61:8b:0d:57:05:4a:94:9c:44:1a:
9b:69:9d:23:73:bf:81:d5:5c:1c:cb:ce:54:3c:6e:f3:ad:c5:
bf:6a:62:b7:65:08:9a:f5:0d:04:9f:13:f8:c5:4e:9c:b4:80:
87:2d:93:d8:b7:be:4d:4b:4b:39:92:6f:cf:09:e0:94:34:86:
a0:14:23:e6:88:50:87:77:d2:78:43:65:c5:f2:40:59:7f:36:
0a:bc:3b:e9:8d:4f:90:b5:1a:67:d8:ea:2a:fe:ae:f9:7e:09:
04:82:11:40:b6:08:d9:ef:9c:17:8c:fd:95:c5:48:7b:08:75:
ff:8c:7a:85:e0:f8:8c:c4:98:73:02:36:5c:71:dc:81:56:1f:
29:7b:b6:2e:b8:a8:0d:54:42:a4:bf:7e:f1:01:6f:06:59:5b:
10:86:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org