Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e199fe3e-6c85-35b5-89ba-ea3345f2cfd1.roa
File: e199fe3e-6c85-35b5-89ba-ea3345f2cfd1.roa (raw, json)
Hash identifier: WTbOA1MzMtAbfKE/ObvBvlATwClw1HgC/yrQm2Eg8NE=
Subject key identifier: 8C:0D:81:84:F1:F8:4B:FD:FA:B3:6E:7B:4A:DF:ED:97:59:80:1E:50
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DD71E095F4879D2F2A7F87580
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e199fe3e-6c85-35b5-89ba-ea3345f2cfd1.roa
Signing time: Sun 08 May 2022 12:00:00 +0000
ROA not before: Sun 08 May 2022 12:00:00 +0000
ROA not after: Tue 09 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d7:1e:09:5f:48:79:d2:f2:a7:f8:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 8 12:00:00 2022 GMT
Not After : May 9 04:00:00 2023 GMT
Subject: CN=a23054fa-9552-4b9f-9c4a-35807ba6e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:23:d5:37:c2:05:c6:be:c9:10:9a:f3:e6:
0f:8c:4a:b6:44:f4:fc:af:87:ec:90:ce:1d:5d:ee:
28:a1:a2:b6:3a:39:ee:a8:e0:e6:b2:19:e1:b7:82:
44:5e:5b:b2:a3:83:91:bf:f9:56:b7:20:87:d8:c0:
cb:05:1a:07:9f:87:d2:37:2f:2b:57:32:86:7d:41:
f0:19:9f:ae:80:db:ea:1e:2e:42:c4:aa:de:d2:49:
69:b2:1e:cc:3e:e1:7f:b8:5e:13:32:13:3a:12:e9:
28:ce:d5:f0:65:07:8a:c4:93:40:37:98:5b:a5:76:
66:92:23:60:65:6a:6c:cc:ac:83:cf:c3:22:29:75:
a7:eb:6b:b6:ea:8b:7a:c0:d5:2f:8b:21:2f:3d:82:
26:1d:51:6b:37:d6:fa:a6:59:9a:f7:d2:17:72:a4:
2f:06:b9:0c:02:11:55:6a:c1:4f:d4:06:ed:24:b5:
5c:72:c1:76:4b:cd:8d:59:12:80:bf:40:0f:be:76:
e7:2c:57:f8:81:f9:75:70:22:28:e4:8f:e3:81:2b:
b9:b2:2a:05:bb:57:f8:f1:e0:cc:d7:88:8e:80:2b:
79:ff:53:d3:f4:80:4f:17:3d:8c:ad:57:ad:c4:35:
c3:82:23:b6:de:18:f0:c7:0e:6b:76:d4:84:72:35:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0D:81:84:F1:F8:4B:FD:FA:B3:6E:7B:4A:DF:ED:97:59:80:1E:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e199fe3e-6c85-35b5-89ba-ea3345f2cfd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:d4:f7:bf:85:19:a1:46:40:d2:cc:f2:72:53:46:35:b6:1d:
9c:16:cf:9a:3e:d6:4a:0b:3b:62:56:a0:89:57:41:d3:73:28:
0c:0a:59:1e:e2:80:dd:d0:f0:c1:6c:de:91:2c:a8:54:74:73:
86:a1:37:5c:c5:91:87:d5:6b:4c:06:a0:9a:43:42:c3:65:5e:
3c:e8:3b:b7:6f:74:a3:05:44:7a:32:39:0b:6c:46:83:d6:c9:
9f:c4:75:8b:a8:36:ba:e4:bb:b9:2a:d8:bd:8e:19:78:c2:cc:
b8:bb:66:95:a9:f1:4e:a9:05:1a:ae:7d:6b:ab:6e:de:ae:e4:
e7:63:51:d0:42:71:50:3f:f4:f1:67:98:1b:45:88:03:99:7d:
f4:75:a8:ab:e0:80:02:1e:d8:da:02:27:f1:bf:15:e6:bc:3a:
11:26:df:a2:01:54:fa:53:bb:7f:e6:06:37:06:98:ce:f2:99:
09:74:27:1d:e7:b1:46:a7:b2:55:be:27:b7:74:b0:28:9c:63:
cc:fa:3b:f9:0d:97:65:a5:5f:24:fe:4c:4d:42:bd:0b:da:57:
88:0a:39:d6:2b:73:4d:1a:76:29:70:dc:09:e8:4f:88:16:f0:
02:b5:ec:61:b8:c6:01:82:01:d9:ef:2b:36:bc:ba:eb:fa:82:
89:ee:57:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3XHglfSHnS8qf4dYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDUwODEyMDAwMFoXDTIzMDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YTIzMDU0ZmEtOTU1Mi00YjlmLTljNGEtMzU4MDdiYTZlOTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWoj1TfCBca+yRCa8+YPjEq2RPT8r4fskM4d
Xe4ooaK2OjnuqODmshnht4JEXluyo4ORv/lWtyCH2MDLBRoHn4fSNy8rVzKGfUHw
GZ+ugNvqHi5CxKre0klpsh7MPuF/uF4TMhM6EukoztXwZQeKxJNAN5hbpXZmkiNg
ZWpszKyDz8MiKXWn62u26ot6wNUviyEvPYImHVFrN9b6plma99IXcqQvBrkMAhFV
asFP1AbtJLVccsF2S82NWRKAv0APvnbnLFf4gfl1cCIo5I/jgSu5sioFu1f48eDM
14iOgCt5/1PT9IBPFz2MrVetxDXDgiO23hjwxw5rdtSEcjWvdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwNgYTx+Ev9+rNue0rf7ZdZgB5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZTE5OWZlM2UtNmM4NS0z
NWI1LTg5YmEtZWEzMzQ1ZjJjZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTU97+FGaFGQNLM8nJTRjW2HZwWz5o+1koLO2JWoIlXQdNzKAwKWR7i
gN3Q8MFs3pEsqFR0c4ahN1zFkYfVa0wGoJpDQsNlXjzoO7dvdKMFRHoyOQtsRoPW
yZ/EdYuoNrrku7kq2L2OGXjCzLi7ZpWp8U6pBRqufWurbt6u5OdjUdBCcVA/9PFn
mBtFiAOZffR1qKvggAIe2NoCJ/G/Fea8OhEm36IBVPpTu3/mBjcGmM7ymQl0Jx3n
sUanslW+J7d0sCicY8z6O/kNl2WlXyT+TE1CvQvaV4gKOdYrc00adilw3AnoT4gW
8AK17GG4xgGCAdnvKza8uuv6gonuVx4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:52 2023 by rpki-client on console-fra.rpki-client.org