Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/885995b2-dc4b-3d84-b5f5-b4d42a3d7e45.roa
File: 885995b2-dc4b-3d84-b5f5-b4d42a3d7e45.roa (raw, json)
Hash identifier: tzeb1hq+UjzDi/MmNk0QaxzDZl6E16PRnzgB6wIi5O0=
Subject key identifier: E5:01:51:5F:F3:83:21:83:5F:91:34:64:AD:C0:77:0A:E5:45:61:51
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328584023C50F8643331675C633AD00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/885995b2-dc4b-3d84-b5f5-b4d42a3d7e45.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Wed 06 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:23:c5:0f:86:43:33:16:75:c6:33:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2023 GMT
Subject: CN=0ca476bb-ef64-46a2-95a3-c1549b110def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:07:7d:02:8a:3f:fa:eb:21:75:ca:0b:d4:
46:1f:69:8c:53:e6:81:b2:95:83:e0:a3:2b:cd:dd:
1b:79:ac:dd:22:14:6b:56:51:f0:3f:c9:a5:5f:21:
85:81:3c:77:4c:f3:2f:b8:9a:ae:f8:54:95:5e:77:
15:f0:ad:c7:5e:40:ac:e3:01:f1:1b:15:79:21:93:
f0:ee:cd:91:91:89:af:f8:bd:cf:79:f8:ee:07:29:
98:39:ba:78:f3:7c:1e:78:92:6a:d4:58:fa:17:79:
a3:55:f8:6d:17:f3:74:75:05:1a:7e:6f:16:b7:e7:
e7:2f:30:95:fb:df:2e:d8:0b:8a:a4:9d:59:d6:60:
87:ae:27:59:b0:41:67:23:39:61:01:f0:29:f2:6d:
b0:ee:19:bb:9d:68:bf:3d:c2:0e:57:b8:96:3a:5e:
80:7e:c5:03:1d:3e:9a:83:78:07:a5:38:4e:c7:d1:
da:26:ef:7c:ac:cb:cf:76:25:b9:16:06:c6:36:6a:
55:25:ed:09:e2:88:1c:83:0e:4a:e1:0a:b6:1b:ed:
ef:47:58:83:70:be:0f:77:82:f5:5c:d9:a5:41:fa:
ea:82:07:34:ed:2d:9e:2e:55:01:b2:96:5a:10:78:
36:4a:3f:8f:96:23:17:1c:15:a5:3f:f4:89:82:35:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:51:5F:F3:83:21:83:5F:91:34:64:AD:C0:77:0A:E5:45:61:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/885995b2-dc4b-3d84-b5f5-b4d42a3d7e45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f2:65:37:bf:ed:17:02:21:d3:4a:0b:dd:32:ce:d5:0d:20:
d9:2c:ba:f6:20:d2:e0:25:4f:fc:cd:3c:0c:9f:cd:e8:4b:55:
47:5b:ff:88:0c:bb:d3:25:8e:5b:ef:37:fb:56:25:ca:69:91:
c9:b1:0c:e7:66:b1:2d:88:62:ac:d7:b4:61:5d:b1:6c:aa:6e:
e1:5e:21:3c:e9:20:84:a3:43:c3:c3:8d:99:24:92:3c:8c:ef:
9e:04:08:ea:ec:37:06:54:cd:50:15:bb:f2:79:14:47:0c:d1:
7f:bb:a7:ed:3e:02:22:75:41:82:e7:a4:c0:31:70:24:66:25:
57:1f:b8:1e:d5:8c:e4:c6:47:33:ab:db:36:b4:20:79:08:6f:
56:ba:a7:f2:41:c0:84:62:21:2e:15:6f:1a:f7:e4:84:50:8a:
de:d4:a6:b3:40:c4:9b:92:be:61:57:40:7e:31:a6:fa:b7:02:
dc:ce:11:a9:5c:19:48:f6:66:87:cc:d2:20:67:b4:ce:2f:93:
d3:45:3a:19:e3:c6:e1:96:20:73:2f:69:4a:f0:d6:5d:6f:95:
51:5d:f0:92:a8:bd:79:00:fd:d7:7b:3b:24:9a:41:98:6e:41:
80:72:ce:cf:60:d0:8e:77:66:cf:c0:97:55:b2:6f:c2:de:93:
a0:bc:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-ams.rpki-client.org