Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/61512bca-e57d-328a-bf0a-bb99643c2950.roa
File: 61512bca-e57d-328a-bf0a-bb99643c2950.roa (raw, json)
Hash identifier: hHLKjgPkcnLjC9HRnCLHdulHE5GhwFcR0LjucTXGxbc=
Subject key identifier: 61:10:AF:A9:06:F9:EC:E1:36:7E:76:7E:35:F1:AD:CC:E9:AC:D5:92
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FE0EDF9CBB8C1BA85FD617480
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/61512bca-e57d-328a-bf0a-bb99643c2950.roa
Signing time: Fri 11 Nov 2022 12:00:00 +0000
ROA not before: Fri 11 Nov 2022 12:00:00 +0000
ROA not after: Sun 12 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e0:ed:f9:cb:b8:c1:ba:85:fd:61:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 11 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2023 GMT
Subject: CN=aa8f3520-a214-4dd4-b683-f7a17d2152fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:88:8e:02:d1:b8:12:25:28:e0:24:6c:10:
69:83:4d:98:b9:67:8a:f6:ef:01:0d:be:97:14:8f:
1f:ab:49:f5:49:f9:82:b1:4b:45:c1:34:e3:6b:43:
b3:78:dc:21:0f:e7:33:8f:6b:b8:69:98:6b:9b:f0:
a6:aa:d9:d2:77:f9:5d:45:a7:b6:8d:ce:22:16:ab:
db:53:cc:c0:56:fb:c7:e2:96:49:c1:47:00:56:3b:
2a:d2:1d:18:48:aa:77:d0:e0:21:36:be:c7:04:29:
f8:64:7e:ed:6f:bb:b7:3a:1c:c9:fc:d5:82:74:f6:
f6:53:9e:d6:b9:6b:37:0a:35:52:d4:6b:e9:41:56:
36:3d:7a:a4:ac:31:58:8b:6e:d1:45:aa:07:3e:a7:
40:ab:5f:c0:cd:71:f1:5f:91:54:57:4a:c7:8e:e8:
ab:44:fa:64:a9:85:a3:27:9d:e2:f6:86:81:90:8c:
bc:79:01:24:2f:02:3a:fb:a7:63:00:10:8c:3e:89:
92:5a:a7:16:c3:af:e5:5b:b2:45:67:c6:d2:a0:43:
01:90:aa:56:32:97:1a:fb:d8:88:50:b9:10:cc:e3:
64:78:7d:d9:fe:47:9b:8c:85:50:fb:c1:5a:51:1d:
5c:bf:9c:60:fb:6c:a6:e7:b4:13:4a:0c:73:29:a1:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:AF:A9:06:F9:EC:E1:36:7E:76:7E:35:F1:AD:CC:E9:AC:D5:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/61512bca-e57d-328a-bf0a-bb99643c2950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:13:9a:79:9f:2c:7e:8a:28:d5:c7:b7:44:d4:91:86:ce:01:
cb:e5:a8:db:bf:53:4d:07:46:65:9a:e6:a6:a3:73:53:96:6d:
2d:07:d0:78:5b:ae:4b:aa:0a:d6:e5:77:c4:5e:55:19:26:e3:
81:30:be:cb:f2:0e:f5:82:17:9d:64:57:17:2d:a8:26:36:c1:
79:c6:ef:cf:f7:d6:b5:61:81:3a:f4:b9:8a:cd:d1:a9:ae:5f:
9e:3e:a2:ac:f6:20:92:9c:62:5c:bf:6b:a1:ef:f1:be:b3:63:
24:70:7e:9b:b3:dd:96:1d:67:e9:74:fd:03:72:49:00:63:b6:
4b:82:aa:19:ec:6c:26:2f:61:4e:79:e4:fe:21:05:20:7e:b5:
24:c6:c5:6a:f1:bd:36:31:ae:ea:82:12:bd:3a:8c:93:f4:7c:
38:e4:40:a2:43:ae:2e:ef:b9:77:05:33:7d:61:56:3d:b8:80:
59:30:e7:0e:bc:5d:6d:7f:99:fd:cd:3a:f1:40:5a:58:f7:69:
03:86:95:18:ab:98:e2:fc:8a:0d:08:44:8b:b0:23:82:91:a6:
e2:d9:4d:07:8d:59:d8:4d:fd:a2:46:6e:c5:cb:6b:28:80:8d:
fe:86:99:34:bc:de:eb:63:30:e5:53:78:8d:7a:73:f2:18:5f:
ed:46:14:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/g7fnLuMG6hf1hdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTExMTEyMDAwMFoXDTIzMTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
YWE4ZjM1MjAtYTIxNC00ZGQ0LWI2ODMtZjdhMTdkMjE1MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoKIjgLRuBIlKOAkbBBpg02YuWeK9u8BDb6X
FI8fq0n1SfmCsUtFwTTja0OzeNwhD+czj2u4aZhrm/CmqtnSd/ldRae2jc4iFqvb
U8zAVvvH4pZJwUcAVjsq0h0YSKp30OAhNr7HBCn4ZH7tb7u3OhzJ/NWCdPb2U57W
uWs3CjVS1GvpQVY2PXqkrDFYi27RRaoHPqdAq1/AzXHxX5FUV0rHjuirRPpkqYWj
J53i9oaBkIy8eQEkLwI6+6djABCMPomSWqcWw6/lW7JFZ8bSoEMBkKpWMpca+9iI
ULkQzONkeH3Z/kebjIVQ+8FaUR1cv5xg+2ym57QTSgxzKaES9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEQr6kG+ezhNn52fjXxrczprNWSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNjE1MTJiY2EtZTU3ZC0z
MjhhLWJmMGEtYmI5OTY0M2MyOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsTmnmfLH6KKNXHt0TUkYbOAcvlqNu/U00HRmWa5qajc1OWbS0H0Hhb
rkuqCtbld8ReVRkm44EwvsvyDvWCF51kVxctqCY2wXnG78/31rVhgTr0uYrN0amu
X54+oqz2IJKcYly/a6Hv8b6zYyRwfpuz3ZYdZ+l0/QNySQBjtkuCqhnsbCYvYU55
5P4hBSB+tSTGxWrxvTYxruqCEr06jJP0fDjkQKJDri7vuXcFM31hVj24gFkw5w68
XW1/mf3NOvFAWlj3aQOGlRirmOL8ig0IRIuwI4KRpuLZTQeNWdhN/aJGbsXLayiA
jf6GmTS83utjMOVTeI16c/IYX+1GFEc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org