Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28eb778a-c384-33bf-911b-e0d78cb6513a.roa
File: 28eb778a-c384-33bf-911b-e0d78cb6513a.roa (raw, json)
Hash identifier: VSKw1NdQ369LmbHUiW/q9twSVj4UArQeKN3O8Jj387M=
Subject key identifier: A4:10:E7:61:81:97:BA:4C:A4:79:E9:86:51:B0:69:E1:54:E2:20:56
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E653C552D71458107D49D4700
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28eb778a-c384-33bf-911b-e0d78cb6513a.roa
Signing time: Tue 28 Jun 2022 12:00:00 +0000
ROA not before: Tue 28 Jun 2022 12:00:00 +0000
ROA not after: Thu 29 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:65:3c:55:2d:71:45:81:07:d4:9d:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 28 12:00:00 2022 GMT
Not After : Jun 29 04:00:00 2023 GMT
Subject: CN=1f2effee-e3c1-4b49-90ce-bd015a1e1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:3d:4b:d0:9d:73:ae:01:5b:22:94:b0:57:
db:1c:b8:80:ef:fb:f1:ab:7a:af:65:7f:4c:69:2a:
5b:a9:03:d7:c0:df:59:fd:b4:92:16:97:a6:76:fb:
cd:19:f0:03:bd:2d:f9:97:e4:ea:35:e9:31:21:b3:
9d:e1:aa:ad:48:dc:2f:99:88:0d:78:db:b4:a6:2f:
f6:50:be:20:e9:cb:69:ef:f9:19:9c:9c:e7:f7:ba:
1a:46:77:40:1e:eb:5b:a6:38:ec:92:04:05:49:19:
30:2c:65:0d:9c:09:b4:fd:c6:c6:d8:59:70:c0:18:
7c:90:2f:3d:ee:7d:bd:ed:93:2e:0f:84:8f:4a:70:
2d:cc:10:08:20:7d:53:ed:d5:18:c0:c0:32:ff:78:
51:4c:33:e7:9c:b7:f4:07:4a:8a:61:13:7c:8d:72:
58:b2:d8:40:6e:27:67:d0:18:a4:3f:56:c7:48:c4:
d6:67:55:0b:73:df:e7:74:7d:9c:6a:6a:64:07:97:
bb:2e:e9:6f:af:69:e3:56:36:51:b7:41:5c:97:03:
09:b6:1b:0b:45:2e:c1:d8:87:ba:e8:d1:f0:90:e7:
b6:76:29:21:57:cd:23:ec:22:46:6f:ed:a9:03:e5:
d5:3f:59:91:a5:7a:af:76:d9:bc:45:30:f6:dc:7f:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:E7:61:81:97:BA:4C:A4:79:E9:86:51:B0:69:E1:54:E2:20:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28eb778a-c384-33bf-911b-e0d78cb6513a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:1a:3f:0a:c9:53:6b:41:e2:9b:32:48:ce:1b:c6:b3:d1:85:
ab:1b:4c:9d:7e:d4:9a:7d:45:7c:e2:55:08:fd:3a:f4:c0:77:
24:0a:14:4e:ac:cf:e5:84:34:3f:ee:77:6d:f1:17:84:83:cb:
c7:9d:94:35:62:06:ad:8b:f9:33:61:33:c3:2e:ad:0a:3c:e8:
35:9b:34:fe:b7:2e:6c:6d:57:50:00:66:0e:c8:6b:91:e9:a3:
91:ef:a0:35:c5:64:34:66:57:81:0d:21:53:54:37:62:22:5a:
a4:30:bf:47:52:b0:55:87:34:b9:d7:89:98:60:10:f7:77:fe:
83:ea:e9:11:a0:02:99:4b:68:d3:fa:b8:dd:05:01:6d:b2:22:
40:1f:51:35:9c:e0:f5:26:50:2a:8e:8b:62:cf:72:82:ed:2a:
08:2d:f1:67:f8:e8:4a:df:76:c5:06:f1:24:29:99:ad:5a:8e:
7d:b1:36:42:94:25:58:15:d7:85:32:f7:29:f1:06:31:84:6d:
12:ba:0b:27:99:73:96:ff:f1:8f:23:61:95:45:7e:e2:d4:ed:
a2:57:ac:dd:e2:ae:fa:b8:4b:bf:2c:58:a8:98:ea:19:ae:ca:
eb:b8:5e:8f:35:0d:ef:d5:5f:b0:cb:58:0c:a8:b0:80:b5:ff:
c4:2f:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org