Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0fdb3b79-5163-3303-9656-f7cd8ba50298.roa
File: 0fdb3b79-5163-3303-9656-f7cd8ba50298.roa (raw, json)
Hash identifier: iLPhsmInTiNC7o+QGI+lE/GiWt8ALmu5JzOi5Y7SiCc=
Subject key identifier: 70:CA:2F:68:AA:5F:91:0E:EF:1D:10:7A:CA:50:81:61:9D:D0:73:3F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E46B86F9489EA345B7D795D80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0fdb3b79-5163-3303-9656-f7cd8ba50298.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sun 18 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:b8:6f:94:89:ea:34:5b:7d:79:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jun 18 04:00:00 2023 GMT
Subject: CN=63996b51-34b0-43a8-a5fd-bd1cc6bbe7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:7b:85:a6:0a:67:2c:bb:d4:fd:5a:3a:41:
c3:5d:a0:15:8d:3b:5e:bc:8b:f9:3b:24:59:59:9b:
d7:b4:69:ed:e3:a8:60:56:e6:4b:05:7d:bc:c9:86:
25:01:be:52:68:77:5e:63:fe:23:3b:eb:fb:7f:67:
fe:97:e5:d9:8d:93:c4:65:a2:b3:fa:21:b0:0c:63:
48:c5:69:c4:44:aa:97:30:80:a8:7c:f2:f0:61:0e:
65:a5:f5:3e:5b:f5:a5:5d:71:77:ac:73:be:d5:4b:
78:d3:79:a9:56:d9:7d:0a:04:a5:b1:a2:17:ff:5e:
44:46:46:a0:ef:a6:95:93:ff:af:a9:eb:64:b0:ed:
32:a1:4d:83:24:5e:90:d9:0a:f3:8c:b4:3e:ab:44:
66:b1:51:fe:b5:70:a1:a1:5e:bd:4a:24:a2:45:98:
91:72:05:d4:fc:4f:09:07:58:4e:09:99:18:9a:01:
24:5d:27:c7:1c:c7:dc:a1:3a:f3:3e:4a:a8:45:5b:
fa:76:66:72:a3:41:18:4e:5e:1f:12:31:b1:9f:83:
b1:3e:f0:c9:d3:a3:32:f9:d7:a6:93:87:41:28:ce:
b7:4b:e0:a9:ed:1d:68:38:c2:08:ff:aa:5c:e6:7d:
3b:8c:73:cf:6d:fb:31:6e:08:12:7b:71:27:91:24:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:2F:68:AA:5F:91:0E:EF:1D:10:7A:CA:50:81:61:9D:D0:73:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0fdb3b79-5163-3303-9656-f7cd8ba50298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3d:6b:18:4d:3e:6d:11:fd:71:54:51:dd:59:1d:ec:d8:f9:
8a:3a:d5:78:e9:78:58:34:33:8d:78:d5:54:dc:22:a0:37:f2:
2b:3a:17:03:a1:06:1d:9a:67:20:25:43:56:29:c4:9b:74:58:
d7:9a:b1:33:84:e4:99:56:8c:9a:54:c4:cf:cd:fd:3f:fa:fe:
f1:e8:29:0b:a3:b5:cb:4a:e1:5e:e5:21:a6:5b:aa:e2:df:fd:
5b:ed:12:bf:61:5c:8d:60:95:4d:3c:eb:4e:ea:be:f3:a6:cf:
36:c4:22:ce:b8:1d:f6:bf:a9:cc:10:c7:db:92:6e:a7:fd:43:
d4:90:0c:ef:36:f9:ae:c0:37:8c:ed:36:e4:4f:18:1b:fa:61:
30:95:10:df:e6:91:3f:98:67:84:c5:d4:48:89:a6:1c:69:9e:
8d:88:ad:29:19:a5:07:0c:ad:1d:12:23:92:ad:bb:15:02:73:
f9:83:f2:fe:d8:c6:c6:bb:ad:52:23:55:92:95:f8:66:59:34:
37:57:1f:59:16:45:e6:74:7b:5d:af:8e:65:30:11:02:9c:89:
59:35:51:7f:db:76:f8:95:f7:12:8f:b9:b9:e0:a3:94:3b:ce:
3b:55:85:de:ce:a2:2f:d4:a7:fb:e2:e9:b9:e9:18:28:b4:23:
ba:8b:79:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org