Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bd8b1247-60c6-322f-99b1-7e8e2c68e231.roa
File: bd8b1247-60c6-322f-99b1-7e8e2c68e231.roa (raw, json)
Hash identifier: xAbEBgB5j9Dtb791ytu5OvWMySms6lDLtu8SWN7JZm4=
Subject key identifier: C7:D0:FB:6F:FC:72:84:96:B9:D2:77:7E:06:3A:96:20:FA:1E:45:79
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CCAB1F15FB2466F203D393900
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bd8b1247-60c6-322f-99b1-7e8e2c68e231.roa
Signing time: Wed 02 Feb 2022 05:00:00 +0000
ROA not before: Wed 02 Feb 2022 05:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ca:b1:f1:5f:b2:46:6f:20:3d:39:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 2 05:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=ae2b8fe1-3e71-4a04-8e0f-24630129be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:26:e2:3a:c6:69:53:d5:c3:e3:44:0a:f0:
c5:5b:af:5e:13:87:31:ef:a5:23:76:91:39:90:cb:
db:95:d7:69:47:3c:5e:da:79:c3:24:84:e3:45:e0:
40:d3:29:4c:78:9e:94:79:1d:60:0b:35:b9:8f:01:
17:43:72:02:6c:65:36:ef:29:48:34:8a:f4:02:b4:
42:36:93:9b:b9:2e:67:10:b2:90:26:6f:08:a8:a3:
c1:50:96:6f:20:66:d9:ec:01:9c:81:80:4e:ab:b4:
c7:8c:b1:8d:06:19:d8:85:ae:9e:fa:cd:f0:ce:38:
66:21:68:72:73:f0:47:49:ea:32:0b:69:e7:f4:7e:
80:a5:4a:ab:ff:e7:13:64:34:a0:4d:b4:77:68:8b:
40:de:6b:bc:98:1a:b2:64:18:a6:2e:a4:27:89:82:
44:fd:4d:ba:8f:da:6c:dd:a7:be:5a:98:52:42:11:
f1:d5:5d:f1:0c:cc:69:06:3f:e6:2d:18:ca:39:6f:
06:a5:ae:88:e0:a6:47:22:4d:4f:1c:d0:87:ad:2c:
2f:f7:2e:f3:cd:b5:51:66:ab:4a:c7:ae:6d:7c:a7:
0f:83:cd:2b:1a:11:2c:5a:89:a7:98:8c:a2:a5:2b:
f5:e2:60:b7:9d:25:3e:73:b0:47:7d:ae:75:e3:e7:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:FB:6F:FC:72:84:96:B9:D2:77:7E:06:3A:96:20:FA:1E:45:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bd8b1247-60c6-322f-99b1-7e8e2c68e231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a9:92:8d:8d:8b:f1:f9:2e:87:8f:4b:bc:b5:3c:28:4a:db:
e9:14:4b:37:fe:7b:52:3e:0c:5e:09:b9:f6:22:eb:61:cc:51:
9f:41:db:b9:22:93:2f:59:fd:79:ce:66:d2:29:09:e5:c4:b0:
6a:b3:de:e3:3d:60:87:21:07:2c:ef:27:6b:ce:98:a4:3d:42:
b9:55:75:d1:6b:96:be:e5:bb:27:f1:30:9e:40:d6:ca:e7:2f:
b6:b6:da:03:24:97:b4:aa:08:c4:4a:7d:df:3b:6e:a7:06:ef:
3b:8e:2c:ad:41:43:88:f8:c0:94:9e:fc:23:cc:3e:e4:04:ac:
69:7a:87:f4:95:20:27:ae:8e:79:d1:bb:05:29:ee:20:b2:07:
4e:66:e4:98:6e:2d:3b:97:50:62:e3:b8:eb:b0:2a:bc:7f:87:
84:67:d8:ac:b5:e0:08:e3:ee:cd:ec:51:f9:b6:ac:a6:fd:1f:
94:c0:a4:e8:53:d8:36:97:96:3e:f0:f3:2c:87:3e:21:5a:ba:
ed:c3:1b:ff:ad:ab:60:57:e9:ef:e7:36:9e:a8:fe:2d:93:6b:
e9:0a:8d:08:ef:cb:44:f0:90:bb:17:98:81:53:73:66:e9:be:
62:00:5b:b8:fc:17:e1:c5:88:b0:9a:09:20:15:0f:ae:c8:94:
27:a9:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:52 2023 by rpki-client on console-fra.rpki-client.org