Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2312b035-2f11-390a-9e93-c0fc9ef4131e.roa
File: 2312b035-2f11-390a-9e93-c0fc9ef4131e.roa (raw, json)
Hash identifier: pEhte7b0v3u0Wgq4BdQxVaXQnXqMT64YaxbxoJZiYzA=
Subject key identifier: BC:C2:0E:45:4E:C4:90:42:82:88:55:98:99:BE:DD:6B:36:A0:4C:D2
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DC8DBFD8F878D893C0BD47100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2312b035-2f11-390a-9e93-c0fc9ef4131e.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Thu 04 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:db:fd:8f:87:8d:89:3c:0b:d4:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : May 4 04:00:00 2023 GMT
Subject: CN=4b62c408-8182-4739-b648-30dbb1ae107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:30:25:4c:66:c5:2b:ec:4e:18:97:a0:94:
df:5e:aa:f4:f2:38:45:44:e9:b0:b3:39:36:df:f2:
95:67:58:b1:57:6f:49:f2:b9:ef:0f:ff:41:62:26:
b0:01:9c:1f:77:5d:35:51:65:af:5d:1e:e7:6f:be:
27:6c:a3:f6:e9:26:28:7f:93:e1:21:f0:43:6e:cc:
1c:53:8b:f1:0e:cc:21:25:9c:4b:68:0f:8b:ce:19:
c7:ac:90:8f:83:6f:80:97:4d:1b:aa:ad:fd:60:0f:
6d:8d:2e:62:05:2a:41:24:99:f0:39:3a:61:ba:9d:
ee:97:ff:f9:93:77:ea:ac:3a:3a:b1:1b:ea:12:3f:
10:2b:71:dd:35:22:d1:d2:e5:ef:1d:3e:22:dd:cb:
a2:09:7e:56:62:c0:0f:b4:0d:75:9f:09:55:c2:2b:
c5:10:56:a2:22:e5:3d:70:59:37:a8:24:eb:ef:90:
58:d1:ed:d4:df:f1:9b:e4:43:eb:03:dc:7a:d6:13:
67:6e:d0:aa:f8:b4:3a:99:31:4e:73:2c:60:ed:be:
dc:ad:5a:67:fb:b8:53:85:f2:69:34:d0:38:fc:8e:
54:5a:69:fd:2d:45:b7:e7:6f:00:70:c2:c4:da:87:
5d:b7:11:eb:9b:be:dc:3b:4b:b1:fa:6d:0f:23:cd:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:0E:45:4E:C4:90:42:82:88:55:98:99:BE:DD:6B:36:A0:4C:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2312b035-2f11-390a-9e93-c0fc9ef4131e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:11:c1:4e:5e:e8:56:a4:b6:af:3c:a4:6c:8c:97:0c:e9:15:
a4:c0:d1:1e:f4:14:8a:03:da:6d:07:94:79:aa:fd:11:cd:9d:
69:e1:35:44:0a:10:f9:87:ef:19:fd:2c:a7:ea:b2:c0:4b:80:
73:8d:ea:18:2e:7c:43:7c:37:24:94:26:90:5e:e6:21:84:90:
7d:fc:35:8d:d2:a3:90:65:2d:1e:d3:d5:81:70:6b:ea:ce:90:
90:48:6f:ea:7a:05:75:3d:34:26:8a:7e:81:b1:16:32:b8:e3:
9f:04:bd:06:d2:8a:81:11:ca:a5:26:7c:14:a4:7d:91:dd:94:
a2:0c:94:a8:89:ef:a3:5e:47:4d:78:31:27:4f:37:f9:90:7b:
4d:d7:7b:2f:a5:78:e4:83:f7:63:88:51:9b:e1:d7:e8:ca:68:
13:dc:2a:16:c1:b0:2c:70:24:40:18:5c:be:3a:2a:5a:9b:19:
34:03:f2:32:c3:e5:3b:6a:6e:18:98:04:7d:4f:4e:39:db:ac:
b7:16:41:4c:88:07:f6:a6:c6:ed:1b:6b:bb:eb:8a:92:38:4d:
a9:e1:05:51:66:3c:19:c8:27:b9:59:95:61:e3:f0:72:a5:13:
3f:a5:07:78:1d:92:7d:7a:93:52:73:f7:16:9a:8a:cf:cd:65:
fa:67:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:49 2023 by rpki-client on console-fra.rpki-client.org