Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3a7d1cb3-acd4-3b33-bf91-e06be77d74b0.roa
File: 3a7d1cb3-acd4-3b33-bf91-e06be77d74b0.roa (raw, json)
Hash identifier: 7Zg3LxwRH6NLoHNQ+/2N0aHbTEPzND2nhGaTdd3/0cM=
Subject key identifier: 96:9B:70:00:37:44:A7:8E:AC:2A:5F:E2:7D:5D:B5:F7:58:3B:4E:36
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DF5B039E99D70DDEC8F5E2240
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3a7d1cb3-acd4-3b33-bf91-e06be77d74b0.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Sat 20 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f5:b0:39:e9:9d:70:dd:ec:8f:5e:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : May 20 04:00:00 2023 GMT
Subject: CN=ee3241a4-023a-43a8-aaab-528146de60fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:68:33:3d:42:b5:ea:83:2c:2e:bc:eb:f4:
e1:be:60:69:2b:35:6a:65:1c:e5:70:be:e1:d1:a3:
64:98:81:44:b7:40:2a:da:29:10:fe:ca:09:43:7e:
5d:cb:87:90:3c:38:32:e6:3a:5e:d9:f2:18:62:6b:
d0:97:2d:8f:ff:be:8a:f1:ae:d2:0a:6a:89:b6:a8:
e5:10:0e:54:40:71:13:d5:87:ca:c9:00:06:64:b6:
a0:07:97:89:16:76:23:e7:0d:09:37:17:2a:79:7d:
1d:13:7a:38:d3:04:d9:67:06:43:11:be:5a:68:70:
62:0a:33:14:81:80:52:6f:02:35:81:3a:2c:e0:35:
dd:b2:aa:29:35:e8:d7:c4:d1:b7:00:d7:2f:56:04:
83:c7:46:dd:0a:ac:5c:7c:10:9b:a7:60:7c:2f:b3:
b2:fd:ce:9d:cb:b2:04:ac:46:48:e9:50:f2:4e:c3:
33:f4:e2:ab:de:e7:75:aa:6c:ac:95:c7:ea:f3:50:
34:96:f2:24:98:db:cf:2a:94:b0:ab:b4:a2:31:4d:
6a:82:ed:d4:f3:3a:4c:a0:b7:36:00:20:8c:22:24:
85:04:29:3f:72:6e:af:2f:13:11:8c:3c:81:7a:a4:
a5:ef:b0:8d:87:27:0b:9b:ad:7f:a6:55:b4:fb:b7:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:70:00:37:44:A7:8E:AC:2A:5F:E2:7D:5D:B5:F7:58:3B:4E:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3a7d1cb3-acd4-3b33-bf91-e06be77d74b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:50:5f:17:c9:74:26:bf:34:46:99:10:00:6f:4b:5f:cb:3a:
9f:2e:6e:d9:c1:4c:1c:d0:5f:73:51:a6:e9:12:11:12:e6:97:
16:65:38:87:ff:13:c8:2b:96:92:bc:77:38:65:00:be:aa:ce:
be:97:e8:da:bf:a2:f1:81:67:11:40:92:cd:36:26:cc:52:12:
81:a4:45:e4:a3:67:6b:d9:35:40:40:63:e4:92:2d:57:22:fc:
61:03:b4:d4:9b:9f:fb:08:7e:1d:0c:ee:95:56:e4:54:63:c2:
5b:4c:05:44:8b:1a:73:0d:40:0c:04:0d:fa:97:14:da:33:4d:
9f:74:fb:4f:6c:07:0b:68:2b:d3:d5:80:c1:d2:ed:b9:7c:fc:
69:cf:27:69:55:05:8d:0d:b4:a4:59:f5:01:f3:01:6a:35:34:
42:89:a0:69:fd:2f:af:01:34:ef:01:75:07:01:c2:53:9c:88:
9c:31:84:90:db:52:8d:db:c7:8b:f9:c5:2b:61:87:af:67:3a:
a6:f5:96:fd:1a:5c:46:ac:d5:bb:8a:49:83:1f:2b:41:30:94:
42:1d:ad:20:16:e7:2a:db:e7:44:c7:d9:0e:df:93:92:ef:34:
ba:a6:e4:4d:07:cd:0f:56:cc:52:13:eb:5f:41:47:ce:9b:c8:
68:42:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org