Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8a534484-27f8-3d10-bb15-2972bc5ec8ef.roa
File: 8a534484-27f8-3d10-bb15-2972bc5ec8ef.roa (raw, json)
Hash identifier: fo6Hmj0OYDRLKpWE4+mVOJZmtsqriK0ytCRdcUxsl+k=
Subject key identifier: 26:9A:C7:69:4B:21:7E:D9:23:7A:D9:65:CF:14:FE:BA:B8:79:06:54
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D2F6FD609D087CC5CF5767700
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8a534484-27f8-3d10-bb15-2972bc5ec8ef.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:6f:d6:09:d0:87:cc:5c:f5:76:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=38b45fce-0c45-44c9-9315-bb7ed6eeddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:f2:1f:c9:86:f7:c9:76:f3:63:e3:60:da:
51:8e:ab:44:8b:fc:a6:e0:55:0e:38:a8:7b:35:1c:
f2:ca:79:d2:9a:8d:ac:75:e4:82:af:39:50:a0:f0:
5a:16:60:67:7f:35:63:a7:0a:b5:8b:97:4d:9f:e2:
43:ff:b6:f1:d2:d4:9c:66:f5:bf:21:b2:3d:e8:38:
9e:30:dc:5b:02:63:1e:f2:e8:2a:ff:c4:0c:71:c0:
b0:c0:d0:e7:f0:09:b7:24:b4:37:25:6e:37:83:1a:
8c:97:e8:e7:0e:26:44:94:61:96:3a:5b:1d:f7:b3:
ef:b0:61:af:95:3a:02:e7:82:5c:85:57:5d:60:cb:
bd:b5:6b:b2:2c:84:0e:bf:98:95:ef:62:56:ae:6c:
0e:92:8f:6a:f9:65:94:01:06:48:05:f8:c3:84:66:
5f:1c:e7:6b:ae:1e:56:0b:55:0b:fc:0e:c6:98:dc:
48:b8:a0:4f:9d:f4:f7:ef:27:23:2e:af:b3:55:9a:
5f:a3:cd:72:e1:3a:29:78:22:e5:95:f7:00:03:99:
ed:58:d4:3e:52:60:39:59:b2:be:c5:22:94:61:36:
85:96:29:59:8c:45:08:69:24:c3:27:e6:9a:43:f7:
04:e1:10:87:f4:3b:47:18:be:b9:3f:87:0e:88:c7:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:C7:69:4B:21:7E:D9:23:7A:D9:65:CF:14:FE:BA:B8:79:06:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8a534484-27f8-3d10-bb15-2972bc5ec8ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:bb:e3:66:b7:6b:e3:d0:74:8a:74:d1:1e:19:47:c9:46:bb:
bc:1f:0e:e3:e2:3d:7f:00:04:86:5b:94:65:8d:f2:94:8e:c4:
b9:8b:af:f4:87:ed:b8:d4:9e:dd:e5:2e:71:d8:1d:80:39:3f:
a8:ee:9f:c4:76:ce:16:5a:0e:3d:65:1d:88:fc:9f:1c:af:b8:
15:c2:9a:3f:c7:0b:e5:8c:e8:31:b7:d0:d8:bc:4e:9a:0e:cb:
24:ca:58:c6:77:5b:b1:18:c1:de:d3:80:08:ab:a0:63:5b:1d:
ec:bf:0c:39:47:e2:44:3f:c2:f6:c6:54:be:23:e5:65:da:ff:
c5:6a:03:d8:f0:dc:98:88:45:20:1c:b4:88:fa:ec:81:d9:1a:
f1:16:49:8a:e9:ed:8e:62:a2:91:80:10:98:06:33:eb:5a:b0:
53:88:d5:1e:8d:89:d5:10:3d:f5:c8:02:18:56:89:1f:59:92:
62:54:19:d2:7b:aa:73:49:48:ec:e6:40:b8:42:b5:78:7a:57:
c2:10:9a:49:3f:c6:96:35:d0:0c:bd:c4:2a:5c:0a:2d:6e:22:
50:b2:1a:29:97:1b:3b:37:cb:2e:78:db:e2:23:91:0f:0f:11:
47:dc:40:b5:6e:fa:be:7e:1d:8e:29:d9:27:6f:89:39:78:d3:
a4:f0:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:51 2023 by rpki-client on console-fra.rpki-client.org