Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/ebae2385-1503-3a7d-ad63-85a6fb1d2b56.roa
File: ebae2385-1503-3a7d-ad63-85a6fb1d2b56.roa (raw, json)
Hash identifier: HSkexyRqN+tIIcFrMM1cw7QxfHj5dUs4fi0bzjCfKRg=
Subject key identifier: 95:A1:04:40:33:96:AD:11:69:6E:28:A6:A3:9C:89:BB:75:94:2D:B8
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F43285843359A105333AB1BF958580100
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/ebae2385-1503-3a7d-ad63-85a6fb1d2b56.roa
Signing time: Wed 13 Sep 2023 13:00:23 +0000
ROA not before: Wed 13 Sep 2023 13:00:23 +0000
ROA not after: Tue 12 Dec 2023 14:00:23 +0000
asID: 23241
IP address blocks: 170.89.64.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:35:9a:10:53:33:ab:1b:f9:58:58:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Sep 13 13:00:23 2023 GMT
Not After : Dec 12 14:00:23 2023 GMT
Subject: CN=48503571-beec-41f5-a276-078fe90c7880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:f8:06:d2:cc:80:72:ef:e9:1d:da:be:f5:
92:e1:25:3b:46:0f:5b:4c:3a:66:1d:0d:ef:73:03:
61:76:ae:3e:39:c3:11:f9:da:8e:08:af:81:0f:62:
a8:e1:60:0c:94:22:01:02:83:92:99:cd:ee:d9:f1:
b4:62:6e:be:1c:75:8c:65:b7:a8:00:a9:b2:c3:90:
ee:19:bf:59:2f:24:dc:da:a9:0c:15:f8:1f:d8:8f:
ce:cf:18:a4:cd:9a:20:a9:71:3c:ee:11:af:f8:1a:
f0:58:42:ff:6d:3d:1d:4b:e1:b9:cc:d6:14:d9:67:
10:6c:31:14:b4:7c:79:ca:28:e8:bb:6c:92:0b:7d:
79:06:ed:ff:e6:7f:89:5a:88:1f:28:c3:33:9e:8a:
e1:27:1c:a8:f5:d4:8d:f6:bf:ba:5c:73:83:0b:6b:
ac:a1:db:b9:a5:3b:2c:56:4a:27:14:01:a4:7a:b2:
ef:72:82:3d:1e:12:db:da:4a:1d:88:e3:8b:29:6f:
ee:7e:63:41:c6:5c:5c:82:94:38:04:ff:87:6a:4e:
95:5a:67:d9:69:83:06:c0:09:7e:47:1e:cd:78:ce:
47:b8:4c:b4:b7:8b:14:e6:5f:3c:cf:7b:12:94:a0:
69:c6:fc:5a:37:a4:88:15:22:f1:a3:52:0a:5c:40:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:04:40:33:96:AD:11:69:6E:28:A6:A3:9C:89:BB:75:94:2D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/ebae2385-1503-3a7d-ad63-85a6fb1d2b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:32:07:e7:84:0e:02:32:9c:aa:34:7c:97:09:b5:e0:23:f3:
da:34:f7:db:4c:74:12:23:49:56:9c:54:a3:44:16:f7:fc:5a:
8a:57:1c:42:c8:7f:db:78:5f:3a:cb:13:e4:63:70:ee:aa:52:
4c:b8:33:d3:04:e2:28:91:57:ae:06:47:fc:43:db:9e:a9:19:
b9:56:48:11:26:d5:74:b2:07:b3:bf:7f:d9:38:9d:17:31:09:
2c:1b:4d:3c:ec:8d:ea:f4:e8:83:e7:ff:6d:1c:98:d8:b9:33:
e8:da:f7:97:f0:1c:ad:61:8a:5e:fb:43:01:01:0e:10:fc:7a:
78:d1:fa:4e:79:d2:f4:3e:91:7b:08:b8:b1:a2:26:17:a5:19:
ca:31:e8:c6:5c:14:b8:87:92:d9:c4:73:18:91:8f:db:8a:ee:
6b:e4:4b:6a:13:49:c2:5c:51:ce:5a:6d:af:f3:a1:20:6b:c6:
f8:df:7f:f3:18:12:0b:27:3e:be:ea:69:fa:8d:86:06:ad:1c:
85:c7:d6:03:87:00:74:82:71:bc:a4:85:9e:62:0d:32:2f:02:
13:e3:25:84:ed:ac:55:6e:ab:c2:f5:61:80:88:b7:2e:1d:dc:
09:bb:66:99:6f:15:c1:3b:2d:3b:2b:36:23:c0:dd:4b:c2:89:
27:17:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org