Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/81f3e09d-dcdd-3075-b94e-ff888c04c9e4.roa
File: 81f3e09d-dcdd-3075-b94e-ff888c04c9e4.roa (raw, json)
Hash identifier: +18nX/DD8EgE1OiOSJBSfmmKkRdGaSOMWdP+s/FD+V8=
Subject key identifier: E7:0F:70:D7:DF:15:94:29:A2:7A:08:C6:27:80:34:38:3B:FD:85:8F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D1BC08A19CC603FF9D8FBE2C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/81f3e09d-dcdd-3075-b94e-ff888c04c9e4.roa
Signing time: Thu 03 Mar 2022 05:00:00 +0000
ROA not before: Thu 03 Mar 2022 05:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1b:c0:8a:19:cc:60:3f:f9:d8:fb:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 3 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=aabf1bdf-6635-4e68-af78-b8e0c8bb5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:c2:dc:b9:4d:4a:e9:76:fa:24:ab:cb:82:
ce:90:be:c4:3a:c6:ec:51:50:ab:77:52:87:14:ee:
c8:51:a6:c7:60:2d:f1:de:a5:3f:ac:eb:2e:50:b9:
7a:9b:c6:67:3d:45:ad:5b:ac:30:5e:8e:81:d2:e0:
db:c7:e3:62:a3:6e:10:37:04:47:e9:42:bf:c0:87:
19:0c:c8:a4:88:f6:a1:64:d0:fb:47:28:44:19:0f:
6a:cd:80:ed:7d:27:05:9c:eb:e5:8e:b4:0c:91:86:
9a:ec:70:77:ef:49:ac:db:4e:cc:26:27:70:e0:4c:
63:ca:a9:d7:3b:43:ed:b0:51:a1:67:64:90:0a:27:
c9:61:ce:18:77:c8:34:e7:17:b0:f0:95:76:7c:18:
fb:dd:1e:18:c3:2b:c8:0f:27:77:0b:db:27:cb:ba:
73:3f:b5:a9:13:75:08:60:a5:54:99:6e:08:47:14:
4a:cf:6b:a2:43:37:3c:8e:7a:9d:7f:5d:92:1c:2b:
6e:38:93:0e:75:bd:b8:ce:08:f8:73:f5:d0:1a:a1:
1f:24:42:4f:76:98:d7:6b:b2:f0:33:95:72:34:a5:
c3:74:cd:8d:cf:5d:82:2d:0f:8a:44:9b:94:1a:d3:
99:e2:7e:00:a1:6b:54:52:96:92:04:54:80:e5:b8:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:70:D7:DF:15:94:29:A2:7A:08:C6:27:80:34:38:3B:FD:85:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/81f3e09d-dcdd-3075-b94e-ff888c04c9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6a:59:09:58:9a:cc:52:fe:bf:b7:4a:e1:c4:f5:80:48:97:
7a:f1:3d:1e:d7:9a:9f:14:bf:6f:49:98:9e:31:37:a6:83:ec:
ca:83:b5:28:ec:a8:19:2d:73:21:3b:cc:ee:77:4d:4f:61:77:
fb:4c:f1:43:45:9c:07:5a:0b:ec:ce:ab:99:e4:65:c5:3b:85:
3c:31:95:95:af:59:0a:75:c5:2d:0b:c4:dc:a9:52:24:71:89:
1a:6c:da:ba:f2:79:f3:db:f4:4e:0a:e4:1e:81:8f:3b:a1:c1:
ce:45:24:11:ff:ea:62:f6:ee:57:86:2c:1a:8b:aa:dc:33:e7:
14:4b:a1:fe:01:ce:be:67:c6:66:a9:76:9a:de:09:c2:ad:31:
24:50:04:3e:d4:de:ec:99:96:46:f0:ff:94:e7:b3:bb:59:d3:
2c:bc:7f:f2:29:be:28:63:76:15:70:80:47:e8:f4:44:2a:69:
1b:cc:fa:fe:01:0b:24:7b:b0:d4:18:c6:1c:84:48:49:81:c9:
83:9c:12:e6:d3:ef:d0:c6:d5:05:8c:fe:56:eb:17:ab:85:61:
00:b8:69:29:bd:94:b7:f1:04:fe:cb:9d:d4:44:7b:0a:e9:f8:
ae:c9:65:7d:7b:1d:c1:b1:24:7f:cd:53:49:a4:15:81:bb:b3:
e5:97:11:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0bwIoZzGA/+dj74sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDMwMzA1MDAwMFoXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
YWFiZjFiZGYtNjYzNS00ZTY4LWFmNzgtYjhlMGM4YmI1ZDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vDC3LlNSul2+iSry4LOkL7EOsbsUVCrd1KH
FO7IUabHYC3x3qU/rOsuULl6m8ZnPUWtW6wwXo6B0uDbx+Nio24QNwRH6UK/wIcZ
DMikiPahZND7RyhEGQ9qzYDtfScFnOvljrQMkYaa7HB370ms207MJidw4ExjyqnX
O0PtsFGhZ2SQCifJYc4Yd8g05xew8JV2fBj73R4YwyvIDyd3C9sny7pzP7WpE3UI
YKVUmW4IRxRKz2uiQzc8jnqdf12SHCtuOJMOdb24zgj4c/XQGqEfJEJPdpjXa7Lw
M5VyNKXDdM2Nz12CLQ+KRJuUGtOZ4n4AoWtUUpaSBFSA5bjQLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcPcNffFZQponoIxieANDg7/YWPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvODFmM2UwOWQtZGNkZC0z
MDc1LWI5NGUtZmY4ODhjMDRjOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdqWQlYmsxS/r+3SuHE9YBIl3rxPR7Xmp8Uv29JmJ4xN6aD7MqDtSjs
qBktcyE7zO53TU9hd/tM8UNFnAdaC+zOq5nkZcU7hTwxlZWvWQp1xS0LxNypUiRx
iRps2rryefPb9E4K5B6Bjzuhwc5FJBH/6mL27leGLBqLqtwz5xRLof4Bzr5nxmap
dpreCcKtMSRQBD7U3uyZlkbw/5Tns7tZ0yy8f/IpvihjdhVwgEfo9EQqaRvM+v4B
CyR7sNQYxhyESEmByYOcEubT79DG1QWM/lbrF6uFYQC4aSm9lLfxBP7LndREewrp
+K7JZX17HcGxJH/NU0mkFYG7s+WXERA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-ams.rpki-client.org