Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fedc6470-8c22-3444-b67d-514f69318f2c.roa
File: fedc6470-8c22-3444-b67d-514f69318f2c.roa (raw, json)
Hash identifier: KWFqFOMnTwAXS2FT8AtWf1ekjbPmu0+rwSf+7gk/05U=
Subject key identifier: D8:4D:59:4F:4D:96:57:CE:7E:3B:8E:E6:AF:DA:0E:A6:2F:00:F3:2D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D753AD2BD44B8ADB3D2A5E400
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fedc6470-8c22-3444-b67d-514f69318f2c.roa
Signing time: Mon 04 Apr 2022 04:00:00 +0000
ROA not before: Mon 04 Apr 2022 04:00:00 +0000
ROA not after: Tue 04 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:75:3a:d2:bd:44:b8:ad:b3:d2:a5:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 4 04:00:00 2022 GMT
Not After : Apr 4 04:00:00 2023 GMT
Subject: CN=09d83042-9f24-4008-a913-ed2520a35a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:3a:74:e1:26:07:5e:a8:03:06:8c:e8:e9:
77:3d:24:12:85:f7:c0:1e:aa:cf:a0:ae:75:cf:00:
46:50:67:0d:d3:6e:54:cc:47:ef:31:fe:97:6a:92:
b5:5b:10:43:b8:12:a3:b0:aa:e8:59:d7:97:4e:75:
2f:20:a0:1d:57:50:5e:48:a2:d1:10:30:d8:e9:df:
0d:ea:cd:d0:20:dd:6b:73:4b:31:f8:6b:c1:f2:b2:
22:c4:c8:88:90:53:f0:39:12:14:91:a6:59:80:d6:
39:79:47:2d:ac:10:b3:b7:8e:d3:2c:c3:8a:6a:a6:
52:33:46:69:8c:f1:a1:fd:5c:d4:0e:20:6f:e3:9a:
1f:53:26:11:5c:3d:4d:97:a9:78:a9:ba:2c:65:a2:
5b:e7:a7:b0:7e:a3:fd:ba:e9:34:eb:58:c9:6a:c8:
5a:e6:8d:28:20:28:85:f5:f5:1d:68:29:6a:4e:79:
1e:0c:7c:6c:68:fc:d8:04:fe:65:80:49:ff:e6:c0:
6a:ff:43:ee:05:86:94:1a:3d:8a:ef:79:d6:a5:e5:
c6:89:22:be:e3:a3:da:84:5d:dd:77:a0:5e:3a:86:
56:0b:e8:a2:e4:9b:40:e7:cd:72:1b:6b:eb:bb:c3:
94:eb:3e:0c:5f:33:8d:49:de:ff:c3:73:67:29:c8:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:59:4F:4D:96:57:CE:7E:3B:8E:E6:AF:DA:0E:A6:2F:00:F3:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fedc6470-8c22-3444-b67d-514f69318f2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f6:82:74:bb:1a:27:ca:d1:71:c3:ac:3c:97:d5:e7:09:41:
59:2b:22:8e:c4:8d:d1:2b:2f:e8:de:d8:cd:e9:20:64:fe:c5:
00:f2:61:9d:c9:6b:55:55:ff:4a:61:cd:d1:9b:75:41:0a:b0:
de:12:4a:18:f5:db:47:96:3c:b7:44:59:34:50:f8:17:06:9d:
90:0a:ed:e2:b5:0f:a5:58:33:af:43:08:57:7f:05:ee:fb:24:
d4:f7:c3:d6:a6:ca:c0:40:62:88:00:e9:78:d8:92:fd:74:d1:
70:d3:3e:2b:84:d7:3a:c6:ec:54:6c:0e:95:ed:e5:21:88:7b:
bc:82:4c:19:67:98:bd:03:f1:5e:91:51:ca:2c:24:1b:bb:0a:
a3:77:a5:ca:d5:bc:43:e1:b4:de:1d:c3:fd:5c:e2:30:e0:a1:
08:fb:5b:1f:94:50:46:4b:01:fe:fc:a3:20:4d:22:27:a9:ee:
b9:c8:e9:c0:0f:4e:42:14:29:75:c7:6c:71:b9:86:9f:f7:f7:
23:a4:7d:5f:d8:33:11:9c:45:ed:16:5b:00:a2:f8:0e:2b:25:
cb:7e:10:22:c7:db:4d:77:2e:d0:9e:a9:7e:e9:da:25:59:a2:
8d:bc:4f:5a:03:3d:3b:c9:7b:b5:59:85:8e:13:6a:8f:85:8c:
98:d8:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-ams.rpki-client.org