Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0ea22ce4-c07d-3f74-a2cc-b56ccab0774c.roa
File: 0ea22ce4-c07d-3f74-a2cc-b56ccab0774c.roa (raw, json)
Hash identifier: vPx8UlzI4WfWwGV1Kd5M44blOlGA+oU5XB2v/3B9ngE=
Subject key identifier: 16:09:D9:81:76:D2:18:28:72:4B:FC:C0:40:46:08:0C:EB:56:8C:D9
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E51BAF912164681F01B47AA00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0ea22ce4-c07d-3f74-a2cc-b56ccab0774c.roa
Signing time: Tue 21 Jun 2022 12:00:00 +0000
ROA not before: Tue 21 Jun 2022 12:00:00 +0000
ROA not after: Thu 22 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:ba:f9:12:16:46:81:f0:1b:47:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 21 12:00:00 2022 GMT
Not After : Jun 22 04:00:00 2023 GMT
Subject: CN=cdbb667d-8d61-4a71-bf03-503243294b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:0c:e7:2e:d5:67:9b:63:28:f2:d4:5f:d5:
6b:68:cf:45:7a:ad:38:96:57:3a:01:fa:34:bb:63:
79:9c:ab:7b:19:c7:f5:98:58:ab:32:59:2d:22:0e:
20:78:05:a4:e1:77:ad:ed:58:55:08:6f:68:5b:d4:
17:c5:69:2d:32:c4:b2:3b:74:a9:95:3d:88:cb:4e:
1c:14:ec:2b:cf:c2:7c:15:10:94:5a:d3:5f:9b:36:
c7:34:d3:41:3c:b9:a6:cf:09:a2:ef:4b:41:d8:d7:
31:2b:67:39:d1:63:f0:a5:26:83:ab:e4:90:2a:1d:
ff:d7:f2:6e:14:63:ce:0e:4b:d9:6f:e7:88:bc:4c:
00:44:cb:79:b0:fe:21:f1:0a:8e:e1:16:81:2b:b1:
69:8a:a8:81:2b:a3:b2:45:61:8b:08:84:08:ba:90:
64:d1:40:05:b3:8f:e0:c1:37:b1:68:19:37:fe:f7:
62:2b:9f:71:4b:8e:a9:d3:ef:30:a5:59:58:f3:6f:
68:e6:56:5d:31:dd:97:29:ce:90:6a:05:af:f8:5b:
11:99:8a:99:d3:c6:58:d1:b1:0d:22:0a:f5:4e:30:
5d:30:65:6d:6b:bc:2d:a7:22:91:73:17:50:28:bc:
c9:87:d3:39:3d:e7:de:be:1f:73:1f:a6:c8:0f:e8:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:D9:81:76:D2:18:28:72:4B:FC:C0:40:46:08:0C:EB:56:8C:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0ea22ce4-c07d-3f74-a2cc-b56ccab0774c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:47:0d:1c:0d:e4:a0:f2:d5:70:ba:0d:b8:30:d3:f5:0c:72:
d8:7f:02:ab:42:c9:c5:c5:97:50:ae:1f:7d:76:09:00:4c:18:
e9:b6:d7:4e:aa:11:aa:a2:5d:b7:9b:70:3c:1e:70:4c:30:b4:
86:f7:64:4b:ec:8b:71:59:4e:95:fe:fe:1e:19:91:ad:77:ad:
8b:f0:8f:eb:88:40:b8:de:6f:83:e3:3a:74:12:70:72:ea:c1:
bd:8b:fe:23:55:9a:bd:87:b4:7b:22:58:b4:74:fc:0a:40:f3:
39:dc:2f:ee:78:25:d1:52:45:31:9d:df:6e:78:bc:9e:81:95:
3e:63:8e:4c:a1:d8:45:9f:27:e4:91:10:f4:47:ac:8e:f1:49:
f1:eb:cb:2a:69:92:5e:dc:b9:28:97:a7:79:78:2b:82:b6:a8:
aa:e1:5b:82:3e:da:f8:b0:dd:8d:bf:bf:e8:27:82:0f:22:32:
4d:b4:c1:00:fa:08:0f:32:6b:93:26:42:c8:be:7d:e0:35:3f:
2a:5d:c1:35:b9:7a:b9:49:a6:0b:83:7f:6b:ff:f4:07:69:7f:
9b:87:b7:db:8a:8f:43:df:4c:10:48:70:e2:0c:53:95:53:8c:
e0:58:8c:fc:53:38:b2:bd:23:e7:d9:41:e4:d8:e3:60:f0:3f:
1f:78:85:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5RuvkSFkaB8BtHqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYyMTEyMDAwMFoXDTIzMDYyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2RiYjY2N2QtOGQ2MS00YTcxLWJmMDMtNTAzMjQzMjk0Yjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06wM5y7VZ5tjKPLUX9VraM9Feq04llc6Afo0
u2N5nKt7Gcf1mFirMlktIg4geAWk4Xet7VhVCG9oW9QXxWktMsSyO3SplT2Iy04c
FOwrz8J8FRCUWtNfmzbHNNNBPLmmzwmi70tB2NcxK2c50WPwpSaDq+SQKh3/1/Ju
FGPODkvZb+eIvEwARMt5sP4h8QqO4RaBK7FpiqiBK6OyRWGLCIQIupBk0UAFs4/g
wTexaBk3/vdiK59xS46p0+8wpVlY829o5lZdMd2XKc6QagWv+FsRmYqZ08ZY0bEN
Igr1TjBdMGVta7wtpyKRcxdQKLzJh9M5Pefevh9zH6bID+jVewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYJ2YF20hgockv8wEBGCAzrVozZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMGVhMjJjZTQtYzA3ZC0z
Zjc0LWEyY2MtYjU2Y2NhYjA3NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtHDRwN5KDy1XC6Dbgw0/UMcth/AqtCycXFl1CuH312CQBMGOm2106q
EaqiXbebcDwecEwwtIb3ZEvsi3FZTpX+/h4Zka13rYvwj+uIQLjeb4PjOnQScHLq
wb2L/iNVmr2HtHsiWLR0/ApA8zncL+54JdFSRTGd3254vJ6BlT5jjkyh2EWfJ+SR
EPRHrI7xSfHryyppkl7cuSiXp3l4K4K2qKrhW4I+2viw3Y2/v+gngg8iMk20wQD6
CA8ya5MmQsi+feA1PypdwTW5erlJpguDf2v/9Adpf5uHt9uKj0PfTBBIcOIMU5VT
jOBYjPxTOLK9I+fZQeTY42DwPx94hQo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:06 2024 by rpki-client on console-fra.rpki-client.org