Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/43001b0b-119b-38b9-b3e1-b25e2cebcf58.roa
File: 43001b0b-119b-38b9-b3e1-b25e2cebcf58.roa (raw, json)
Hash identifier: ulXLCXrtSLPG+Mwxr16q7ZKY65Hu/5onXyDCHsyE2vU=
Subject key identifier: F4:B9:BE:D9:A8:6F:00:A0:4A:8E:05:5B:24:73:71:D7:68:69:46:75
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F9DE72986A21702A98183FB80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/43001b0b-119b-38b9-b3e1-b25e2cebcf58.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Thu 19 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9d:e7:29:86:a2:17:02:a9:81:83:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Oct 19 04:00:00 2023 GMT
Subject: CN=cdcb6dab-3e90-4f89-8e81-1a7968cd1080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:f7:4e:19:e8:59:4b:b7:b4:47:96:1b:08:
7d:3d:81:80:53:3d:e7:e5:f2:a1:ab:55:c3:ac:74:
5a:b0:c8:98:68:bc:1c:ef:be:69:cd:6d:e7:4a:60:
1e:c5:3b:61:8e:08:b7:78:f8:7a:91:08:0b:c9:f7:
bd:54:86:25:da:8b:73:0a:26:71:de:8f:c9:35:c0:
14:a5:a5:93:05:7b:01:c5:13:f8:5a:c3:1b:08:b6:
75:80:02:cc:d7:17:d0:86:12:0c:1e:33:42:2f:2d:
72:59:c3:6f:33:6d:b5:9f:1d:17:cb:ac:05:56:94:
6e:69:92:fc:e6:90:b7:13:0f:b1:21:80:3d:36:28:
4f:80:f4:c2:97:06:72:ec:23:23:7f:e3:71:b6:cd:
16:8c:76:ee:8c:52:68:14:79:30:fc:48:0e:a3:30:
01:0e:78:c6:b9:ab:b0:85:09:3c:5d:41:38:97:d0:
50:45:14:f3:dd:1f:ef:fd:90:fa:4c:fa:cb:74:af:
66:6a:e4:39:f2:62:99:11:c0:81:73:bb:7d:94:58:
d1:a0:4c:58:f1:42:44:93:ea:c7:5b:0e:6b:f6:32:
31:ac:3d:98:b6:d5:8b:4e:85:42:ac:96:ef:5f:55:
16:04:75:1a:2e:79:44:08:3a:39:69:be:29:6b:72:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:BE:D9:A8:6F:00:A0:4A:8E:05:5B:24:73:71:D7:68:69:46:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/43001b0b-119b-38b9-b3e1-b25e2cebcf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:cf:4d:b0:5e:fb:49:f3:4c:46:d8:1d:ca:d0:9e:cc:27:98:
b1:43:1c:9c:12:d0:ae:b7:27:d6:39:7e:6b:7a:a4:f0:66:9f:
fc:8a:3a:02:f5:9c:6b:d0:7f:b2:ab:12:9f:41:b5:ea:f0:c0:
63:bf:94:7f:fc:0f:a6:27:02:03:d3:4a:ea:3e:e0:e2:f4:72:
87:57:47:26:34:24:f9:85:ca:38:a6:03:9b:ab:c5:90:83:b3:
62:ed:4c:4b:78:42:2a:2b:97:48:df:e5:4b:d6:42:40:30:c9:
45:ac:7f:84:2b:14:53:e7:5a:bf:f3:16:f6:d4:ce:8b:43:c5:
36:07:3d:e8:fa:64:0f:bd:c9:ea:60:07:51:66:aa:b6:c5:57:
87:e7:54:94:09:bb:7e:4d:a1:34:ff:a9:7d:76:88:f3:c1:25:
1c:df:fc:23:64:06:ca:3d:20:59:46:66:02:eb:da:13:0c:2c:
2e:84:bf:05:d7:7d:73:3d:55:82:13:b8:8a:c7:1b:ed:f4:9d:
de:cb:18:4f:82:74:da:b9:e3:f3:60:17:c6:18:ed:3f:c9:56:
02:9c:12:97:78:0d:ea:b5:ac:3b:ca:c5:ba:dd:07:ee:34:c3:
ed:6e:38:e5:de:58:bb:08:52:ed:56:50:d5:b9:19:c2:0b:82:
80:6e:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org