Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/45dd1b53-726b-3467-9040-f06c9c1be90e.roa
File: 45dd1b53-726b-3467-9040-f06c9c1be90e.roa (raw, json)
Hash identifier: QcU3YOYK6E+HeCwP5ZtLzDDcrMBm0TIjYg81rSmx0O4=
Subject key identifier: 7B:CF:5C:B0:6B:94:7B:28:3D:D5:94:84:5D:58:65:EE:12:25:F9:93
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E706188743B929596E945D520
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/45dd1b53-726b-3467-9040-f06c9c1be90e.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Mon 03 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:61:88:74:3b:92:95:96:e9:45:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Jul 3 04:00:00 2023 GMT
Subject: CN=d8ab792c-c1de-47bc-8893-200b70630b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:aa:b7:82:9c:db:b5:95:5b:9e:89:12:80:
aa:42:00:79:30:82:6b:6d:cb:7e:00:8d:05:ef:75:
d3:53:b2:48:b1:98:1a:0f:2f:d2:13:c9:df:a2:05:
ef:e7:86:10:2d:bd:5f:40:43:23:91:e2:0e:c3:36:
c5:13:f9:46:37:64:92:81:45:f8:68:0f:8a:fb:0f:
0a:50:b6:2f:5c:34:d7:97:77:89:5f:a8:0c:28:42:
6a:58:d8:45:8b:6c:15:e6:01:4d:88:ed:00:d7:12:
75:da:70:75:e7:67:78:cc:d1:ea:bd:83:45:b2:6b:
04:1e:55:df:4b:40:27:cc:3e:dc:52:60:84:5d:c4:
b6:2b:f6:8c:84:e1:9b:9a:6b:e9:b0:13:af:d5:75:
5f:76:2d:9a:8a:f5:e1:b7:b4:ca:4a:20:d4:43:3f:
c2:2e:13:e6:6d:8f:84:66:fd:c8:59:56:4f:3e:c3:
1e:cc:a8:c5:28:37:ad:e9:d0:34:bc:e8:be:c3:ab:
12:99:ac:aa:49:16:25:b6:f2:17:96:fd:37:17:8a:
6e:1d:72:14:a9:9e:e0:c9:e7:3e:34:84:b8:36:da:
ab:6c:40:f4:a8:d9:d0:ab:f9:cf:34:ec:29:c0:e0:
ae:6c:26:1c:d1:f9:1a:57:98:e2:93:a6:1c:08:db:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:5C:B0:6B:94:7B:28:3D:D5:94:84:5D:58:65:EE:12:25:F9:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/45dd1b53-726b-3467-9040-f06c9c1be90e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:64:85:80:08:87:3c:0a:1d:ae:a7:70:cb:83:25:fe:23:34:
70:83:e8:64:3e:52:92:8d:27:41:c5:3d:91:97:4c:b5:d9:20:
26:f1:42:1a:46:2c:3b:0e:34:88:43:4f:5f:28:f1:29:b8:3f:
d0:b0:53:f6:19:95:da:11:52:3d:d1:55:61:70:eb:e3:38:33:
dd:60:37:64:c4:3f:b1:82:58:5b:58:1a:36:25:2f:0a:ac:49:
83:d9:f9:2e:b1:92:02:ec:76:d5:03:07:d9:cb:5f:c6:e7:1b:
3a:01:d2:d6:8f:82:d5:37:db:57:51:bb:8a:1a:d0:16:59:42:
67:86:4b:b9:c3:0d:ce:2e:0f:d7:d6:76:62:da:70:5d:e3:38:
64:a0:4d:f2:14:6a:48:b0:91:a7:29:b4:fc:d1:1b:7c:9c:d3:
7c:58:38:87:7b:64:31:76:7d:81:82:12:a3:ff:d6:2b:c5:a3:
89:aa:5a:42:d1:84:0c:b1:71:64:67:d9:1e:c5:5e:54:91:53:
71:51:a8:be:1e:1d:ad:3b:d6:4c:76:9d:da:a0:c6:f6:a6:a5:
54:49:85:1b:9e:e1:74:34:9c:f6:a1:2d:54:28:d3:19:8d:ae:
77:93:78:c2:75:20:60:c0:62:d9:e7:74:57:aa:33:a0:bb:f3:
8a:8d:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org