Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/31948156-d8c3-3cbe-bed1-b2b01ea19a24.roa
File: 31948156-d8c3-3cbe-bed1-b2b01ea19a24.roa (raw, json)
Hash identifier: +1dpxaO7+x/sR7TgI5S/uuVwc7n4XiRB+yrF6EXynDE=
Subject key identifier: EC:EE:EC:C4:B2:97:CF:F2:53:AE:E6:F9:50:54:90:F8:59:1B:FE:1E
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E791CFD0C7F8624EC4F148F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/31948156-d8c3-3cbe-bed1-b2b01ea19a24.roa
Signing time: Tue 05 Jul 2022 12:00:00 +0000
ROA not before: Tue 05 Jul 2022 12:00:00 +0000
ROA not after: Thu 06 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:79:1c:fd:0c:7f:86:24:ec:4f:14:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 5 12:00:00 2022 GMT
Not After : Jul 6 04:00:00 2023 GMT
Subject: CN=1d39c38f-b681-4e50-8f37-aeb4f72739a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:f0:95:e6:37:61:c9:08:90:3b:41:11:1d:
ba:c1:c9:2f:dc:80:72:ae:1f:2b:4c:f1:3d:63:86:
85:51:81:4a:ba:91:36:69:09:7c:6b:a2:f1:76:e5:
c8:19:be:bc:bd:be:72:3b:92:61:21:67:9d:92:0e:
24:14:60:d4:24:fc:b1:de:0a:e6:9e:14:f6:ef:e3:
4d:c8:d2:97:30:7f:20:c0:b7:73:20:b7:dd:f7:ff:
dd:99:63:57:9e:2f:15:c5:55:a6:4e:bb:55:62:dd:
6d:54:42:47:3b:fe:8b:6b:3c:dc:a3:f2:ab:ff:69:
c7:65:48:bd:26:7b:a2:35:81:85:ce:58:a1:24:46:
c1:41:80:6c:81:86:f6:dc:3a:b2:63:1e:5f:77:15:
ff:cb:f9:8f:ed:e1:36:92:1c:47:a6:db:b4:37:cd:
2f:30:1c:64:8d:19:ce:25:db:0b:41:51:27:d4:33:
5b:ac:03:41:a0:ed:ca:9e:f8:1e:61:81:40:bf:e8:
03:f6:af:06:a7:7a:d2:f4:4f:a2:a6:a4:a7:3c:77:
58:54:70:f2:fe:e1:e4:9e:dc:51:bc:4d:15:78:78:
b8:57:6c:23:27:a2:90:f4:3f:c2:a3:c1:11:87:00:
c6:9f:36:bc:24:72:fd:af:f9:84:40:5c:7a:7d:71:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:EC:C4:B2:97:CF:F2:53:AE:E6:F9:50:54:90:F8:59:1B:FE:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/31948156-d8c3-3cbe-bed1-b2b01ea19a24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:37:0c:8f:56:78:47:ea:d8:1e:0a:a0:c1:2b:dc:44:f8:e9:
4b:51:80:b0:40:ab:9a:c2:9e:0d:a5:2a:54:5c:7c:c4:8a:79:
dd:0a:5b:b9:c3:7e:34:ac:a6:b9:b7:8f:a2:69:19:c1:2e:aa:
aa:da:7d:49:19:69:90:6b:92:80:c4:12:b3:87:98:fb:eb:a3:
b5:17:50:eb:57:1d:1a:b7:42:da:b6:e5:61:44:76:07:92:ce:
b6:52:7b:7d:a9:af:a7:63:83:bd:dc:79:c9:79:e6:0c:be:50:
47:14:d1:7a:c0:2e:4c:d4:4f:49:d6:4c:9d:86:c6:95:24:7d:
13:6c:3a:0c:22:bd:54:50:68:0c:5e:eb:6d:4a:ee:a9:f5:91:
5f:22:2d:dd:36:0f:f3:bb:ca:f9:50:db:ee:80:62:ca:ef:61:
d9:01:8b:bd:12:58:db:d1:9b:02:db:2f:8c:b9:a7:d0:65:48:
8b:03:f5:0b:02:29:bf:0a:87:dc:96:f5:87:dd:44:29:3e:0e:
9d:7c:85:cc:70:e4:5b:d6:77:e6:c6:36:20:bc:c6:c4:28:b8:
89:b6:94:f8:c2:98:ec:08:03:b4:5f:48:3c:1c:35:89:55:f4:
5a:01:38:44:29:68:41:0d:9e:50:73:71:0b:58:94:e9:48:fe:
12:4e:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:49 2023 by rpki-client on console-fra.rpki-client.org