Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e57f4bf-d228-3e25-9999-4d1afb01f361.roa
File: 3e57f4bf-d228-3e25-9999-4d1afb01f361.roa (raw, json)
Hash identifier: yXfVX3+CepAn1cmsupGo7v0uZW67l9z2fIv881onsBI=
Subject key identifier: 7C:6F:5A:1C:54:FB:96:73:03:F0:B3:3D:0F:60:C5:2C:65:72:9E:FE
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D18DD2F516ABF34A199A02240
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e57f4bf-d228-3e25-9999-4d1afb01f361.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:18:dd:2f:51:6a:bf:34:a1:99:a0:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=5b1bc7a7-b67a-48c6-b362-dcbdc1caaa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:83:27:10:db:ff:0a:7a:f1:90:f6:9a:07:
bc:18:53:1b:17:bc:6a:5a:c4:90:24:f5:23:df:7a:
a2:ea:e7:b3:f4:20:8d:c0:d0:b6:e2:7e:00:01:cd:
b0:87:d9:29:a8:d6:2d:d5:26:5f:f4:06:79:18:80:
87:49:28:16:64:3a:ab:ed:69:6d:3b:0a:16:a2:07:
29:ca:d3:e6:df:a1:30:73:16:dc:3e:14:e5:cc:01:
60:f8:59:6d:2f:ae:e0:48:60:2d:f7:2d:fb:53:c3:
86:4f:ff:38:8a:f2:28:8b:6d:12:99:d9:be:cd:cc:
23:08:33:41:a3:87:29:f3:4a:11:ff:58:23:b6:f6:
50:8b:a8:3c:cf:fd:7a:4f:29:26:95:b5:1a:b0:9b:
05:02:24:0f:1e:dd:96:6c:af:8c:72:ad:90:79:2e:
dc:48:0c:9d:3c:50:b3:da:40:ea:8c:69:17:22:0e:
67:5b:88:da:48:26:95:bb:ab:98:05:ae:d2:e9:05:
87:84:98:b8:23:98:12:11:f1:d1:94:f1:57:2e:52:
76:dc:27:3e:a6:22:3b:b0:5e:b7:00:7d:4a:e2:f4:
1d:a9:cd:f7:26:9a:7d:d8:1d:af:f0:78:0f:c2:f8:
63:49:31:0b:4a:30:83:cc:7f:c8:dd:93:cd:5c:51:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:5A:1C:54:FB:96:73:03:F0:B3:3D:0F:60:C5:2C:65:72:9E:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e57f4bf-d228-3e25-9999-4d1afb01f361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:79:41:50:7c:b2:7c:ff:a1:bd:da:a6:d9:57:ce:7f:2e:a9:
9d:df:b1:49:8b:a6:4a:34:d8:dd:5e:61:06:d4:df:61:30:e9:
a1:6b:6a:e4:a2:e2:45:88:0a:70:6d:5b:a9:5e:dc:e0:ea:fa:
fd:3d:6b:78:18:a1:8a:1f:d7:04:70:2d:17:9d:fd:e0:77:0c:
97:e8:7a:a5:f6:95:10:6c:f1:3b:f4:61:77:f3:76:16:e5:e0:
d2:7f:8b:79:15:d9:db:c6:ca:3a:83:d6:b2:77:22:3f:c8:8c:
31:9d:19:5b:bd:08:ce:1c:19:4f:0c:06:90:72:26:a7:52:38:
64:44:91:41:3a:d8:6c:17:c9:f7:91:40:81:11:18:60:31:4f:
d0:72:78:1b:4a:9f:7c:97:47:9d:fc:c6:be:28:79:9b:d4:c8:
a2:35:50:25:1e:93:bb:e1:50:03:98:a1:1b:d3:3b:03:d1:d6:
11:ed:2e:aa:9a:52:33:a3:2e:ad:a1:c3:ac:5c:b0:d6:71:20:
70:be:ae:b0:62:12:a6:7e:94:e7:60:1e:40:3c:c1:5e:62:fc:
db:78:24:67:2a:d0:96:ce:b4:c0:71:33:12:09:13:63:a3:11:
29:48:3e:7e:7c:c3:e7:41:b0:d7:17:a5:bf:91:27:3b:c1:9a:
c6:4c:bd:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0Y3S9Rar80oZmgIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDMwMjA1MDAwMFoXDTIzMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
NWIxYmM3YTctYjY3YS00OGM2LWIzNjItZGNiZGMxY2FhYTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTWDJxDb/wp68ZD2mge8GFMbF7xqWsSQJPUj
33qi6uez9CCNwNC24n4AAc2wh9kpqNYt1SZf9AZ5GICHSSgWZDqr7WltOwoWogcp
ytPm36EwcxbcPhTlzAFg+FltL67gSGAt9y37U8OGT/84ivIoi20Smdm+zcwjCDNB
o4cp80oR/1gjtvZQi6g8z/16TykmlbUasJsFAiQPHt2WbK+Mcq2QeS7cSAydPFCz
2kDqjGkXIg5nW4jaSCaVu6uYBa7S6QWHhJi4I5gSEfHRlPFXLlJ23Cc+piI7sF63
AH1K4vQdqc33Jpp92B2v8HgPwvhjSTELSjCDzH/I3ZPNXFFaawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxvWhxU+5ZzA/CzPQ9gxSxlcp7+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvM2U1N2Y0YmYtZDIyOC0z
ZTI1LTk5OTktNGQxYWZiMDFmMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHB5QVB8snz/ob3aptlXzn8uqZ3fsUmLpko02N1eYQbU32Ew6aFrauSi
4kWICnBtW6le3ODq+v09a3gYoYof1wRwLRed/eB3DJfoeqX2lRBs8Tv0YXfzdhbl
4NJ/i3kV2dvGyjqD1rJ3Ij/IjDGdGVu9CM4cGU8MBpByJqdSOGREkUE62GwXyfeR
QIERGGAxT9ByeBtKn3yXR538xr4oeZvUyKI1UCUek7vhUAOYoRvTOwPR1hHtLqqa
UjOjLq2hw6xcsNZxIHC+rrBiEqZ+lOdgHkA8wV5i/Nt4JGcq0JbOtMBxMxIJE2Oj
ESlIPn58w+dBsNcXpb+RJzvBmsZMvXU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:49 2023 by rpki-client on console-fra.rpki-client.org