Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2e075a8f-9cab-3676-9760-c2b10f5a97a8.roa
File: 2e075a8f-9cab-3676-9760-c2b10f5a97a8.roa (raw, json)
Hash identifier: kwuyjYzPQ1K7TDbA1RoJGD825DpKCaIl3Pi3fOuSRbQ=
Subject key identifier: A8:71:59:5D:96:A9:A1:8F:F7:4C:A0:02:F2:35:15:7F:67:DA:E3:19
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D80216C2D8661771CE9DB97C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2e075a8f-9cab-3676-9760-c2b10f5a97a8.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Sat 08 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:21:6c:2d:86:61:77:1c:e9:db:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : Apr 8 04:00:00 2023 GMT
Subject: CN=83e3b12c-4d98-4577-996f-c40dd2a2f755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:b0:1c:4c:ab:fb:1d:79:f8:95:07:45:59:
e3:62:59:84:20:77:2b:5a:ba:84:56:f2:47:a5:9b:
1f:bf:dc:94:de:04:3e:0b:ca:67:d2:f9:a3:49:f1:
d2:64:64:df:91:60:67:aa:1e:bc:1b:60:f2:72:47:
e9:19:4f:80:2a:33:5e:22:5e:a0:fc:14:2d:d9:96:
7f:3d:d6:07:cb:5f:44:27:45:8a:76:95:29:1a:8a:
ca:52:1c:6b:e9:ec:72:2b:ff:0d:98:68:ca:8b:43:
88:37:2b:be:9f:8a:d9:d3:5e:bb:c6:b4:e5:be:8e:
89:7d:a9:c7:c3:d0:0c:c2:f9:1f:9c:9c:5f:2f:2d:
8d:fd:5f:3b:5e:90:b6:48:dc:77:c4:8a:db:c4:09:
2b:74:46:39:26:8f:e2:33:01:9d:01:56:7f:d5:f5:
42:b6:63:5f:2d:c2:f3:0c:27:88:7d:df:07:1a:fb:
2c:ff:3e:5c:62:c9:59:b3:fa:16:3d:41:ba:57:5d:
b2:6c:c9:c0:e1:7b:3f:31:32:7f:8f:81:c4:27:99:
09:b9:73:df:04:ee:a6:06:d1:08:fc:d7:95:9c:e7:
64:ba:6f:c0:c0:95:2b:f3:35:13:5a:6d:af:98:d8:
aa:a2:9a:2c:b9:09:0a:36:27:30:d2:f3:86:b4:ff:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:59:5D:96:A9:A1:8F:F7:4C:A0:02:F2:35:15:7F:67:DA:E3:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2e075a8f-9cab-3676-9760-c2b10f5a97a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:54:0e:72:f4:4b:89:79:10:36:d6:29:54:7e:c1:4f:c8:52:
e7:8d:8a:ee:b4:5d:39:b0:4f:69:d4:68:0f:45:b9:aa:c1:f0:
53:db:93:7e:be:f9:bb:e0:a8:54:f9:25:47:29:a2:4d:dc:bc:
a0:32:96:b6:ec:2c:9f:ac:2e:08:64:cd:60:59:96:93:c6:c3:
eb:cb:d6:4c:52:f8:e9:50:13:fe:fb:37:62:f8:29:1b:2a:68:
88:ab:72:6b:9e:d0:23:71:c4:73:6e:32:26:53:1d:69:e3:a7:
33:1a:66:ca:13:00:cd:21:4b:95:f3:12:63:b8:db:80:99:41:
1c:c0:e0:de:5a:e1:5e:fc:f0:1e:41:e0:68:5e:ef:16:a8:87:
3b:9f:d1:a4:df:f2:30:e1:10:e6:b3:2b:d7:c7:13:cf:89:5c:
be:0b:13:84:41:77:63:cb:56:c6:73:26:4f:e0:d5:3c:c3:6e:
8a:ce:ba:6a:2e:af:8f:69:f4:f8:00:7b:f0:4e:eb:d7:e9:d7:
a5:a1:47:75:02:07:ba:8d:f2:7d:01:c9:6b:4e:b1:bc:9e:a2:
5d:a2:6f:2b:aa:de:9f:c1:ce:dd:57:c0:15:31:5e:a8:64:29:
6d:8c:2c:c2:f9:12:47:ff:d7:70:70:78:42:05:51:56:5b:ed:
e9:78:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:49 2023 by rpki-client on console-fra.rpki-client.org