Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/9b80118a-ecc0-359b-8114-4673973c4bc0.roa
File: 9b80118a-ecc0-359b-8114-4673973c4bc0.roa (raw, json)
Hash identifier: 0IXF2bouF8vAdyjI29tNOGJEv3YfWowZnIUQ5sNAHDY=
Subject key identifier: 86:66:E1:57:10:49:A7:08:69:13:D0:13:76:9C:BF:50:71:17:1A:67
Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Certificate serial: 010D0C9F432858426438BA2A0C3BA51588900A00
Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/9b80118a-ecc0-359b-8114-4673973c4bc0.roa
Signing time: Fri 30 Jun 2023 13:00:19 +0000
ROA not before: Fri 30 Jun 2023 13:00:19 +0000
ROA not after: Thu 28 Sep 2023 13:00:19 +0000
asID: 13911
IP address blocks: 216.234.160.0/20 maxlen: 20
216.194.64.0/20 maxlen: 20
216.234.184.0/21 maxlen: 21
198.161.206.0/24 maxlen: 24
66.51.96.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:64:38:ba:2a:0c:3b:a5:15:88:90:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Validity
Not Before: Jun 30 13:00:19 2023 GMT
Not After : Sep 28 13:00:19 2023 GMT
Subject: CN=7bd16f08-f12c-499f-b56d-8cd5c6b793d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:26:2f:74:c7:98:2f:4a:05:c2:f8:25:24:
4c:64:54:34:d5:26:5c:12:f5:ed:62:fd:75:f4:6f:
1f:dc:9f:31:0f:24:be:3e:a2:cd:cc:9f:95:ce:a1:
00:ca:e1:93:a3:37:cd:f0:5c:79:7c:0a:67:b0:09:
2f:50:53:a6:82:55:46:cf:53:6b:11:86:43:49:bd:
ba:13:90:c8:91:fc:24:cd:ea:e3:fc:11:2f:7d:86:
ae:10:90:e3:61:0c:6a:43:22:f7:b6:c9:13:77:a1:
86:cc:8d:12:d4:db:e9:1e:2e:60:b1:cf:c1:1c:1f:
37:9f:96:b6:b0:83:fa:e5:c9:cf:51:e0:7d:1c:40:
46:05:8e:7d:da:06:f0:18:ad:4a:e4:ed:2b:e9:d7:
f8:82:18:3c:e4:9f:9e:8e:37:12:5a:c8:18:7e:f8:
8f:63:1c:52:79:5c:e6:e1:cf:3a:62:15:fe:28:6a:
98:42:12:3b:e6:a4:54:69:00:8f:62:01:69:27:95:
05:76:51:19:b5:8b:15:62:3c:9f:bd:f1:7a:fd:a8:
b4:e9:40:bb:f3:f9:b2:c1:34:06:53:cd:b6:51:0a:
cc:9e:7e:49:cc:de:57:06:b6:db:29:2d:6b:5d:fa:
f3:24:df:f1:67:01:3c:a1:08:1f:6d:ec:b7:f5:9b:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:E1:57:10:49:A7:08:69:13:D0:13:76:9C:BF:50:71:17:1A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/9b80118a-ecc0-359b-8114-4673973c4bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl
X509v3 Authority Key Identifier:
keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.96.0/20
198.161.206.0/24
216.194.64.0/20
216.234.160.0/20
216.234.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:31:26:71:c7:29:0a:3c:28:df:bc:e3:80:27:79:a5:df:17:
ea:f9:30:53:64:12:f7:96:01:78:b0:17:80:6d:4f:f3:45:b0:
