Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4f357fd6-dd1a-384b-9fee-084a85da0c22.roa
File: 4f357fd6-dd1a-384b-9fee-084a85da0c22.roa (raw, json)
Hash identifier: yLKd9T+jsadBJ2OvKWz3B9zThXR13mBhpbhVLCEwhd4=
Subject key identifier: A5:6C:61:5C:2C:0E:36:39:9C:6B:22:02:73:2D:5E:D0:E7:62:02:B7
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E7379C1FC1C3B6F3DB22E0900
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4f357fd6-dd1a-384b-9fee-084a85da0c22.roa
Signing time: Sun 03 Jul 2022 12:00:00 +0000
ROA not before: Sun 03 Jul 2022 12:00:00 +0000
ROA not after: Tue 04 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:73:79:c1:fc:1c:3b:6f:3d:b2:2e:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 3 12:00:00 2022 GMT
Not After : Jul 4 04:00:00 2023 GMT
Subject: CN=a9cb4626-cdd5-41f0-b044-e2c221d163bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:5a:5d:dd:3f:54:8a:01:32:81:2e:b7:b8:
41:aa:9b:4d:ac:69:34:32:b6:38:48:f0:46:50:36:
65:b4:0b:dd:40:e5:d3:a7:76:23:86:fa:e3:4d:35:
3a:cd:22:bd:6f:2f:e6:85:f0:f4:67:aa:55:18:34:
46:6e:e0:6f:0b:b4:16:ca:05:ad:7c:cf:e5:3b:c6:
b1:03:be:12:d5:a9:d8:e2:18:3c:9e:c5:86:b3:ad:
d5:96:08:57:c9:18:68:44:e1:64:4c:4e:e2:9e:8a:
03:60:e4:c1:97:38:91:17:95:13:6e:4f:14:4e:b8:
f2:cf:71:62:46:71:0e:f0:b3:d3:4e:3f:d5:79:bf:
f5:46:59:81:a4:3f:ca:ab:51:ab:70:e5:3c:be:0f:
2d:d3:a3:77:bb:eb:1f:c0:11:88:09:79:be:4f:45:
80:41:bd:0c:49:47:6c:89:6c:1d:ff:9d:21:16:70:
cb:6c:39:15:35:69:34:95:dc:37:b8:d3:45:9f:93:
59:c4:91:2e:8c:12:36:b4:63:3c:f7:89:5b:fd:c3:
c0:1d:b8:3a:9d:9b:87:8f:6b:66:42:80:ef:ed:81:
62:76:a4:f3:60:fc:91:7b:f0:f9:28:4b:f1:30:08:
ac:4e:bf:04:e8:db:db:4a:6a:53:0e:51:de:e7:66:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:61:5C:2C:0E:36:39:9C:6B:22:02:73:2D:5E:D0:E7:62:02:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4f357fd6-dd1a-384b-9fee-084a85da0c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:6d:cd:c9:3f:61:85:0a:ad:de:7d:da:03:b9:ec:da:9e:79:
27:86:09:5b:b3:da:e4:07:2f:85:4d:07:ad:d1:29:1d:56:0c:
73:6e:ad:fe:8b:55:95:d8:d7:a5:f4:84:6f:52:3d:7f:29:f7:
60:b9:33:2f:fd:f8:79:d4:94:1b:11:06:f0:5d:2e:2e:f7:e9:
8e:8a:6e:09:9b:0d:29:a0:c9:6f:02:1c:04:b7:c2:bf:aa:b0:
5f:f5:8d:f7:31:a9:57:7f:5b:60:ef:cf:a0:fa:8e:80:64:07:
e7:cd:c1:1f:86:85:d2:a5:04:d6:34:78:de:25:7c:2f:f9:c5:
2c:35:5c:e3:ec:10:f5:bb:f8:ef:38:db:68:7b:bd:45:e9:fe:
ab:15:97:ad:f9:0e:dc:fb:47:d2:18:8c:2e:e9:fe:0e:b9:cb:
cc:39:57:3f:9d:f1:ae:9c:37:11:61:f4:98:c9:89:23:af:e5:
68:e3:cc:51:48:9a:a9:7a:ce:8b:a0:5f:b6:ca:59:4e:c0:ef:
41:b8:ed:3d:67:6e:8a:24:38:0a:35:6a:a8:03:6c:59:28:cb:
cf:64:40:13:71:f7:b9:95:27:f8:d4:3d:e0:65:43:05:fe:4c:
df:4f:72:45:57:8c:93:69:98:6c:77:ce:59:a6:f8:ee:b1:f3:
a5:15:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org