Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/540179d9-73c0-3ed7-864a-4f4321253805.roa
File: 540179d9-73c0-3ed7-864a-4f4321253805.roa (raw, json)
Hash identifier: SS3n8p1U7eZwQ4sQsyfjQvX3D5Myud4SqUanYUjB+5U=
Subject key identifier: 8B:0F:9A:6A:E0:19:EB:9A:71:A5:6A:33:A5:31:77:8B:F1:2B:B6:B1
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F743F24556C98FF0B03AAE900
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/540179d9-73c0-3ed7-864a-4f4321253805.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Wed 04 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:74:3f:24:55:6c:98:ff:0b:03:aa:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2023 GMT
Subject: CN=b085a6db-e69d-47eb-96ed-74cbba6a23ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:97:ab:f0:b6:65:7b:f2:32:aa:99:55:12:
45:85:b5:54:b7:de:3f:b3:98:bd:af:2f:a2:c5:43:
de:d2:c9:be:f5:c4:10:15:50:bf:f1:06:84:ad:72:
31:27:aa:57:50:c1:b9:d6:ba:01:57:43:54:0b:25:
af:fe:e2:9a:dd:f7:ae:f2:5d:56:4a:0c:d9:2c:6d:
5c:99:cb:97:aa:4e:6b:da:65:73:b2:e8:e1:b0:7e:
ce:b6:80:55:62:42:db:60:d8:67:b5:ce:a0:9e:d2:
60:07:56:ba:2d:b2:18:87:60:b4:25:20:74:82:65:
2d:12:76:d9:a4:8e:fc:a3:47:2b:d0:91:3e:6c:76:
8f:e1:a2:34:2d:95:e4:aa:b8:25:bc:7d:3a:51:3c:
c0:c6:c2:cc:38:b8:92:a6:29:b2:00:fa:9e:e5:4f:
d6:cc:cc:25:35:38:76:f2:f8:0f:a7:20:71:cc:d9:
4d:5c:3c:b5:61:25:cf:bd:d6:b2:e5:9a:8a:e7:6b:
5f:1f:58:6d:0f:49:3c:d0:77:7b:c9:e7:f2:f6:c9:
9d:0f:9d:74:47:f3:a7:a2:a2:91:17:20:11:af:e6:
09:3e:9b:c5:fc:5c:46:54:e3:70:21:fc:0b:ac:38:
94:ae:7b:2b:e2:34:9d:71:24:ba:f1:28:08:18:f7:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:9A:6A:E0:19:EB:9A:71:A5:6A:33:A5:31:77:8B:F1:2B:B6:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/540179d9-73c0-3ed7-864a-4f4321253805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:18:fa:d3:c5:dc:e2:b7:42:ba:42:61:97:d9:e6:29:3f:03:
49:13:43:06:25:bc:cb:66:af:05:45:7e:73:7a:f0:2a:3c:6e:
cf:90:b0:10:fd:41:a8:9c:76:72:55:97:9c:91:d1:91:11:ae:
12:02:9e:0f:8e:5d:0c:5a:8d:7f:cf:63:84:39:67:f4:8e:57:
10:63:de:c0:54:b5:de:61:6c:84:91:91:ab:9e:90:69:fa:b3:
e7:06:11:da:b4:cf:7a:2f:7a:65:16:dc:e4:77:fc:e7:9e:9b:
8b:2d:81:e3:6c:44:99:95:87:3c:2d:08:be:c4:cf:56:a0:11:
49:e2:81:60:2f:82:ba:72:ce:7b:e9:40:1d:37:82:b9:18:0e:
51:c5:d8:c5:b7:37:b3:bd:e2:0a:06:33:fa:86:b3:0f:2f:d3:
a8:38:05:5a:a2:31:0c:4f:6f:f5:de:76:35:9c:9f:06:6f:0b:
f5:fd:1e:0a:0e:8c:ff:b4:0c:fa:ea:e3:7b:76:1a:a9:d8:75:
c4:bc:21:ef:97:ed:55:c6:a5:3d:4a:2d:40:0a:e0:bc:8e:92:
63:19:bf:b9:c2:15:6f:0b:a4:4b:37:30:b3:6b:00:67:c5:55:
67:0f:e0:af:dc:c3:91:0e:31:4a:9e:6a:2c:ef:a2:e5:e4:df:
f5:65:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:43 2023 by rpki-client on console-ams.rpki-client.org