Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3c1a1a3d-971d-35e8-a10e-cf04d655d9f2.roa
File: 3c1a1a3d-971d-35e8-a10e-cf04d655d9f2.roa (raw, json)
Hash identifier: sy0D+ln4qE2vMYZJbZfTjrhDXl5N92k0gd75+ofnk/k=
Subject key identifier: 43:5E:99:36:86:C0:AA:91:E9:56:71:F4:F3:2D:75:4A:F0:FF:61:01
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EC45B6EB705274E80BF02EA80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3c1a1a3d-971d-35e8-a10e-cf04d655d9f2.roa
Signing time: Mon 01 Aug 2022 12:00:00 +0000
ROA not before: Mon 01 Aug 2022 12:00:00 +0000
ROA not after: Wed 02 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c4:5b:6e:b7:05:27:4e:80:bf:02:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 1 12:00:00 2022 GMT
Not After : Aug 2 04:00:00 2023 GMT
Subject: CN=d5b677be-3b7e-4908-aba0-4802130875e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:2d:30:bf:cc:c4:5a:60:20:30:07:7d:27:
4d:da:4b:f2:75:dc:e1:24:d0:da:20:be:23:af:27:
f0:10:cb:2d:ee:13:e2:f1:e5:65:43:bd:f3:ed:a7:
20:0d:1f:26:89:0d:27:66:63:2b:4b:c0:d3:51:21:
4d:f8:b7:f5:09:5b:ce:9d:51:a7:6b:44:34:d7:71:
81:19:25:84:49:2f:5e:83:0b:8c:32:96:0e:75:71:
0c:e9:a9:69:f7:54:82:ed:79:37:5f:1a:8e:8a:f3:
d8:46:a9:2c:01:b7:7a:eb:54:79:6e:47:90:84:89:
63:cb:68:ef:12:a0:f7:c1:c5:b3:36:f2:c1:ef:24:
f4:5a:ac:a6:af:55:40:1c:24:3a:99:03:08:f6:64:
90:ae:42:32:05:bc:c5:7a:d3:a6:50:de:6a:9b:b4:
19:c7:98:16:60:d1:8f:28:93:5e:a9:df:f2:4a:2e:
41:56:77:da:ea:08:0f:11:8e:5f:45:de:60:b6:a5:
ec:cf:d5:1b:99:94:62:e6:48:c6:2c:1b:10:42:f3:
37:84:e2:59:9e:5d:60:ef:2d:25:ed:dc:2b:04:95:
40:34:36:78:57:f9:04:12:03:85:a7:91:19:70:be:
a2:67:3a:dc:64:6a:3a:81:f9:e5:d8:ad:23:36:d0:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:99:36:86:C0:AA:91:E9:56:71:F4:F3:2D:75:4A:F0:FF:61:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3c1a1a3d-971d-35e8-a10e-cf04d655d9f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:50:92:4f:28:d0:a8:25:1d:4c:47:9f:44:98:b8:7b:6c:14:
21:2e:b2:46:08:fc:93:4f:43:85:2a:3d:01:e3:41:66:d0:ed:
c9:8e:18:54:77:6a:8f:71:a7:84:cd:3b:15:c5:f8:f2:16:e5:
b6:f6:ff:97:a7:45:9c:a0:12:e6:00:76:58:74:d4:f2:66:90:
bf:68:00:53:b2:39:bb:f3:a6:29:4c:af:54:2c:97:1d:ee:83:
78:6b:75:36:10:4b:2c:45:80:98:13:1f:3e:a5:03:00:4d:ed:
c5:27:84:6d:73:be:af:8a:a6:59:f6:b9:d3:b0:57:d2:31:15:
91:8c:5c:c1:79:ef:ca:20:fa:76:a0:0e:3f:4a:90:86:dd:6e:
15:e0:55:13:0e:bf:43:fd:df:f4:98:a2:ba:ee:9b:40:34:fa:
87:c7:2b:9a:b0:75:59:7d:49:30:9a:8f:22:72:8d:0e:6a:52:
c1:49:33:ce:fd:d3:1a:20:62:0b:cb:ca:e4:e3:7c:cc:2c:e2:
87:b3:68:97:97:d3:6d:60:c3:bc:e7:5d:16:cd:25:b0:30:fe:
99:c5:2f:cc:92:09:65:63:d0:e9:7d:3e:08:d0:b1:d1:bc:a3:
d6:b7:ba:6d:97:f9:d1:e1:d8:8e:79:31:17:35:3e:f3:37:b0:
ad:be:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:42 2023 by rpki-client on console-ams.rpki-client.org