Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9f6d0422-6ba6-3aa9-a23b-e12d986dc96e.roa
File: 9f6d0422-6ba6-3aa9-a23b-e12d986dc96e.roa (raw, json)
Hash identifier: T9R5Orlp6KFC6vLCQi7g8A2WDkgQ3ywTionQTriNd/8=
Subject key identifier: 58:51:28:A1:29:A9:C0:F2:2E:70:74:C1:22:F9:8C:5D:97:FA:51:5B
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D7D5717EDCDE0A04E47D8BE00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9f6d0422-6ba6-3aa9-a23b-e12d986dc96e.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Fri 07 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:57:17:ed:cd:e0:a0:4e:47:d8:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : Apr 7 04:00:00 2023 GMT
Subject: CN=cedcf8f9-5e6f-4072-b6ed-0272555bf04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:9d:c6:8d:55:fa:f5:20:36:32:db:99:0f:
41:51:a3:b6:12:74:28:26:9d:cc:2e:97:d6:df:d0:
ae:4b:67:b5:07:f5:0b:e4:8c:12:de:ab:77:8d:f8:
40:8a:b9:75:90:6d:2d:1b:53:55:d0:44:d3:52:4c:
30:57:bc:0b:1c:4a:a2:49:4d:17:35:c8:fe:84:9b:
0b:12:ba:36:85:b9:a4:45:fa:c9:e8:59:77:e9:e2:
10:1f:5b:ca:b5:80:14:96:e0:92:39:ae:4c:5e:14:
4b:f3:1d:75:d2:5b:18:4a:7f:38:ec:e2:80:47:78:
d9:cf:3e:72:96:01:09:58:b8:e3:ca:74:2e:8c:1a:
b3:b4:7a:65:48:df:a8:e6:cb:12:1c:12:bf:24:7f:
83:17:f4:7e:9c:67:a1:e4:8b:fe:18:be:60:17:ce:
58:dc:e1:97:de:b4:1e:79:21:55:83:b9:98:6f:cc:
a6:5e:9a:d0:40:9f:a8:ed:7c:34:37:0d:28:40:37:
34:50:5c:c1:07:92:d0:45:c9:80:ff:1c:0e:18:21:
a9:87:c1:75:9c:58:c6:11:15:fa:85:4f:85:41:cc:
c5:2e:e5:83:52:6d:d5:8c:9b:3e:50:a1:ee:0d:8c:
49:23:b9:46:15:11:59:95:83:10:80:fd:e2:f9:43:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:28:A1:29:A9:C0:F2:2E:70:74:C1:22:F9:8C:5D:97:FA:51:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9f6d0422-6ba6-3aa9-a23b-e12d986dc96e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:5c:06:03:7d:35:ec:e3:27:70:90:4f:32:b7:b5:da:67:38:
9e:db:89:62:03:42:2a:6e:a9:d4:7f:39:ee:d1:94:38:8a:6b:
04:73:cf:82:24:ab:6a:2d:00:94:b4:47:f7:c7:21:61:e0:ff:
a4:29:e0:6b:17:6a:4d:64:d1:5e:9a:b9:cc:b0:7c:d8:b9:11:
9a:9f:d8:68:4b:52:f8:56:54:10:ac:5e:e0:5c:6b:55:3c:fe:
27:00:2e:ad:40:40:de:45:c7:16:14:0f:6d:bc:f1:ec:ae:5f:
54:1c:63:85:29:56:17:3c:2c:48:6f:90:1b:33:70:90:53:2b:
b0:39:90:77:c6:64:cc:35:93:86:21:7a:b5:cd:c3:27:65:fe:
f9:b0:da:90:61:b9:a2:96:e3:0c:99:bf:c4:4d:e7:30:1c:14:
1c:6a:be:f6:aa:19:8f:cc:fa:54:98:d1:dc:32:11:94:ed:19:
df:ad:04:61:16:65:70:46:6b:cc:75:64:40:59:bb:9e:0c:7f:
79:1c:73:cb:86:79:ed:57:1d:1e:21:be:e2:b9:12:e7:af:92:
fb:2d:b2:60:92:7e:16:35:a0:6b:77:bf:ed:63:62:98:49:f6:
2d:a2:2c:1a:d1:a3:88:54:aa:bf:fb:bb:6f:25:d0:99:ca:b9:
51:c2:ed:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD19VxftzeCgTkfYvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDQwNzA0MDAwMFoXDTIzMDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
Y2VkY2Y4ZjktNWU2Zi00MDcyLWI2ZWQtMDI3MjU1NWJmMDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfydxo1V+vUgNjLbmQ9BUaO2EnQoJp3MLpfW
39CuS2e1B/UL5IwS3qt3jfhAirl1kG0tG1NV0ETTUkwwV7wLHEqiSU0XNcj+hJsL
Ero2hbmkRfrJ6Fl36eIQH1vKtYAUluCSOa5MXhRL8x110lsYSn847OKAR3jZzz5y
lgEJWLjjynQujBqztHplSN+o5ssSHBK/JH+DF/R+nGeh5Iv+GL5gF85Y3OGX3rQe
eSFVg7mYb8ymXprQQJ+o7Xw0Nw0oQDc0UFzBB5LQRcmA/xwOGCGph8F1nFjGERX6
hU+FQczFLuWDUm3VjJs+UKHuDYxJI7lGFRFZlYMQgP3i+UMwHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhRKKEpqcDyLnB0wSL5jF2X+lFbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvOWY2ZDA0MjItNmJhNi0z
YWE5LWEyM2ItZTEyZDk4NmRjOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1cBgN9NezjJ3CQTzK3tdpnOJ7biWIDQipuqdR/Oe7RlDiKawRzz4Ik
q2otAJS0R/fHIWHg/6Qp4GsXak1k0V6aucywfNi5EZqf2GhLUvhWVBCsXuBca1U8
/icALq1AQN5FxxYUD2288eyuX1QcY4UpVhc8LEhvkBszcJBTK7A5kHfGZMw1k4Yh
erXNwydl/vmw2pBhuaKW4wyZv8RN5zAcFBxqvvaqGY/M+lSY0dwyEZTtGd+tBGEW
ZXBGa8x1ZEBZu54Mf3kcc8uGee1XHR4hvuK5EuevkvstsmCSfhY1oGt3v+1jYphJ
9i2iLBrRo4hUqr/7u28l0JnKuVHC7bA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:51 2023 by rpki-client on console-fra.rpki-client.org