Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/08a5b9b4-e766-308d-aa23-b3d1c1e3c884.roa
File: 08a5b9b4-e766-308d-aa23-b3d1c1e3c884.roa (raw, json)
Hash identifier: RDNvJtY+pofVT78CGpp09sWPHOHeJw1GiTnWd+qwDxw=
Subject key identifier: 55:15:54:BA:26:49:82:56:58:09:44:C8:2E:FD:10:9D:18:FC:01:4D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EB31B43B79EF8E5C76E52D680
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/08a5b9b4-e766-308d-aa23-b3d1c1e3c884.roa
Signing time: Tue 26 Jul 2022 12:00:00 +0000
ROA not before: Tue 26 Jul 2022 12:00:00 +0000
ROA not after: Thu 27 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b3:1b:43:b7:9e:f8:e5:c7:6e:52:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 26 12:00:00 2022 GMT
Not After : Jul 27 04:00:00 2023 GMT
Subject: CN=c0b1f0a5-6063-4606-8242-841227415dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:1f:1a:9a:8e:fe:65:2c:f3:36:a7:53:69:
9f:65:c2:0f:f4:36:25:4c:89:80:a6:cd:9d:a8:9a:
52:bf:4d:c5:14:52:4b:37:f0:64:a9:62:5b:91:95:
4e:16:42:9a:c3:08:f6:ae:ce:44:50:75:ec:16:cb:
8a:37:dd:43:61:34:09:14:e4:a0:7e:d1:e8:94:b4:
f8:d4:51:1b:e7:68:b1:75:bf:0c:50:bc:ed:8d:58:
7b:f7:3f:25:8d:8c:89:3f:99:5b:99:33:c4:82:b2:
24:bf:46:c0:36:b1:00:5b:06:56:34:be:03:52:7e:
23:e4:f5:c2:ea:62:1f:f5:e4:78:7a:be:a3:d2:da:
86:c8:69:7e:01:26:47:24:4f:1b:bf:ad:e0:1d:07:
3b:64:69:a0:a5:c0:b1:68:90:2a:ce:6f:c2:14:3b:
e8:45:3c:06:b3:c7:9c:36:95:9d:1b:74:88:84:1e:
37:2f:c1:10:b8:3b:60:d1:79:e5:b4:fd:34:be:10:
da:0c:e2:57:a5:be:c2:b3:ea:ab:0e:47:7f:ff:01:
5a:32:47:ca:a4:2d:ec:16:cf:73:2b:90:07:c7:54:
7d:02:cb:b8:dc:48:c7:14:0a:15:7a:65:5c:2a:76:
09:30:54:30:0d:3f:53:b4:70:10:22:f1:10:74:57:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:54:BA:26:49:82:56:58:09:44:C8:2E:FD:10:9D:18:FC:01:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/08a5b9b4-e766-308d-aa23-b3d1c1e3c884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e4:4c:73:2a:00:85:f6:3f:d9:03:e5:30:f3:94:84:8f:2f:
ad:ac:1b:a3:ec:2c:90:8d:0f:41:12:20:04:3f:17:4e:62:b2:
a7:81:91:75:a1:45:f9:da:7e:2d:e7:4a:15:9c:b6:07:60:34:
3f:ee:4f:87:2f:ca:72:af:5f:57:b4:08:0b:ba:53:43:9a:e9:
c9:9d:a4:81:d5:de:81:3f:53:6d:37:5c:83:39:bb:80:a5:90:
a1:b3:a6:ce:82:69:8c:02:ce:92:b3:bc:f6:9c:8a:2e:78:2b:
6b:4f:9c:87:57:52:32:9b:61:50:b7:ad:bb:a3:15:91:44:fa:
19:6b:8e:07:61:40:78:4b:fe:a9:68:35:e4:fb:99:f3:7b:f0:
23:77:c6:fc:85:4d:21:56:dd:f5:94:e5:17:96:15:ec:33:96:
02:d0:87:4c:1e:96:23:4c:c0:a6:f4:38:f2:88:ea:1f:e3:8a:
f8:c1:bf:ff:d9:06:38:49:f6:be:b4:0a:5d:a9:ac:a4:aa:d8:
27:22:f9:2b:af:16:3f:57:25:65:ae:56:8e:c1:97:42:54:7c:
52:14:e1:a3:df:50:7b:d4:ac:d9:e6:b5:c7:07:58:1e:fa:f9:
7f:b4:23:8d:1b:18:25:b9:5b:fb:e6:44:2d:a2:51:7b:7d:ea:
14:41:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org