Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/8701b060-3282-32bf-924b-ba0ec771ac04.roa
File: 8701b060-3282-32bf-924b-ba0ec771ac04.roa (raw, json)
Hash identifier: HWQtx+5VWDv+khjSwrYpcapXFjtGfr8xhCKqZuWcEnY=
Subject key identifier: 6D:8A:FB:77:3F:D3:41:15:A7:95:88:04:9F:99:FA:6C:61:B6:E6:36
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F4328576D51CC73C042CFC16CFFC20F01
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/8701b060-3282-32bf-924b-ba0ec771ac04.roa
Signing time: Thu 05 Sep 2019 04:50:03 +0000
ROA not before: Wed 04 Sep 2019 04:00:00 +0000
ROA not after: Tue 04 Sep 2029 04:00:00 +0000
asID: 23241
IP address blocks: 170.89.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:ff:c2:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Sep 4 04:00:00 2019 GMT
Not After : Sep 4 04:00:00 2029 GMT
Subject: CN=39736a72-3796-4ca5-95a7-5bb2691ca0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:53:e0:bb:a4:85:53:13:a6:5a:d7:19:5f:
6d:32:a7:a1:36:d8:41:f3:e5:ce:45:b6:06:bb:56:
a6:e3:6e:3f:10:64:2a:22:e5:c9:af:46:e2:98:38:
71:48:3b:75:e7:87:d2:2a:94:f5:e7:f1:d6:6a:37:
a6:15:2e:59:a3:4e:6b:36:69:60:61:26:1e:a2:c7:
41:81:8f:87:f1:d1:f1:f0:4a:19:51:20:f5:37:6c:
30:bf:d3:5b:53:f2:9e:d6:41:c5:8d:8c:0d:a3:49:
47:a8:9f:9f:bd:95:18:1a:14:7c:0d:25:a3:5b:58:
f5:38:a4:42:e4:88:ef:9e:7d:ee:04:ff:35:54:fc:
51:e7:16:cc:5d:80:01:37:1a:20:43:7d:13:6d:7d:
ed:dd:f9:86:07:b2:f9:07:d4:0d:f6:25:f6:a1:b2:
b8:ed:a9:32:b5:dc:c1:0d:84:2a:bc:b8:a4:e8:f9:
a4:c9:33:29:be:c2:5f:1e:31:88:54:cd:4d:c3:1c:
15:08:fe:54:3b:3e:fc:0e:98:ef:79:0e:7e:19:09:
84:55:54:ab:06:9c:7d:a7:cd:c4:3d:da:19:70:ef:
e0:eb:98:53:18:0e:40:17:6b:08:f6:ca:62:bf:f9:
33:73:43:e1:b3:41:31:49:ed:74:6f:8b:06:96:bf:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:FB:77:3F:D3:41:15:A7:95:88:04:9F:99:FA:6C:61:B6:E6:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/8701b060-3282-32bf-924b-ba0ec771ac04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:aa:f3:d8:9d:f5:bb:02:25:13:c9:76:ad:b3:a9:c7:cf:b5:
ff:b9:6b:4e:ac:04:b2:9a:95:11:6c:32:84:4c:74:0b:c0:59:
6b:da:c3:e3:34:ed:35:32:38:5d:c1:b4:5f:46:f9:63:e6:e0:
4b:76:61:24:2c:c8:c0:3f:60:eb:49:e6:aa:5d:ae:36:fc:a6:
a7:a2:72:95:db:63:af:ef:c7:58:23:f6:f6:83:31:69:34:38:
c8:59:76:6f:6b:63:28:ce:c2:ab:89:25:dc:d2:b8:f2:da:d5:
8a:83:92:47:d8:0c:18:ca:47:fd:55:56:c5:94:dd:85:0f:16:
96:46:79:28:99:60:e9:66:73:f5:d8:0c:f3:c1:59:49:d6:5b:
83:81:82:29:83:16:bd:70:2d:85:ec:78:a6:d4:28:2a:5b:ac:
af:2a:d4:43:68:99:7d:1f:c7:bd:a4:73:f6:cd:b0:92:c8:ef:
84:8a:2f:13:10:af:3c:7f:5c:c4:f7:c6:5c:93:9c:ff:d9:2b:
a3:0f:d9:72:f7:3c:00:e0:e8:d9:19:67:1b:02:d8:70:15:77:
1c:92:11:18:45:a8:9a:7e:db:6d:fc:d5:9c:65:02:6c:d4:12:
7b:51:51:77:26:41:75:e5:9e:6c:5a:96:33:2c:17:5f:87:60:
0d:08:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:54 2024 by rpki-client on console-fra.rpki-client.org