Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5f260175-2985-3ef5-91d5-d5cf9837a4e7.roa
File: 5f260175-2985-3ef5-91d5-d5cf9837a4e7.roa (raw, json)
Hash identifier: 0Ttg1luF6XAJ95Wy8cZvNasyLZ2GWk9PuZsDTA3HCZ4=
Subject key identifier: A4:5E:21:53:61:B3:5E:6D:1E:B2:C0:BE:35:B3:C6:1C:87:F0:23:02
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CE6F095E4495078D0B10E2880
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5f260175-2985-3ef5-91d5-d5cf9837a4e7.roa
Signing time: Sat 12 Feb 2022 05:00:00 +0000
ROA not before: Sat 12 Feb 2022 05:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e6:f0:95:e4:49:50:78:d0:b1:0e:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 12 05:00:00 2022 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=e552e932-d4c5-4920-be27-322464275923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:3b:7b:d1:e6:84:e2:40:35:94:13:bf:4e:
31:28:0b:e0:fe:ad:3f:6c:4c:21:9a:be:3a:e9:45:
1d:98:65:f2:fb:e1:ec:ca:b3:58:65:f4:53:d3:d5:
01:c0:ce:00:dc:e6:f0:39:06:cb:59:c1:f5:4c:68:
15:06:80:ef:65:ac:81:28:d4:c8:9f:57:c7:6f:39:
9b:7a:31:34:6d:44:14:e2:c3:9e:32:55:51:c6:b2:
39:2b:0c:1f:e9:3d:2c:3e:23:aa:5d:11:bd:9c:bc:
98:2d:74:84:18:b2:fe:e2:a9:4e:a4:dc:ba:6c:c3:
2e:43:18:69:d7:67:1f:30:8a:1c:45:9f:8b:44:54:
2f:84:5a:4a:80:0d:9b:0a:43:ae:85:c3:ce:bc:c0:
b0:11:92:11:53:8d:4f:b4:51:20:ae:9a:a6:3e:b5:
b9:e2:96:3b:2f:4b:11:be:58:28:eb:2b:d1:fa:c8:
a2:2e:a6:f7:de:4a:8d:9e:a5:30:80:f0:12:e4:26:
79:58:93:5e:f6:61:d2:11:ad:37:d5:68:87:8c:a3:
97:38:27:b4:b3:5d:d7:41:7e:d0:ed:4d:7c:48:e2:
38:dc:52:f4:10:c7:1a:cc:31:e3:a5:10:bb:77:15:
ed:5e:5f:81:78:54:59:25:d2:c7:e6:da:d8:b9:24:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:21:53:61:B3:5E:6D:1E:B2:C0:BE:35:B3:C6:1C:87:F0:23:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5f260175-2985-3ef5-91d5-d5cf9837a4e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e7:75:62:8c:70:bf:16:f8:06:cc:9a:b8:c5:66:06:d6:28:
8c:63:a1:17:21:ab:13:25:a0:04:3b:44:8f:61:3b:d4:b4:7f:
46:98:77:55:33:22:76:38:cc:d7:7f:f5:91:93:f6:13:72:32:
9f:1d:17:49:9d:84:e4:b1:a6:09:1f:4d:ac:a9:ab:fb:63:9e:
4b:cc:b6:61:0d:4c:2c:7b:e4:d6:72:16:cc:fb:46:f1:e3:84:
19:46:ef:8f:2d:2e:23:96:dc:30:7b:d0:73:f8:45:3b:7e:0c:
b8:1d:d5:6f:94:e4:ca:34:94:54:f9:68:34:ed:2e:a4:6d:04:
83:26:da:dc:a4:c1:f9:8d:8e:f2:d4:8c:16:10:31:0c:f1:ee:
e2:d3:41:94:7a:b6:78:fd:72:28:19:47:26:f6:86:48:f8:08:
bb:4f:72:02:07:62:49:46:6e:b5:7c:12:61:f4:39:d6:6e:65:
cb:bb:67:a5:71:da:b4:91:a4:69:e1:ea:2b:cf:72:83:90:56:
cc:0b:f5:e9:7d:f9:75:ac:09:8f:d9:82:07:06:3c:02:b3:36:
dc:3b:50:31:2a:c0:2b:67:ac:e5:7a:2f:f6:ea:fb:3a:0e:19:
8d:e5:cd:f8:ca:8d:6e:09:7f:ff:34:4c:fe:32:c0:e4:84:b0:
19:65:63:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzm8JXkSVB40LEOKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDIxMjA1MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTU1MmU5MzItZDRjNS00OTIwLWJlMjctMzIyNDY0Mjc1OTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvQ7e9HmhOJANZQTv04xKAvg/q0/bEwhmr46
6UUdmGXy++HsyrNYZfRT09UBwM4A3ObwOQbLWcH1TGgVBoDvZayBKNTIn1fHbzmb
ejE0bUQU4sOeMlVRxrI5Kwwf6T0sPiOqXRG9nLyYLXSEGLL+4qlOpNy6bMMuQxhp
12cfMIocRZ+LRFQvhFpKgA2bCkOuhcPOvMCwEZIRU41PtFEgrpqmPrW54pY7L0sR
vlgo6yvR+siiLqb33kqNnqUwgPAS5CZ5WJNe9mHSEa031WiHjKOXOCe0s13XQX7Q
7U18SOI43FL0EMcazDHjpRC7dxXtXl+BeFRZJdLH5trYuSSEywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKReIVNhs15tHrLAvjWzxhyH8CMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNWYyNjAxNzUtMjk4NS0z
ZWY1LTkxZDUtZDVjZjk4MzdhNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTndWKMcL8W+AbMmrjFZgbWKIxjoRchqxMloAQ7RI9hO9S0f0aYd1Uz
InY4zNd/9ZGT9hNyMp8dF0mdhOSxpgkfTaypq/tjnkvMtmENTCx75NZyFsz7RvHj
hBlG748tLiOW3DB70HP4RTt+DLgd1W+U5Mo0lFT5aDTtLqRtBIMm2tykwfmNjvLU
jBYQMQzx7uLTQZR6tnj9cigZRyb2hkj4CLtPcgIHYklGbrV8EmH0OdZuZcu7Z6Vx
2rSRpGnh6ivPcoOQVswL9el9+XWsCY/ZggcGPAKzNtw7UDEqwCtnrOV6L/bq+zoO
GY3lzfjKjW4Jf/80TP4ywOSEsBllYyE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org