Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3d94f6d7-94c7-305a-8e89-1fa8661aaf26.roa
File: 3d94f6d7-94c7-305a-8e89-1fa8661aaf26.roa (raw, json)
Hash identifier: 5mufMu4wU0SoGJFXgC3Gfnt3hMf2q3AXLUEe6wZhy0Q=
Subject key identifier: 65:A2:7C:7D:E7:CA:D5:EC:B5:AC:95:F5:FB:A2:98:E6:F1:D8:E9:CD
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E1C8EE6038893702A3C0AC000
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3d94f6d7-94c7-305a-8e89-1fa8661aaf26.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Sat 03 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1c:8e:e6:03:88:93:70:2a:3c:0a:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jun 3 04:00:00 2023 GMT
Subject: CN=9b75bd16-569e-41df-b59c-14949180eebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:ca:e3:8c:4e:f5:c2:70:28:68:55:d7:97:
f4:17:b1:41:b3:d2:1f:38:fa:f3:c5:1e:04:2c:b6:
47:98:98:44:76:5b:09:c8:6e:55:bd:23:0c:f2:3e:
9d:06:e8:53:24:05:f8:fc:52:cc:7a:ae:d2:5b:f2:
21:2c:f1:c9:a0:a5:2a:63:93:f8:09:2d:7a:f3:d7:
59:7f:0f:12:d9:42:ed:ff:58:6a:ed:3b:07:72:b9:
ed:9b:0a:42:c1:41:44:2b:76:0f:37:71:5d:c6:5d:
ba:b9:20:23:8d:0e:03:6d:fd:12:39:7f:24:c7:63:
69:59:ac:c7:88:f3:76:94:76:b8:99:b3:1c:ca:81:
67:2a:83:3e:26:67:c1:68:41:c4:64:a7:17:01:9e:
3b:da:d0:60:cf:c4:47:c0:1f:30:fe:c1:7a:25:a6:
03:aa:19:ed:76:06:dc:b2:bf:5a:dc:d6:b1:18:1a:
f4:33:c7:3a:8a:e0:26:b3:f5:16:6c:bf:a6:69:73:
3a:f1:1f:7a:91:27:57:fa:37:1d:c0:d9:ca:26:c5:
b0:8d:7b:b3:94:c1:5d:93:4e:a8:72:f6:08:e2:46:
f2:de:5c:af:da:71:7a:84:e9:cd:65:4c:02:f8:bd:
bf:80:3a:c2:c4:e9:35:a8:fa:25:c1:ca:71:33:6a:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:7C:7D:E7:CA:D5:EC:B5:AC:95:F5:FB:A2:98:E6:F1:D8:E9:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3d94f6d7-94c7-305a-8e89-1fa8661aaf26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:67:a7:f4:98:e5:08:0a:83:4c:22:8c:ee:37:a2:15:2b:26:
1d:33:8f:16:d3:61:2c:71:62:3a:d3:60:92:61:2a:f8:cf:50:
ee:31:fa:69:b8:88:2a:8e:1f:76:59:2b:13:a3:62:ec:b7:36:
3e:36:34:cf:6a:13:c2:97:99:59:57:cf:18:fa:7f:af:8a:ba:
a8:00:14:be:60:75:c2:96:3e:1b:de:35:d0:c5:c4:2b:ab:bd:
9d:a0:f1:79:f4:14:28:cf:e8:bc:6b:7f:85:86:1b:62:cd:e7:
a0:f7:93:2b:1c:6d:32:f7:bf:69:d2:e3:a1:02:30:34:e2:5a:
c0:2c:3b:56:2a:bd:76:52:6f:26:7e:dd:de:46:b9:a9:fc:0f:
3a:cb:23:4e:7b:08:82:9c:59:49:50:4f:cd:34:9d:a0:74:83:
69:c9:fc:99:dd:93:ef:86:8b:79:3a:22:95:96:67:25:0b:8d:
b4:22:74:bf:7c:a6:a6:ea:3f:43:b4:fb:08:77:ab:70:da:f0:
5c:7e:db:f1:16:ff:fb:6f:40:36:93:13:88:ed:ff:05:e9:a5:
e3:0a:ea:c1:26:29:1f:4b:3a:46:8e:07:ea:57:e2:95:62:89:
64:13:83:bd:5e:24:87:ab:8d:2b:01:ce:39:f3:39:9a:6e:66:
4f:3b:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org