3d:a2:df:d6:c3:c3:23:7a:6f:7f:58:4f:93:28:3e:30:80:7e:
cb:f0:fa:a8:28:9d:82:3e:b6:53:ef:33:32:55:e9:17:18:fa:
b8:e0:2a:42:a3:b8:5f:31:7a:2c:79:9f:f5:b9:08:22:50:ce:
15:90:06:7d:c9:95:9c:6f:08:5a:b1:c3:01:83:16:a9:58:02:
ec:74:76:6e:e7:86:31:08:a9:b3:69:14:71:ed:f3:d4:9c:0e:
25:86:49:00:ce:e4:82:d0:35:d9:58:8d:62:8f:32:25:69:82:
6a:ad:f0:43:2f:6b:ba:3a:a4:83:f6:c5:df:cf:06:da:0a:18:
64:37:c4:9d:e0:ed:c4:55:6c:e3:29:8b:41:cc:02:f0:9d:36:
f8:49:a1:1b:cc:0e:e2:9f:93:2b:64:a9:f9:04:d9:44:a8:d6:
5a:69:ce:e1:a8:39:3f:68:1e:db:97:1b:8d:72:d6:5f:9e:4e:
d1:0b:89:77:71:7f:ff:2e:1f:03:e1:2c:f6:45:26:1b:bc:14:
38:20:cd:70:33:01:6c:30:08:57:7a:0f:56:bb:75:e6:ae:a0:
a6:c6:58:b5
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEJkOLoqDDulFYiQCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY5YWMxNDMtM2YyNi00YjliLTg5OTctM2QzZmJkMzEw
ZjhmMB4XDTIzMDYzMDEzMDAxOVoXDTIzMDkyODEzMDAxOVowLzEtMCsGA1UEAxMk
N2JkMTZmMDgtZjEyYy00OTlmLWI1NmQtOGNkNWM2Yjc5M2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP0mL3THmC9KBcL4JSRMZFQ01SZcEvXtYv11
9G8f3J8xDyS+PqLNzJ+VzqEAyuGTozfN8Fx5fApnsAkvUFOmglVGz1NrEYZDSb26
E5DIkfwkzerj/BEvfYauEJDjYQxqQyL3tskTd6GGzI0S1NvpHi5gsc/BHB83n5a2
sIP65cnPUeB9HEBGBY592gbwGK1K5O0r6df4ghg85J+ejjcSWsgYfviPYxxSeVzm
4c86YhX+KGqYQhI75qRUaQCPYgFpJ5UFdlEZtYsVYjyfvfF6/ai06UC78/mywTQG
U822UQrMnn5JzN5XBrbbKS1rXfrzJN/xZwE8oQgfbey39Zuw1QIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFIZm4VcQSacIaRPQE3acv1BxFxpnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZjlh
YzE0My0zZjI2LTRiOWItODk5Ny0zZDNmYmQzMTBmOGYvOWI4MDExOGEtZWNjMC0z
NTliLTgxMTQtNDY3Mzk3M2M0YmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWY5YWMxNDMtM2YyNi00YjliLTg5
OTctM2QzZmJkMzEwZjhmL2VmOWFjMTQzLTNmMjYtNGI5Yi04OTk3LTNkM2ZiZDMx
MGY4Zi5jcmwwHwYDVR0jBBgwFoAUCWpnLttgeYiqMKhOrI64oj1ZGJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lZjlhYzE0My0zZjI2LTRiOWItODk5Ny0zZDNm
YmQzMTBmOGYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEQjNgAwQA
xqHOAwQE2MJAAwQE2OqgAwQD2Oq4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJExJnHHKQo8KN+844AneaXf
F+r5MFNkEveWAXiwF4BtT/NFsD2i39bDwyN6b39YT5MoPjCAfsvw+qgonYI+tlPv
MzJV6RcY+rjgKkKjuF8xeix5n/W5CCJQzhWQBn3JlZxvCFqxwwGDFqlYAux0dm7n
hjEIqbNpFHHt89ScDiWGSQDO5ILQNdlYjWKPMiVpgmqt8EMva7o6pIP2xd/PBtoK
GGQ3xJ3g7cRVbOMpi0HMAvCdNvhJoRvMDuKfkytkqfkE2USo1lppzuGoOT9oHtuX
G41y1l+eTtELiXdxf/8uHwPhLPZFJhu8FDggzXAzAWwwCFd6D1a7deauoKbGWLU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org