Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c3f9d00f-6fa0-3b7f-a951-7056021539fb.roa
File: c3f9d00f-6fa0-3b7f-a951-7056021539fb.roa (raw, json)
Hash identifier: ce6s4NWCDW5bkzrlFmmwg5CPhQOUGMny2FbnszSDBto=
Subject key identifier: 69:CB:17:E4:D8:E5:CC:8F:08:76:58:58:B7:2C:DA:8D:A6:03:DB:55
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E978F2316E3ECE62FC1A17740
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c3f9d00f-6fa0-3b7f-a951-7056021539fb.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Mon 17 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:8f:23:16:e3:ec:e6:2f:c1:a1:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Jul 17 04:00:00 2023 GMT
Subject: CN=338f553d-55e1-4cf8-a88f-fe9523c6ecb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:88:7d:8c:fe:34:23:cf:08:d5:24:46:f0:
ac:e1:86:02:27:44:b2:ef:b3:fc:ae:d0:8d:bb:35:
c2:a1:85:b1:ce:b3:7c:27:c1:d8:80:39:b4:50:24:
f6:b5:51:8d:79:60:fb:f7:0c:52:95:67:3a:34:61:
10:68:0d:75:59:e2:2b:0c:cf:a5:bd:6e:3c:e2:e5:
cd:37:b0:f8:48:86:86:63:22:34:43:81:82:b9:76:
33:b4:9e:f0:84:16:fd:51:b4:36:fd:62:46:8b:b1:
54:d6:51:b8:de:83:23:80:40:d0:6a:4f:5c:a7:14:
d3:2c:58:3e:da:97:b5:be:4d:d2:b4:da:6c:4e:29:
a2:86:5a:1a:52:ee:45:9f:5d:4f:14:53:14:36:c1:
bd:53:ac:28:53:fd:8c:b3:22:b2:96:71:2f:72:9e:
67:f0:0d:d6:a5:42:93:91:6e:a9:8b:12:9c:be:21:
4e:94:8b:fa:60:79:04:d8:03:b7:c7:2e:9f:14:17:
fd:22:cd:71:28:79:42:20:03:a0:42:a0:6b:70:8b:
90:13:20:62:99:4a:32:b5:97:5e:b9:bb:d9:81:58:
f3:b3:a5:04:49:58:ec:01:85:12:30:6c:80:8c:09:
48:cc:e8:85:fd:a7:b0:e1:50:9f:70:f8:0a:29:e9:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:17:E4:D8:E5:CC:8F:08:76:58:58:B7:2C:DA:8D:A6:03:DB:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c3f9d00f-6fa0-3b7f-a951-7056021539fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:45:09:19:f2:eb:12:46:33:a7:1c:d7:44:17:85:4d:06:9a:
98:aa:6d:bb:62:0f:8f:bd:ac:cc:4a:cb:cf:4d:4f:cd:c0:43:
f1:51:4b:88:b4:22:97:50:2e:23:7c:b6:95:cc:68:e9:f6:d4:
3b:ff:1a:14:bc:8e:ab:e0:07:1a:bf:ce:01:08:03:8c:de:4f:
86:0d:ef:d1:c9:29:44:92:c7:ed:fa:83:33:5b:b1:b4:eb:ed:
ce:5d:aa:d1:de:d0:95:fe:52:43:75:9b:31:40:67:a4:cd:89:
d9:19:a7:aa:09:8a:1f:cd:b4:96:f1:5b:de:2b:43:d8:b7:10:
a0:74:5c:b1:be:e3:34:c7:ec:bf:45:4a:77:53:e3:7e:78:7c:
0a:48:6d:ea:c9:c5:d8:10:12:66:7d:f9:89:7d:40:2b:fd:83:
f4:a0:38:bd:5c:27:75:e2:45:40:cd:82:47:5c:db:f0:6a:35:
5d:41:04:8f:9f:21:3c:7b:8c:05:0e:c7:fa:d4:f8:8f:7e:78:
67:dc:1d:0d:d7:6e:96:80:8d:81:c8:73:35:7c:8e:ab:da:a6:
04:96:6e:fc:9e:3a:37:00:48:f8:8b:a0:2d:e3:ea:88:62:2a:
00:81:11:9d:23:2c:37:c7:bb:de:58:cb:2f:d5:d9:a7:19:68:
6a:8c:d1:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6XjyMW4+zmL8Ghd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDcxNjEyMDAwMFoXDTIzMDcxNzA0MDAwMFowLzEtMCsGA1UEAxMk
MzM4ZjU1M2QtNTVlMS00Y2Y4LWE4OGYtZmU5NTIzYzZlY2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1KIfYz+NCPPCNUkRvCs4YYCJ0Sy77P8rtCN
uzXCoYWxzrN8J8HYgDm0UCT2tVGNeWD79wxSlWc6NGEQaA11WeIrDM+lvW484uXN
N7D4SIaGYyI0Q4GCuXYztJ7whBb9UbQ2/WJGi7FU1lG43oMjgEDQak9cpxTTLFg+
2pe1vk3StNpsTimihloaUu5Fn11PFFMUNsG9U6woU/2MsyKylnEvcp5n8A3WpUKT
kW6pixKcviFOlIv6YHkE2AO3xy6fFBf9Is1xKHlCIAOgQqBrcIuQEyBimUoytZde
ubvZgVjzs6UESVjsAYUSMGyAjAlIzOiF/aew4VCfcPgKKel2EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnLF+TY5cyPCHZYWLcs2o2mA9tVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYzNmOWQwMGYtNmZhMC0z
YjdmLWE5NTEtNzA1NjAyMTUzOWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJFCRny6xJGM6cc10QXhU0GmpiqbbtiD4+9rMxKy89NT83AQ/FRS4i0
IpdQLiN8tpXMaOn21Dv/GhS8jqvgBxq/zgEIA4zeT4YN79HJKUSSx+36gzNbsbTr
7c5dqtHe0JX+UkN1mzFAZ6TNidkZp6oJih/NtJbxW94rQ9i3EKB0XLG+4zTH7L9F
SndT4354fApIberJxdgQEmZ9+Yl9QCv9g/SgOL1cJ3XiRUDNgkdc2/BqNV1BBI+f
ITx7jAUOx/rU+I9+eGfcHQ3XbpaAjYHIczV8jqvapgSWbvyeOjcASPiLoC3j6ohi
KgCBEZ0jLDfHu95Yyy/V2acZaGqM0eo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:45 2023 by rpki-client on console-ams.rpki-client.org