Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3deb4a6c-ff08-367f-b686-ed84dfbaf580.roa
File: 3deb4a6c-ff08-367f-b686-ed84dfbaf580.roa (raw, json)
Hash identifier: saUzu5g39erz4pMg6Alz+T63wbxQP3FRY3xZkC5T3Zw=
Subject key identifier: F0:04:51:C9:32:20:33:2E:00:7F:27:97:FA:9C:2A:07:EA:92:AC:9D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E8C8257CA5B0795DBE98EFB36
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3deb4a6c-ff08-367f-b686-ed84dfbaf580.roa
Signing time: Tue 12 Jul 2022 12:00:00 +0000
ROA not before: Tue 12 Jul 2022 12:00:00 +0000
ROA not after: Thu 13 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8c:82:57:ca:5b:07:95:db:e9:8e:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 12 12:00:00 2022 GMT
Not After : Jul 13 04:00:00 2023 GMT
Subject: CN=169fd2dc-b69b-419d-8a98-870305518119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:e8:d4:f5:ea:21:d5:0e:48:2b:a5:e4:3d:
f3:fe:4a:a4:5f:2b:3b:f0:64:c6:66:58:9b:79:1e:
b7:a2:d7:50:8b:da:62:ee:98:02:43:0f:88:5f:c7:
a8:5b:8d:99:5c:0d:3c:1e:fa:cf:5d:76:cc:77:e1:
25:16:ac:31:63:ee:89:34:c0:b1:b8:a3:04:12:68:
f6:5e:b5:3a:9f:dc:25:5a:21:67:a2:55:74:98:7f:
39:b1:35:21:6b:36:e9:58:68:ad:47:aa:5f:5d:01:
5b:55:59:d1:f7:32:ff:a6:2a:4c:19:ba:8f:2d:2b:
37:ee:cb:6b:44:f8:33:37:87:97:b2:2b:ab:f6:a4:
f7:e4:0f:60:f8:d6:e4:42:9b:ed:af:10:76:4b:03:
db:68:07:26:2e:26:32:88:9c:50:9b:fa:2d:1c:83:
ae:1b:fd:d0:95:62:58:46:db:62:36:99:15:73:42:
46:b3:2c:67:e4:08:d8:ae:f6:6d:69:72:b3:f2:13:
8d:b4:c9:07:d6:2a:38:86:f2:34:91:0e:0d:8a:ec:
76:0d:74:29:6e:e2:8d:31:e7:02:e0:65:10:5a:d1:
2f:37:2e:9b:ca:69:47:9a:6c:7f:73:42:dc:2b:2f:
af:ec:95:0d:40:ee:31:13:72:58:2b:de:25:52:e9:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:51:C9:32:20:33:2E:00:7F:27:97:FA:9C:2A:07:EA:92:AC:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3deb4a6c-ff08-367f-b686-ed84dfbaf580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:5e:31:d6:28:5c:c2:86:00:1d:50:e7:43:84:07:d3:a5:f0:
54:9c:8f:f6:8f:4c:68:8e:77:c5:ed:ed:42:31:55:cf:fa:f3:
f5:78:13:ff:82:93:21:2f:47:77:6f:d9:96:49:80:b1:64:65:
94:b3:77:d7:2e:9d:67:fa:ce:44:36:d1:c5:d5:7f:53:a1:c6:
e6:fd:58:69:c4:7d:c6:de:cc:96:aa:a7:e9:8a:18:ce:61:eb:
c1:27:b8:7a:d4:65:3e:c0:99:2b:22:ef:f2:b8:05:a9:d2:36:
a0:d1:17:23:bb:8c:9e:4a:4d:4c:da:0f:79:fe:8c:f8:90:9e:
34:e7:f1:ca:95:41:e1:f7:5c:ce:ae:d4:bb:1e:ce:93:fe:63:
17:2a:9c:74:d3:07:f5:5d:6c:f7:58:e6:2f:96:66:ff:52:71:
8d:cd:fc:17:5e:e0:6b:be:8a:ed:46:4b:ec:3f:8c:3c:04:22:
8e:b4:c6:f1:ee:f9:85:58:0d:a0:89:54:42:81:f3:68:d5:34:
99:d7:fb:f1:14:d8:80:a7:8d:0a:d3:01:e7:42:7d:6d:77:66:
92:98:80:61:59:d8:b3:5a:cf:d0:b4:2d:12:eb:48:73:e9:b5:
d6:88:94:04:1b:28:1d:72:c4:c3:20:e5:b7:d3:48:35:b7:b6:
71:71:e9:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6MglfKWweV2+mO+zYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDcxMjEyMDAwMFoXDTIzMDcxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MTY5ZmQyZGMtYjY5Yi00MTlkLThhOTgtODcwMzA1NTE4MTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLfo1PXqIdUOSCul5D3z/kqkXys78GTGZlib
eR63otdQi9pi7pgCQw+IX8eoW42ZXA08HvrPXXbMd+ElFqwxY+6JNMCxuKMEEmj2
XrU6n9wlWiFnolV0mH85sTUhazbpWGitR6pfXQFbVVnR9zL/pipMGbqPLSs37str
RPgzN4eXsiur9qT35A9g+NbkQpvtrxB2SwPbaAcmLiYyiJxQm/otHIOuG/3QlWJY
RttiNpkVc0JGsyxn5AjYrvZtaXKz8hONtMkH1io4hvI0kQ4Niux2DXQpbuKNMecC
4GUQWtEvNy6bymlHmmx/c0LcKy+v7JUNQO4xE3JYK94lUukyVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAEUckyIDMuAH8nl/qcKgfqkqydMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvM2RlYjRhNmMtZmYwOC0z
NjdmLWI2ODYtZWQ4NGRmYmFmNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEteMdYoXMKGAB1Q50OEB9Ol8FScj/aPTGiOd8Xt7UIxVc/68/V4E/+C
kyEvR3dv2ZZJgLFkZZSzd9cunWf6zkQ20cXVf1Ohxub9WGnEfcbezJaqp+mKGM5h
68EnuHrUZT7AmSsi7/K4BanSNqDRFyO7jJ5KTUzaD3n+jPiQnjTn8cqVQeH3XM6u
1LsezpP+YxcqnHTTB/VdbPdY5i+WZv9ScY3N/Bde4Gu+iu1GS+w/jDwEIo60xvHu
+YVYDaCJVEKB82jVNJnX+/EU2ICnjQrTAedCfW13ZpKYgGFZ2LNaz9C0LRLrSHPp
tdaIlAQbKB1yxMMg5bfTSDW3tnFx6aM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org