Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d26fab50-3137-3837-82e2-18476a83a65b.roa
File: d26fab50-3137-3837-82e2-18476a83a65b.roa (raw, json)
Hash identifier: eUOOQEyG/vxggUP45lW0PdH5MPwpE6j+17Pl2ctp/iI=
Subject key identifier: 26:C2:9B:1F:9F:3E:BC:A5:27:D8:20:A3:83:DB:7F:11:94:A1:9E:35
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CD905669B778C2FED351E3D80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d26fab50-3137-3837-82e2-18476a83a65b.roa
Signing time: Mon 07 Feb 2022 05:00:00 +0000
ROA not before: Mon 07 Feb 2022 05:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d9:05:66:9b:77:8c:2f:ed:35:1e:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 7 05:00:00 2022 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=3eb34af4-cab8-4d7e-9729-2fadc1f10b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:b0:b8:3a:cb:db:1f:e6:c7:25:ab:ce:1d:
75:f9:a5:17:38:a5:34:16:c8:72:ba:db:52:fb:b6:
c1:12:ff:f0:4c:92:26:f4:b0:18:26:7b:0f:c3:9e:
1f:e1:7a:2d:ae:bb:ab:43:6a:7a:12:9b:39:bd:63:
40:3b:5e:04:22:ec:eb:e7:1b:7b:06:fd:c5:cf:98:
6d:cb:f2:a4:d1:e9:e1:d3:21:81:80:68:ff:f2:1a:
88:79:a2:67:57:30:0d:e4:e7:57:36:5d:dd:9d:1a:
5d:0b:ee:9a:46:22:69:23:e6:ef:6c:52:d8:41:07:
49:d1:b6:30:73:80:3a:19:b3:67:98:ed:e8:99:64:
5f:04:40:1b:7c:3c:f9:af:1d:15:9a:fd:b2:05:24:
b9:99:54:e6:78:8c:90:12:1f:cc:42:a8:0e:c5:2b:
f3:49:8c:c4:ed:e4:ff:ba:0a:1e:e8:19:cf:fb:f8:
af:b0:3f:70:16:fd:61:df:b7:5e:74:2b:f6:be:4d:
0d:77:4a:eb:3b:14:ec:83:27:39:a9:f9:ea:80:53:
9d:33:e8:0a:0d:dc:fc:fb:da:9c:e9:c2:f5:b5:90:
13:6a:a3:1d:12:2e:39:dd:42:a7:f9:53:2e:ba:b3:
ef:ca:03:1d:06:05:b1:a5:68:f2:63:a9:8d:71:e3:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:9B:1F:9F:3E:BC:A5:27:D8:20:A3:83:DB:7F:11:94:A1:9E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d26fab50-3137-3837-82e2-18476a83a65b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:ec:5f:5e:0a:bd:7d:9f:cf:3b:79:76:d6:11:d8:31:0d:3d:
fa:c2:5a:86:16:8f:db:da:7f:e2:e1:a1:5d:92:0c:44:41:8d:
b2:a7:cf:1c:4f:22:ed:53:47:0e:75:02:55:1a:70:85:81:3c:
fb:18:44:3e:3b:a5:69:85:3a:8e:df:9e:d5:f3:41:81:b4:40:
c2:dd:f3:13:2c:6e:57:be:4b:6e:c6:bd:da:85:20:14:48:8d:
71:ad:3e:80:53:4f:ad:d2:43:1a:06:21:b0:2d:ff:24:3d:e7:
4c:56:3b:b9:3a:71:95:44:15:5d:6b:ca:6b:51:6e:4f:1c:e5:
99:5a:df:fd:a2:5e:72:a4:c0:1e:e9:d4:24:c5:9a:6d:9a:76:
d7:71:e7:80:2d:76:c3:ed:fa:6c:1f:18:5c:72:d0:32:d5:63:
12:e3:53:ad:74:bc:7c:37:1a:03:70:df:33:49:fc:60:b4:8b:
3e:5d:79:b3:b8:3f:04:09:1c:1b:e6:fe:af:93:98:22:d7:ca:
bb:cc:76:10:c7:da:5f:91:97:df:f1:b1:81:25:99:00:49:80:
42:79:60:fd:47:94:23:9e:74:9a:b5:ea:49:77:a2:01:73:80:
cc:fc:b5:11:e9:e7:15:25:a6:a9:43:91:73:d6:e7:b2:75:eb:
9d:e5:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:52 2023 by rpki-client on console-fra.rpki-client.org