Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/32cf799c-582f-353f-8b42-6c43fb32e655.roa
File: 32cf799c-582f-353f-8b42-6c43fb32e655.roa (raw, json)
Hash identifier: NI6QplUARkfYwUIcPouyB0Wvl4dJm1icAk8VfEdYyGQ=
Subject key identifier: EC:FC:00:3E:3E:BC:EB:AF:65:D9:4D:95:F0:E7:AB:FA:9B:DB:E3:DA
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D432C22D9EEFB710B081894A0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/32cf799c-582f-353f-8b42-6c43fb32e655.roa
Signing time: Thu 17 Mar 2022 04:00:00 +0000
ROA not before: Thu 17 Mar 2022 04:00:00 +0000
ROA not after: Fri 17 Mar 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:43:2c:22:d9:ee:fb:71:0b:08:18:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 17 04:00:00 2022 GMT
Not After : Mar 17 04:00:00 2023 GMT
Subject: CN=c925c1d4-0fb3-421d-8f02-07a05cbf2219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:c5:89:ba:4a:41:d0:a3:57:82:0e:d7:f1:
9a:53:a7:97:c9:94:d7:ea:c0:95:f1:64:cb:48:49:
84:9a:77:da:16:ef:be:31:5d:e4:cc:e0:16:42:3d:
13:05:cb:b2:cc:89:0a:f8:97:cf:f8:f4:92:4d:0a:
b4:22:78:16:7d:ab:42:a7:6e:8b:8c:eb:46:61:1a:
51:dc:c0:35:28:91:fe:f2:28:34:60:14:4c:5e:53:
2e:1d:e0:24:e2:5e:3c:e9:04:22:f1:5d:66:11:7b:
b6:09:fe:70:59:be:fc:ee:c4:6c:df:65:f7:5b:e2:
d5:23:da:2d:39:70:7b:4b:de:cb:96:a9:4a:cd:72:
51:09:82:76:d6:31:87:97:43:e0:59:85:72:2e:a0:
a6:a3:de:67:5e:7e:c3:e8:19:ef:2c:40:18:13:53:
97:e7:cf:30:93:1b:34:f0:2f:9e:22:50:8c:58:5d:
58:d0:a7:4e:52:e4:e5:ff:6f:d5:46:0b:04:81:37:
28:58:46:d6:10:40:b1:31:99:d0:f0:de:d5:ff:90:
a2:07:b0:2d:b9:86:a6:4a:59:d0:ee:88:50:26:55:
aa:37:37:42:6e:cf:93:3f:15:d2:aa:75:98:63:4a:
32:f0:e8:8c:60:4d:9d:35:d8:4b:19:87:e2:2b:0c:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:00:3E:3E:BC:EB:AF:65:D9:4D:95:F0:E7:AB:FA:9B:DB:E3:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/32cf799c-582f-353f-8b42-6c43fb32e655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ca:a4:3c:26:9b:42:16:95:f5:63:d6:77:61:57:b0:52:9a:
7c:ae:12:36:9e:1a:2e:4e:e2:1d:3f:92:ca:c3:0c:ca:ce:5f:
36:8c:bc:03:9a:e6:a8:8a:81:68:14:b9:d4:a3:1a:47:8c:ab:
f2:a8:3d:bc:d4:8e:8e:44:7f:63:55:66:c9:8f:92:83:d5:40:
c6:5b:14:91:69:04:e3:a4:6e:66:68:60:3c:ed:9b:bd:aa:84:
68:06:26:7f:63:23:1d:f3:f5:79:4b:4b:fe:39:25:12:52:35:
89:60:e9:c9:2c:78:9b:e5:d6:fd:52:8c:15:6f:e9:af:d9:73:
51:a3:fe:65:b3:60:cd:d5:d8:3d:4e:af:9b:94:71:d4:3f:ae:
c2:27:c2:a1:d7:97:5d:51:fd:15:fb:3e:d5:ca:6c:9c:85:57:
95:44:ae:c4:ff:da:b0:21:bb:c3:3d:5b:31:8c:59:53:34:0b:
d0:ca:c6:e9:42:8d:6b:76:a1:ba:ad:67:e4:e3:ee:89:fe:87:
2b:f9:43:a8:a3:48:f7:3a:82:23:fa:d3:45:44:68:14:75:d2:
20:36:30:bd:b5:eb:9f:59:12:f7:f9:7e:d4:57:12:d4:4c:90:
10:54:cb:dc:16:33:bf:df:72:c2:a4:d3:a3:4d:e2:8b:c9:a0:
e1:f3:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org