Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/486a33fd-c746-3ee0-8fc6-e7daad09d1bf.roa
File: 486a33fd-c746-3ee0-8fc6-e7daad09d1bf.roa (raw, json)
Hash identifier: Lxa4+V+dFBn/nXHSDs9hTBvo1oxKYzB2qOogOgm2H48=
Subject key identifier: 2D:06:9D:8D:B4:06:F5:B9:F7:77:FE:48:0D:B4:8E:7F:77:F6:BF:D2
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CE10D471FC7EF8FE7D44ED100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/486a33fd-c746-3ee0-8fc6-e7daad09d1bf.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Fri 10 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:0d:47:1f:c7:ef:8f:e7:d4:4e:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Feb 10 05:00:00 2023 GMT
Subject: CN=d7174b91-a1dc-472c-b18b-2aca7a7cbbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:1f:6c:5c:53:a7:99:02:e5:98:5d:d8:67:
db:ff:eb:26:99:05:2e:2d:67:88:48:d0:b0:60:c8:
3b:3d:ea:90:66:2e:18:33:3d:b5:57:fb:84:c9:4a:
43:ba:04:37:4a:61:03:e0:a3:d7:41:c2:fa:ef:d7:
44:f3:d5:4c:2f:da:c1:54:fd:3b:1f:3c:14:56:52:
5d:fa:c4:a6:0e:68:62:d2:c0:c7:64:70:65:94:4a:
5a:7c:63:ec:5b:53:c6:8f:de:44:eb:11:af:96:c9:
08:ec:32:e8:28:ac:58:01:83:98:1c:14:e3:d0:53:
c3:09:24:51:14:e3:be:78:c9:21:27:df:db:a3:24:
98:8b:1f:72:48:27:2a:16:25:2b:b2:28:a2:86:aa:
d2:1c:69:d8:fc:42:99:f8:8c:1a:b4:a0:b9:cb:20:
3f:35:6f:6a:c8:ac:68:57:5b:aa:1f:8e:e7:2f:99:
3f:22:f8:ab:39:44:18:bd:1d:ee:2f:84:3f:f6:0e:
a1:00:56:eb:48:b6:b4:a9:63:b0:5a:7d:97:ab:bc:
d1:d5:1b:82:cf:ae:57:71:a9:f9:b3:17:b5:9a:9a:
77:97:8f:44:d6:76:c9:05:94:90:cd:c1:df:8f:ed:
67:1d:06:64:4d:4c:9f:cb:72:0e:2f:ef:e5:e6:3c:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:06:9D:8D:B4:06:F5:B9:F7:77:FE:48:0D:B4:8E:7F:77:F6:BF:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/486a33fd-c746-3ee0-8fc6-e7daad09d1bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:bb:78:94:3c:65:c3:ca:99:58:cb:5f:1d:c4:9b:e3:b3:19:
13:79:90:98:69:16:8e:b9:71:c8:18:ef:3d:6d:63:a2:11:7b:
15:24:3f:9a:59:46:14:5a:9d:de:5b:7d:49:aa:98:62:23:bc:
7d:25:3d:cc:48:9a:f3:96:da:5b:4b:82:a8:98:b7:08:c1:34:
fa:5a:62:41:cd:c2:ad:f3:3b:9a:51:32:3b:b6:09:ee:dc:ae:
59:d2:3b:5a:97:bc:bd:06:b6:57:38:fe:68:f1:dd:45:24:2a:
61:85:6f:01:a0:76:a7:6a:55:00:cd:c9:0e:60:47:01:1f:fa:
b0:b6:82:6c:54:47:ac:b2:ba:7f:72:4c:16:90:89:38:ff:24:
58:16:50:51:a4:18:e9:fb:af:8e:cd:67:e1:72:b5:fa:12:93:
5d:51:ea:2f:3c:72:a9:2c:51:7d:d8:c2:f0:e1:21:52:26:36:
dc:85:63:e5:31:86:af:51:23:fe:c9:7e:46:2a:11:20:e7:5b:
d1:c8:c1:2c:91:ce:8f:28:e4:ee:20:2d:80:7f:aa:1a:82:ca:
96:17:80:cf:76:f6:2b:25:97:26:dc:31:84:23:66:d1:6c:7d:
9e:16:49:b9:34:38:b0:bc:98:8a:58:8d:fd:e5:a6:92:8b:05:
a5:fc:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:49 2023 by rpki-client on console-fra.rpki-client.org