Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/12795df1-c841-3037-bca1-2b45e724bed1.roa
File: 12795df1-c841-3037-bca1-2b45e724bed1.roa (raw, json)
Hash identifier: 404xwiQdPnXz70oel7hk7jmz5H1LRl7VExkf5i3vA2Q=
Subject key identifier: E5:FA:D7:39:36:15:AC:21:23:EB:B9:83:58:E8:4A:92:5D:8A:DA:C4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DECF82E75EE8E5AD5EC445700
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/12795df1-c841-3037-bca1-2b45e724bed1.roa
Signing time: Mon 16 May 2022 12:00:00 +0000
ROA not before: Mon 16 May 2022 12:00:00 +0000
ROA not after: Wed 17 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ec:f8:2e:75:ee:8e:5a:d5:ec:44:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 16 12:00:00 2022 GMT
Not After : May 17 04:00:00 2023 GMT
Subject: CN=f23eeeda-162f-43ae-ae63-3c585b72b3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:45:63:f4:b3:69:bb:dc:a5:48:96:4c:69:
f4:34:5c:9a:1a:35:f5:2a:a1:3e:9d:a2:72:06:b3:
83:92:c4:43:94:8d:69:53:ff:bf:7f:6d:01:57:2a:
25:c4:93:b3:f2:8c:80:5d:0a:bb:c9:8a:ff:d0:98:
51:8a:1c:d2:31:43:3b:e6:a1:f1:5a:b4:0a:41:ce:
ca:ee:2e:40:a4:2d:7f:d4:b6:d5:47:b2:b8:f8:46:
ad:d4:8a:cd:e9:71:9d:f9:af:d1:08:d5:be:80:cc:
21:e9:de:d7:34:2a:4b:9d:c0:02:f2:c3:d9:44:35:
65:82:67:81:f0:7c:1e:8c:72:80:2e:fc:ca:63:cd:
51:cb:13:17:86:10:c3:39:66:a2:04:9e:da:43:55:
56:0f:99:f1:8b:44:68:92:b5:a6:79:ac:df:55:da:
01:21:46:5c:4e:55:46:19:a6:d4:c7:56:24:c0:90:
10:30:5a:02:66:be:e9:66:cc:ce:88:31:61:35:d0:
72:c2:5c:98:17:6b:19:19:6f:4d:28:63:1e:d3:cd:
66:3f:0d:27:83:fc:e5:63:92:e0:4f:75:dd:8f:ad:
94:4a:6c:c1:5c:7b:04:d9:78:39:d2:6f:6e:1e:2d:
0d:66:ce:2d:dd:6e:0b:13:14:60:23:f6:33:08:93:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:D7:39:36:15:AC:21:23:EB:B9:83:58:E8:4A:92:5D:8A:DA:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/12795df1-c841-3037-bca1-2b45e724bed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:53:32:4f:d5:c5:c2:60:0e:82:ec:5d:62:d2:a4:1f:9c:5f:
4a:d3:7a:11:26:44:b9:b8:2b:6f:c0:13:4a:79:1a:ec:7f:84:
31:9e:a3:88:a2:e9:64:13:f1:2c:6b:e1:8e:05:8c:89:8b:dc:
dc:4d:cd:b9:ae:bd:3c:7b:6a:d8:8e:fe:32:f6:3c:55:b2:e5:
42:a5:fa:ed:9b:a5:df:df:6c:ff:60:87:6a:b0:4c:c3:92:c3:
3f:bb:bc:3f:6c:1e:9e:40:19:cd:59:5f:51:45:f7:0e:cb:28:
80:f9:2c:3a:f9:e0:17:2b:69:9f:cb:09:9e:a9:2d:ba:d3:22:
53:af:63:91:4e:f7:56:1a:d2:90:cd:4b:6a:0d:ae:cb:00:20:
cf:6d:35:2d:08:f9:95:0a:78:1d:b3:67:b6:b6:1c:d1:8c:14:
2f:f1:4a:36:a0:b8:33:0a:7d:fd:9b:87:65:bd:f8:03:38:99:
76:19:6e:1c:a1:ff:91:9f:09:e2:59:3e:2d:f2:7a:df:ae:3d:
e5:ce:2c:de:10:91:d2:96:99:a6:5b:59:58:f1:05:12:54:22:
fd:0c:7c:34:43:61:a3:ce:9a:f6:86:25:00:2b:96:1a:6c:ad:
be:84:77:39:46:57:88:e0:4d:97:07:b1:06:02:2d:44:6f:55:
24:06:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org