Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/abf3916b-b7c5-30d0-bf7c-f1c5fb34db24.roa
File: abf3916b-b7c5-30d0-bf7c-f1c5fb34db24.roa (raw, json)
Hash identifier: 29hj3nqQZa0qjxFVUomB3JImnkYwir3cWs3UQvNu2ss=
Subject key identifier: 45:F3:27:19:E1:65:4B:5E:28:B2:58:CE:2B:58:05:1C:F6:6E:2F:47
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FD356E9C798E5A3FBEDF300A0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/abf3916b-b7c5-30d0-bf7c-f1c5fb34db24.roa
Signing time: Sun 06 Nov 2022 12:00:00 +0000
ROA not before: Sun 06 Nov 2022 12:00:00 +0000
ROA not after: Tue 07 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d3:56:e9:c7:98:e5:a3:fb:ed:f3:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 6 12:00:00 2022 GMT
Not After : Nov 7 05:00:00 2023 GMT
Subject: CN=d5f4482c-7791-4832-9be7-e10d99a2722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:e8:cc:13:b7:30:84:f6:35:b0:33:0c:aa:
75:b3:20:42:57:1a:66:ad:c1:91:6a:05:e0:a9:9e:
77:ea:e3:ed:c0:57:ed:47:3f:57:c7:69:4e:30:7b:
e0:9c:c3:48:69:d4:10:90:3e:dc:02:66:8a:22:f4:
2b:1d:65:45:4a:e2:c4:89:c5:5f:17:57:0b:e1:36:
c1:2c:13:3a:b0:bd:b7:35:e6:3b:0f:f4:63:3a:4c:
aa:06:d4:73:16:d1:d9:fe:1f:9d:47:2d:8d:f4:08:
e4:7e:9f:46:ce:ef:12:d2:31:e9:76:e5:c2:b4:5d:
cf:aa:29:ff:e1:61:01:ca:1d:a2:80:96:e2:26:c4:
b2:09:3a:f6:86:0c:2f:ae:88:73:7b:82:24:37:26:
bc:b8:3c:67:b6:f3:4b:b0:ce:42:62:fe:6c:8f:0c:
40:93:9b:1a:99:c1:65:2e:df:3b:9d:08:75:5e:7b:
ee:24:07:b3:26:f8:95:94:75:ae:32:3a:10:a2:c1:
f4:e8:61:36:6a:57:df:53:a6:ab:b3:ad:d2:fb:38:
4f:eb:a8:64:d1:44:3f:4f:3b:08:77:21:cc:83:c6:
32:30:d0:5f:57:b4:47:7b:a0:fc:c9:56:14:bd:c8:
9d:9d:e3:a5:00:97:16:46:28:7e:66:48:0a:4f:06:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:27:19:E1:65:4B:5E:28:B2:58:CE:2B:58:05:1C:F6:6E:2F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/abf3916b-b7c5-30d0-bf7c-f1c5fb34db24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:3f:d5:92:93:59:1e:20:4c:23:61:81:c0:0a:2f:2f:85:4b:
7e:1f:f8:fc:16:d1:f3:5b:6e:6e:ec:32:ea:39:14:cc:86:21:
7a:e3:5a:48:b3:63:87:f0:c1:ec:4b:68:20:9e:15:f2:dc:6a:
d8:b6:30:5a:8c:e1:81:77:0a:f8:c5:51:e2:d0:ed:25:47:52:
1a:47:89:5c:47:34:69:2f:6a:13:e2:ea:a3:ef:6a:6a:32:b7:
1d:1f:0c:89:8b:1c:83:c0:47:f0:54:7e:a8:6e:dd:4e:52:d4:
db:bd:8d:1a:b7:81:83:a9:d4:e0:ce:6e:58:c2:62:d6:05:9c:
eb:b5:2b:9f:a3:b9:be:20:4a:b8:1c:6f:f5:02:b4:54:ac:e6:
ef:0a:9b:d6:4a:b8:6d:e1:eb:8e:d4:db:bb:5f:98:16:0b:0a:
2c:cd:4d:e5:c1:96:65:20:f1:a9:7a:4c:86:15:ae:d7:75:ed:
e2:4a:23:22:36:ac:68:21:cd:c2:15:58:59:27:ff:ed:25:50:
10:b4:e1:1e:44:0b:d5:56:e1:68:b9:ca:e0:2b:58:b5:46:95:
9c:38:01:0f:68:63:3e:ef:2a:42:59:f2:60:04:22:50:6d:6f:
0f:1f:a2:97:f9:99:5b:bb:b8:ca:ff:a6:96:30:f1:17:07:bb:
99:46:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:51 2023 by rpki-client on console-fra.rpki-client.org