Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/44161711-36e8-3d9a-a61a-c8905d2370f1.roa
File: 44161711-36e8-3d9a-a61a-c8905d2370f1.roa (raw, json)
Hash identifier: pyn5BCUNSJsyG+4xB3Oewf2qpbzgIRVYiKyxWE9j5iQ=
Subject key identifier: 9A:61:A5:21:A8:F5:CB:C5:10:55:62:14:15:5C:B0:05:B9:54:49:DC
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EC11B128DC659A52143DEEA80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/44161711-36e8-3d9a-a61a-c8905d2370f1.roa
Signing time: Sun 31 Jul 2022 12:00:00 +0000
ROA not before: Sun 31 Jul 2022 12:00:00 +0000
ROA not after: Tue 01 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c1:1b:12:8d:c6:59:a5:21:43:de:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 31 12:00:00 2022 GMT
Not After : Aug 1 04:00:00 2023 GMT
Subject: CN=472616e6-36bc-49d6-8883-888525564203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:f4:11:01:f3:d9:dc:54:68:bd:fe:81:a1:
e1:14:bb:bf:f4:9f:63:d5:a3:58:47:b7:f7:21:1c:
68:42:5b:d5:1c:1f:3a:f4:93:0d:79:c9:7f:05:38:
a1:4f:09:cd:c0:11:5c:da:46:98:e7:49:51:2e:b4:
ae:a3:df:4f:51:01:ce:37:25:fe:01:76:4a:c6:d4:
7f:95:48:7e:ff:a4:02:de:2d:ac:a0:2e:25:e0:16:
71:f6:47:5d:f0:03:04:3d:d0:f0:b2:3d:06:8e:8b:
3a:3b:0d:92:6f:55:4f:eb:56:6a:ad:c2:5c:f8:1e:
b7:d7:22:f0:95:59:ac:7c:bb:56:24:a2:e8:05:dd:
b8:02:10:5f:4e:1b:17:4a:77:2c:c4:fc:fc:8d:4f:
17:f7:28:3f:ca:b9:08:80:71:a5:16:dc:8b:b6:d0:
bd:46:d5:85:77:92:a4:43:33:3b:f7:a0:c0:3e:db:
44:f7:30:61:72:6d:1e:a9:d7:d7:0f:f2:a0:54:c4:
29:9f:63:40:0e:55:58:59:fb:2d:41:cb:8a:29:98:
61:d5:c7:7a:fb:64:48:7f:b7:71:a9:9e:e5:05:69:
43:25:10:7d:78:a0:cd:05:4e:72:13:58:a8:eb:c8:
16:f1:cb:67:42:b6:7c:f3:92:47:8a:b5:d6:cd:0d:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:A5:21:A8:F5:CB:C5:10:55:62:14:15:5C:B0:05:B9:54:49:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/44161711-36e8-3d9a-a61a-c8905d2370f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:20:bb:62:ca:23:a3:42:80:fe:92:e2:98:b6:b3:b1:ab:6d:
40:a7:dc:c4:5d:9c:53:2e:ce:4a:a5:85:a2:20:5a:be:2c:28:
ef:c1:51:9a:88:cf:f8:60:f5:56:c5:93:36:1c:5f:fa:7d:df:
44:e1:12:f2:d8:54:c5:e4:a2:d1:c8:b2:0c:72:74:ac:87:fa:
61:26:1a:b9:c7:df:91:eb:46:15:00:0b:21:b3:1e:99:48:87:
a1:cd:0c:3e:e9:ab:4b:a6:59:67:22:b9:a7:7f:00:c4:a2:4f:
57:ee:b3:cd:75:7a:af:b6:53:4e:dd:7b:db:e9:28:5d:59:46:
79:39:77:bf:c4:be:f5:45:c6:87:9f:cc:52:d5:03:04:8e:a8:
54:6e:3e:8b:f3:33:34:1f:0f:8c:ef:53:38:bb:c5:dd:ff:00:
89:24:a5:53:8b:66:28:5b:87:5a:b1:8f:25:0e:28:f5:e1:27:
a1:3c:c5:cc:a7:00:1c:f3:ff:fb:2f:0e:bd:ee:40:42:b8:f3:
6b:47:2e:4b:47:fd:79:be:0b:9f:ab:38:b0:4d:0d:d5:b1:e4:
94:8e:b8:0f:ef:c2:2e:12:9c:8f:0a:02:b3:02:78:58:82:93:
b5:a2:bc:a7:fa:a2:5c:ff:eb:f6:5f:4c:a6:e8:fd:e6:2c:33:
32:27:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org