Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3b454595-9e2f-3e56-9046-c3dd0b909cd4.roa
File: 3b454595-9e2f-3e56-9046-c3dd0b909cd4.roa (raw, json)
Hash identifier: fHoNclDb72SP8r7JUrSs3REHYoJkrmAHVEYhAaKK6rA=
Subject key identifier: DA:39:A7:EB:A5:DF:36:36:80:8C:FE:47:CC:22:8E:CA:EB:D8:C8:A5
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F43285840109A08314ED8BAEACC62C760
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3b454595-9e2f-3e56-9046-c3dd0b909cd4.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Wed 29 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:9a:08:31:4e:d8:ba:ea:cc:62:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2023 GMT
Subject: CN=bde0dfb9-cabc-4119-9a19-a53e234995f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:df:08:0b:e1:f5:a1:f4:64:72:12:b9:15:
f0:8a:71:d8:e0:55:9c:85:a7:0a:c7:87:c8:69:71:
4e:d9:2c:c7:5b:3f:a3:a1:46:f8:4f:8d:17:b8:b2:
fb:81:cf:9e:5c:b4:2c:9a:a3:87:33:8a:c2:01:ef:
ab:45:6e:bd:5d:5c:6b:f1:2a:26:d3:17:ae:c5:dd:
97:7e:90:71:fa:c8:2a:fe:9a:18:c9:46:06:33:71:
0e:88:eb:60:ee:82:d5:38:2a:05:3c:36:6f:d6:b8:
d1:ae:c4:e3:82:5c:c5:fb:52:3d:50:ec:4b:a4:21:
bc:7f:32:44:1a:ca:3e:bc:89:fd:b8:d6:e7:78:6e:
de:f0:b0:55:a7:12:ea:70:00:26:08:c7:5f:0a:90:
ca:6f:0a:ac:a8:70:ab:c6:e3:4a:ed:08:c8:76:e2:
27:15:5e:7f:ee:b0:61:9a:f4:a2:bf:48:05:5b:c9:
ad:53:df:c5:66:f9:09:50:e1:68:3f:c8:6d:8d:b8:
1f:16:f4:5b:91:f2:79:c1:36:9d:db:9b:92:8e:ea:
4c:85:84:b3:18:e9:e5:20:a9:8e:a8:08:02:88:33:
08:b9:78:6a:b2:96:47:a2:12:1f:c6:ab:91:af:68:
b8:4f:8c:c7:67:7f:5c:fb:96:79:a3:02:e0:c5:a8:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:A7:EB:A5:DF:36:36:80:8C:FE:47:CC:22:8E:CA:EB:D8:C8:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3b454595-9e2f-3e56-9046-c3dd0b909cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6e:d2:02:f1:5c:f4:c5:af:4c:63:df:7c:09:5f:14:f1:b6:
a3:23:43:7b:39:1a:77:e3:54:04:77:70:ff:8d:e5:fc:d4:8a:
6f:06:36:72:e9:3a:d3:a8:ba:00:06:3b:68:af:0b:d8:b9:bf:
3a:9b:75:45:da:31:ab:3c:64:5e:cb:2a:2f:cb:47:2c:7d:a7:
70:b5:66:4c:64:14:08:88:28:ae:2a:fd:a7:48:51:b7:96:ef:
f1:28:c1:26:06:08:c1:2f:6a:0e:f7:b2:6c:f9:b2:cd:77:fe:
38:a9:48:c7:e0:54:36:79:c6:4b:72:70:f1:74:71:b7:9d:54:
40:3a:5a:ee:f3:0b:36:37:00:3e:65:25:7d:3a:2d:7d:d5:0d:
6b:27:fa:69:64:3d:f2:cc:d1:6c:a0:cf:a6:88:02:a7:66:64:
b0:94:9d:4f:33:cf:7c:5f:b6:8b:9e:06:d1:24:9b:be:99:e9:
d4:7b:75:dd:59:0a:04:41:50:06:da:62:44:44:c6:ef:0c:b2:
07:77:3f:34:86:25:af:69:e1:bd:9c:44:05:2e:63:2e:47:6f:
c5:1d:82:04:46:4b:f7:c9:af:93:1c:3a:e6:2b:15:20:9c:ec:
b3:75:9f:c9:bd:26:e4:06:50:3c:06:7d:a5:8e:c4:2d:3a:dc:
3f:8c:6b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org