Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa
File: 211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa (raw, json)
Hash identifier: evVqLfrrQDkrhcfvO+R4b95hGRVCFyBZBKI6mocLWNo=
Subject key identifier: E2:FF:E9:64:B3:F2:C3:BA:28:08:81:5A:1C:28:43:C9:79:35:28:0F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FEC7072253F93990782233940
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Thu 16 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:70:72:25:3f:93:99:07:82:23:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Nov 16 05:00:00 2023 GMT
Subject: CN=682fc463-ccfd-4173-9a28-d286e125737e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:78:6a:d5:19:0f:71:66:a3:1f:4a:1c:e7:
b9:9a:c5:f2:02:f7:ed:fa:10:a3:b1:34:13:79:95:
22:d7:c1:ba:bb:18:06:22:05:99:27:75:b4:0f:1c:
c9:31:a0:8f:85:bf:58:9a:a3:d7:d0:13:2c:2d:c8:
12:b7:b4:22:1f:e7:2f:23:78:cb:fa:51:87:13:83:
40:1c:c6:87:6d:9d:d0:06:0b:86:b9:19:b4:8f:c5:
8b:31:85:a8:83:2f:b6:b0:2f:4a:c2:de:03:a8:c6:
4f:a9:b7:3e:de:42:8f:cf:ed:99:bb:47:a0:75:8e:
b4:28:b5:48:8d:f7:87:6a:46:c9:d1:ef:c0:15:29:
f8:fb:32:15:5e:ac:21:7f:f0:02:f0:68:a4:73:df:
6d:b6:ed:2f:78:37:bf:36:b2:55:56:9e:bb:85:00:
d8:8e:c1:9c:2e:c5:0d:4c:1e:63:e7:b4:d5:94:e7:
0e:27:5e:c4:6c:43:4b:ed:8f:23:50:f2:e9:a1:76:
21:5a:85:60:6b:7e:98:08:4e:30:72:e7:3c:8f:25:
96:53:b5:07:fe:59:ac:d5:65:0e:d0:17:53:c0:db:
9d:72:37:fd:b6:ea:65:c0:a7:03:97:e8:52:fe:79:
82:84:65:ff:5d:cc:02:23:5a:41:fd:54:5f:1a:b6:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:E9:64:B3:F2:C3:BA:28:08:81:5A:1C:28:43:C9:79:35:28:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:3c:fa:22:ea:33:27:86:70:43:c6:a9:2f:12:2e:3a:e9:20:
ef:ca:68:c4:c7:a0:1a:06:e6:30:7c:1f:80:bd:43:95:79:31:
7d:83:6b:3d:ae:9c:2f:d7:ad:9d:cc:7c:9f:74:9e:08:07:9e:
f6:3e:a2:82:56:24:54:c6:2d:cb:d8:55:0a:6e:07:2f:68:4f:
3a:30:ab:ca:34:1e:a5:2c:23:6b:0c:22:90:96:87:48:91:45:
bc:70:f4:b2:0b:c0:da:65:0b:b1:ba:14:02:5e:99:06:a6:7c:
2d:ea:39:db:1d:78:31:13:6f:91:1c:d4:fe:e8:8e:8b:c3:9b:
fb:3a:be:aa:1c:6f:a9:dc:0d:08:56:ae:30:fe:eb:10:8a:8a:
90:9c:b7:05:e3:61:f7:05:a8:81:20:35:3b:a6:22:8c:60:e5:
5b:8a:b8:78:b2:df:fc:4c:be:be:e0:83:6c:8c:1b:f6:c2:64:
4c:bb:24:d4:7e:5c:ed:fc:6e:88:50:17:6f:14:e8:ee:b5:ce:
14:a1:bd:b3:88:90:bf:b5:d6:50:20:da:5f:b1:3b:fa:29:60:
9e:ba:ff:73:08:ba:32:53:35:71:f8:65:67:b0:36:75:f2:0a:
d7:11:27:99:e7:86:89:52:af:68:be:b3:a2:2e:dc:74:1b:00:
16:54:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org