Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/98e839e2-f9d3-32e7-9958-a4c3478c259d.roa
File: 98e839e2-f9d3-32e7-9958-a4c3478c259d.roa (raw, json)
Hash identifier: 3VzLlpGCSZLCyRksz+kcD19a6ir1v8WHQI56v/wfpck=
Subject key identifier: A3:F2:A6:BC:F4:88:F4:90:65:AB:D6:CD:73:80:7A:90:3E:B2:87:11
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FCD3EA5B386540FDBEC1CDDC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/98e839e2-f9d3-32e7-9958-a4c3478c259d.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sun 05 Nov 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:3e:a5:b3:86:54:0f:db:ec:1c:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Nov 5 04:00:00 2023 GMT
Subject: CN=f071396d-59c5-456f-b47e-4b1f33688e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:e9:5f:85:4b:b5:dd:16:f7:07:c9:aa:1e:
a4:02:ab:47:3b:15:0e:11:5a:ab:b1:c7:8c:65:99:
b3:c0:94:48:09:9f:ba:13:32:58:6e:2b:e3:29:ad:
97:bf:cd:af:99:97:26:d6:b2:01:7d:bf:15:42:65:
0f:d8:c3:a5:9a:3e:cc:22:83:34:6f:15:dc:c3:f5:
ed:1c:2e:c0:fd:ad:52:99:8b:fc:0d:06:f8:71:31:
cf:38:44:44:5b:99:c1:38:b0:40:12:cf:cb:f9:aa:
c7:05:ed:44:f2:83:34:98:33:d8:3a:36:6d:fd:66:
a4:d1:c2:79:fd:ee:73:54:a8:8e:20:1a:b5:79:4b:
d6:21:99:56:e4:01:ba:62:49:b8:4b:c3:c1:57:27:
cd:91:7c:36:ea:b0:b9:40:97:ad:6c:7e:2a:e8:4e:
75:79:69:39:75:0d:e6:a0:c5:e4:f9:5a:ad:1a:8a:
8a:da:6d:96:6d:bd:c9:05:2a:f7:d7:c9:16:88:de:
b8:54:a3:f6:83:cc:bb:b6:89:a1:6d:bf:50:80:a3:
8f:c8:79:3f:cb:6d:2f:1f:10:df:9b:a7:13:0f:ce:
c1:c4:26:a9:a9:6c:00:16:20:78:fa:01:b0:69:73:
dc:64:49:c6:19:36:8e:64:78:23:16:76:9e:97:b2:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:A6:BC:F4:88:F4:90:65:AB:D6:CD:73:80:7A:90:3E:B2:87:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/98e839e2-f9d3-32e7-9958-a4c3478c259d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:84:1f:ce:cd:be:11:b1:19:d2:af:ec:12:cf:17:c2:05:91:
1a:87:bd:5d:d4:19:ed:2e:05:a4:9b:99:df:46:40:fa:2d:cb:
19:2c:d0:08:7f:77:81:e4:8f:2b:a2:41:d1:e5:1f:10:86:0e:
97:51:72:b5:09:e3:3e:9b:da:a7:18:2f:ee:ba:be:55:f7:2e:
8d:3a:cc:2d:c5:e3:ae:39:d9:26:a6:bf:b3:6f:c5:d2:d4:82:
3e:4b:d9:4d:c7:5c:74:07:59:21:72:d0:0b:c9:1a:88:a5:80:
e7:de:a3:4d:37:b5:a2:e0:f8:39:c6:da:17:60:62:08:fb:eb:
c1:92:da:23:d0:3a:c8:a4:51:c1:8c:33:30:61:d6:dc:c1:6c:
2c:81:d8:ad:9d:1d:0d:74:f9:b5:4c:0f:bd:69:4c:65:b9:e9:
03:42:5b:c6:e4:99:21:e5:fa:18:b6:3d:1a:ca:30:34:02:73:
d1:29:15:69:be:1f:90:e8:fa:21:5f:4a:ee:19:5a:7c:ba:6f:
67:ce:65:ba:9a:3e:20:16:fe:a3:de:05:76:20:65:9d:d2:fa:
02:21:02:1d:19:f0:cd:59:85:d8:cb:cd:42:13:98:a1:c1:25:
3e:35:a1:2a:22:c0:69:60:ac:b9:ab:e3:c5:45:3f:17:61:ae:
14:aa:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:51 2023 by rpki-client on console-fra.rpki-client.org