Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9a041c50-5207-38da-a9fb-9f629d13b109.roa
File: 9a041c50-5207-38da-a9fb-9f629d13b109.roa (raw, json)
Hash identifier: 4+0x8Ra49NkkGNyDk6DFGRik5Z2wI9DlZrzQ1+s4cEE=
Subject key identifier: 46:FA:06:F5:A2:36:09:91:BC:76:93:03:5F:3A:48:A4:6C:09:4F:51
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FBFBEC6AF6A3915F743639B88
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9a041c50-5207-38da-a9fb-9f629d13b109.roa
Signing time: Sun 30 Oct 2022 12:00:00 +0000
ROA not before: Sun 30 Oct 2022 12:00:00 +0000
ROA not after: Tue 31 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:bf:be:c6:af:6a:39:15:f7:43:63:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 30 12:00:00 2022 GMT
Not After : Oct 31 04:00:00 2023 GMT
Subject: CN=55686e43-f534-44e7-8e57-e0391557db7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:24:d8:2a:18:86:40:6c:e8:f1:11:25:cb:
ee:f7:bc:df:47:a9:a7:b6:ad:9e:ec:46:a1:dd:f7:
9a:4f:1e:e0:62:51:6b:73:7d:b1:fd:7a:f6:b6:ba:
db:dc:fb:63:34:6a:58:e3:11:02:1e:1d:fa:1b:cc:
25:5c:ac:3e:75:ec:e3:06:6b:08:06:87:99:18:21:
f6:ff:76:fa:b2:74:9a:05:06:2f:50:0e:85:28:82:
d6:c3:27:eb:5e:8e:d1:79:03:9b:b2:86:98:0b:13:
23:1c:e9:da:25:55:17:3c:d9:db:71:e6:fd:8d:f7:
d5:11:06:e2:7b:96:1b:0f:11:55:b6:9f:b9:41:63:
eb:4b:13:e9:65:98:31:60:60:c6:99:39:86:7e:22:
09:5c:71:ae:75:f1:e4:4f:d3:62:59:fe:92:10:8c:
83:71:77:34:28:04:2c:3e:10:5b:cd:00:f9:55:1e:
67:df:dc:85:f4:83:5b:81:1f:8b:e7:92:03:8f:d9:
6f:6d:cf:32:e0:00:25:78:b8:aa:1f:03:a2:06:2d:
12:36:cb:6b:56:51:5b:d6:68:db:99:36:f2:bf:3e:
d1:20:b2:b3:fa:71:83:ce:47:86:3b:81:28:ef:e9:
00:02:3e:51:39:37:86:76:8a:d2:1f:a7:7c:b3:d2:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:06:F5:A2:36:09:91:BC:76:93:03:5F:3A:48:A4:6C:09:4F:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9a041c50-5207-38da-a9fb-9f629d13b109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c3:57:1b:f6:b6:fa:8d:00:9a:8f:51:52:9b:18:11:5d:a9:
01:fd:25:93:eb:f6:e6:cb:e7:17:ff:03:59:e8:e3:de:6b:0c:
7c:d8:60:6d:62:6c:43:22:00:d8:95:46:9f:9f:88:90:98:9e:
a7:82:8a:6b:3e:b3:87:87:4e:36:11:5b:90:31:57:b7:72:f0:
17:b4:5d:fe:70:d6:c1:9c:8f:6d:44:5f:1f:12:65:d5:20:6b:
77:5f:53:0d:e2:84:e2:74:31:b1:a8:7d:39:bf:60:da:9c:b7:
59:ef:ef:8b:a9:e2:3e:fe:fd:c7:92:9b:1e:5c:98:51:b5:1b:
53:0e:75:18:59:34:bd:0c:63:70:89:42:51:b2:4c:57:cc:7c:
a0:aa:79:f9:41:a8:84:cc:95:5d:c4:ae:d3:22:b6:78:55:57:
fe:de:24:1e:ba:bc:f1:ef:43:d0:50:06:21:ae:2d:f0:a4:1a:
e8:5f:ee:e1:e7:e6:83:b5:1b:55:ea:63:44:48:87:f8:b0:b3:
d7:53:b4:7a:c9:57:6b:31:2e:9a:d3:06:06:b2:f4:26:bc:4f:
cf:bb:61:f2:f3:5e:4d:df:17:eb:c8:9b:5c:ec:ab:69:4d:49:
8a:4c:46:cb:29:1c:88:f9:01:ca:b2:5b:a8:94:ed:59:05:07:
24:33:d5:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+/vsavajkV90Njm4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTAzMDEyMDAwMFoXDTIzMTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTU2ODZlNDMtZjUzNC00NGU3LThlNTctZTAzOTE1NTdkYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u8k2CoYhkBs6PERJcvu97zfR6mntq2e7Eah
3feaTx7gYlFrc32x/Xr2trrb3PtjNGpY4xECHh36G8wlXKw+dezjBmsIBoeZGCH2
/3b6snSaBQYvUA6FKILWwyfrXo7ReQObsoaYCxMjHOnaJVUXPNnbceb9jffVEQbi
e5YbDxFVtp+5QWPrSxPpZZgxYGDGmTmGfiIJXHGudfHkT9NiWf6SEIyDcXc0KAQs
PhBbzQD5VR5n39yF9INbgR+L55IDj9lvbc8y4AAleLiqHwOiBi0SNstrVlFb1mjb
mTbyvz7RILKz+nGDzkeGO4Eo7+kAAj5ROTeGdorSH6d8s9KXrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEb6BvWiNgmRvHaTA186SKRsCU9RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvOWEwNDFjNTAtNTIwNy0z
OGRhLWE5ZmItOWY2MjlkMTNiMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXDVxv2tvqNAJqPUVKbGBFdqQH9JZPr9ubL5xf/A1no495rDHzYYG1i
bEMiANiVRp+fiJCYnqeCims+s4eHTjYRW5AxV7dy8Be0Xf5w1sGcj21EXx8SZdUg
a3dfUw3ihOJ0MbGofTm/YNqct1nv74up4j7+/ceSmx5cmFG1G1MOdRhZNL0MY3CJ
QlGyTFfMfKCqeflBqITMlV3ErtMitnhVV/7eJB66vPHvQ9BQBiGuLfCkGuhf7uHn
5oO1G1XqY0RIh/iws9dTtHrJV2sxLprTBgay9Ca8T8+7YfLzXk3fF+vIm1zsq2lN
SYpMRsspHIj5AcqyW6iU7VkFByQz1bY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-ams.rpki-client.org