Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5cce22dc-b34f-3890-8ee0-a9e6a0330dcb.roa
File: 5cce22dc-b34f-3890-8ee0-a9e6a0330dcb.roa (raw, json)
Hash identifier: /IdNBCEKuCpnpYHOQTmxSwETThb+NZITvV1deg+X89w=
Subject key identifier: A7:C4:E9:E8:13:FD:B6:E5:D9:6D:09:01:88:2F:11:10:D6:40:86:FE
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EE2ABADB70DCDA549654DEC00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5cce22dc-b34f-3890-8ee0-a9e6a0330dcb.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sun 13 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:ab:ad:b7:0d:cd:a5:49:65:4d:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Aug 13 04:00:00 2023 GMT
Subject: CN=1324971c-226e-4334-827e-552d37297348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:40:97:0c:41:e3:92:87:e2:fb:6e:b6:c5:
b5:46:eb:63:ae:75:c7:ae:6e:d4:fc:90:f0:5e:6f:
d1:4c:c2:bd:0b:35:fe:fb:bf:db:b0:ea:b8:3b:29:
c2:b0:3e:3b:a2:34:79:f1:c8:6c:e7:ff:44:d4:58:
a4:9c:76:d0:a4:85:c6:22:d6:dd:50:47:22:91:0c:
43:73:27:d5:cd:32:93:a4:84:ae:5b:7a:07:a1:1e:
4b:ec:f2:73:2b:38:95:a3:03:3f:3e:b4:aa:6d:94:
bc:45:95:cf:a8:06:5b:cb:4e:19:b8:0a:3f:8d:57:
e3:44:55:7c:56:cd:f7:19:5c:5c:11:a4:b9:55:ec:
28:10:30:53:6f:ea:a8:fe:eb:8c:b2:2e:d0:d7:1f:
ba:b2:78:bf:dc:ea:2e:5a:58:0c:22:84:ad:93:c2:
28:5c:56:de:3a:7c:2a:ce:dc:63:0e:a1:79:57:76:
c2:72:70:4a:04:df:e6:bf:83:16:73:19:be:13:30:
42:72:70:63:6a:d6:30:37:83:d0:10:e8:9e:fc:25:
c6:df:fb:f3:a5:01:8b:84:bd:9a:24:05:15:7d:40:
4b:03:21:f7:89:4a:fc:e7:9f:9c:df:39:1d:ca:48:
6e:06:91:fd:79:e0:f6:3d:85:43:b0:c2:e4:11:d5:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:E9:E8:13:FD:B6:E5:D9:6D:09:01:88:2F:11:10:D6:40:86:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5cce22dc-b34f-3890-8ee0-a9e6a0330dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4a:bb:d1:96:4b:2f:dc:83:81:26:96:d0:73:fc:77:c0:5c:
a4:f8:29:e2:50:c5:40:9c:27:7b:91:bb:0c:50:d4:3a:fd:7e:
5b:d5:a4:2c:dc:14:a6:42:ff:75:c6:d6:77:62:da:7f:2c:c5:
69:f9:75:5b:10:c6:2b:30:34:35:ee:ce:0b:70:e9:21:6b:fb:
9b:51:3b:fe:39:4f:9e:44:d6:19:98:1d:1d:6a:db:03:1e:5f:
3a:2c:77:71:ba:35:75:a4:de:99:74:3c:a5:ba:62:da:c7:bf:
8c:76:a3:9b:5a:d2:fc:7c:7c:04:35:8b:c0:d4:14:a8:2d:bb:
b0:56:4a:51:f7:50:26:ee:be:9a:81:52:3e:2a:d7:91:37:30:
13:0f:24:a0:88:76:4b:5d:83:45:10:67:63:77:78:eb:1e:0d:
f6:a0:fc:07:0c:14:64:ac:3e:ee:03:6a:41:aa:b5:63:8e:50:
90:ef:9f:08:94:53:fb:ae:a6:02:45:05:81:b8:ec:07:b0:6f:
51:f7:58:de:20:f3:ab:51:2f:4f:f3:85:31:31:c2:63:fe:7d:
98:0e:34:13:4b:32:8b:eb:c1:bd:cb:6e:4f:51:8e:97:97:23:
e8:6f:07:ce:c8:2e:5e:69:ba:66:da:4b:68:ca:17:37:f2:cc:
4e:ee:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org