Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0bda2b7f-c5b5-31d3-9c52-99ef4181b285.roa
File: 0bda2b7f-c5b5-31d3-9c52-99ef4181b285.roa (raw, json)
Hash identifier: 9OWLd4qN9P6UUsEgeeniZltQPRrVGqaXtI8jR4lRKFU=
Subject key identifier: 17:20:29:B5:BA:4F:7B:5F:0D:61:6F:61:88:7C:A4:38:9D:C6:E1:24
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D810FDB458A41E9A61DD0A680
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0bda2b7f-c5b5-31d3-9c52-99ef4181b285.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Sat 08 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:0f:db:45:8a:41:e9:a6:1d:d0:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : Apr 8 04:00:00 2023 GMT
Subject: CN=a0149920-dac1-4c70-b7ed-e5b3cb0864ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:63:39:86:8c:ff:ad:78:11:fb:cf:79:60:
98:38:e2:d1:72:41:e1:54:70:2d:08:71:d8:3a:b9:
41:1f:74:0a:d2:75:9e:bd:12:31:63:57:83:22:cf:
00:98:e6:8f:c8:df:3d:dd:dc:ab:b4:13:d1:74:32:
9a:37:60:47:16:22:cd:55:90:d1:75:54:2b:5c:53:
af:9c:1e:20:58:b3:4b:68:4d:71:ce:d4:01:60:56:
bd:4f:3b:26:a8:59:f1:6b:ba:d4:9a:39:50:27:22:
3f:58:00:c7:26:98:d0:39:61:22:30:19:dd:0a:c3:
6d:91:64:23:54:65:5a:b1:f5:3f:08:b7:df:79:fc:
f2:d6:48:08:b9:4d:18:fe:38:44:08:cb:46:0e:7e:
86:83:35:3c:b1:39:23:25:33:0f:e7:44:68:c0:4c:
22:65:e8:55:95:e5:13:bc:1c:21:66:34:78:d0:e8:
d3:07:52:9c:57:dc:15:33:d6:58:b8:f7:43:ca:2a:
7d:45:7b:d3:f4:ff:5e:aa:f3:09:55:4d:1f:14:8d:
b4:27:3f:62:ae:31:f4:05:53:01:9a:07:8a:15:b4:
43:50:ed:4a:e8:74:b0:fe:e4:80:dd:87:d7:4c:ad:
a6:96:20:07:3c:c6:b4:80:1d:52:6f:27:32:dd:d6:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:29:B5:BA:4F:7B:5F:0D:61:6F:61:88:7C:A4:38:9D:C6:E1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0bda2b7f-c5b5-31d3-9c52-99ef4181b285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c4:fd:b8:5e:5a:92:cf:60:36:ee:a4:78:ab:24:de:d9:96:
92:5d:f2:5d:69:66:2c:be:5b:80:37:6d:e2:49:56:df:67:47:
a7:32:d6:03:aa:f4:86:58:22:16:37:5a:2a:15:b3:bd:80:8a:
95:24:e6:94:62:98:da:cc:f5:13:2e:ba:54:27:0e:1f:fd:b0:
b6:50:20:45:94:06:4f:65:15:b4:2e:37:b7:c6:2e:3e:dc:36:
fd:88:b2:03:9e:30:01:0f:ee:a2:20:bd:4d:e3:86:d8:3b:aa:
d8:76:b4:17:60:18:d1:01:22:8e:34:8d:c8:50:e8:f5:e2:60:
ce:0a:5f:b3:43:0e:b8:3c:0d:43:2a:1e:30:fd:fc:96:19:b7:
04:09:89:a6:23:21:58:3d:0b:19:06:46:3c:19:76:eb:1d:63:
e2:5c:06:2f:3a:56:5f:c2:4a:e6:53:d3:7b:14:ab:85:3c:c3:
77:f2:fa:a8:47:69:83:60:3a:b5:ed:c8:c1:30:78:f3:af:5e:
dd:25:4c:7d:07:00:1f:4b:af:4e:9f:49:0d:20:cc:b3:1a:40:
ac:ad:41:e3:50:49:c6:cf:64:e3:09:16:cd:6b:de:a4:8a:52:
8b:c8:b6:90:a2:2e:c2:7f:65:5a:0e:85:01:5b:44:4f:67:25:
8f:c1:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-ams.rpki-client.org