Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/710f321f-9320-3831-9e46-46e424940cc3.roa
File: 710f321f-9320-3831-9e46-46e424940cc3.roa (raw, json)
Hash identifier: 84K+Io5ekHbCDYtBOeUHXRGXex/mmGiU7dMSqCR4Kvk=
Subject key identifier: 3F:FA:58:CA:DE:1E:E6:A7:0A:6C:4B:F7:51:FD:BB:D7:E8:F0:08:06
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DC61ED2136F097FA98AB2E540
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/710f321f-9320-3831-9e46-46e424940cc3.roa
Signing time: Mon 02 May 2022 12:00:00 +0000
ROA not before: Mon 02 May 2022 12:00:00 +0000
ROA not after: Wed 03 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c6:1e:d2:13:6f:09:7f:a9:8a:b2:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 2 12:00:00 2022 GMT
Not After : May 3 04:00:00 2023 GMT
Subject: CN=d06838dd-a3c9-499c-9055-28af3a7d39a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:6c:e2:3d:47:18:d6:e3:fa:23:a2:5a:8a:
fc:96:eb:8e:e4:16:bb:ae:7c:99:63:01:90:a8:14:
03:89:77:d6:ba:8e:16:fd:6e:31:75:58:57:da:87:
6a:85:55:a6:79:ac:38:5c:29:e1:6c:83:e7:81:8a:
4b:1e:12:0b:31:d0:62:a0:d3:c9:29:4e:ed:4f:af:
3b:21:d5:07:49:31:4a:c7:6d:70:a4:87:a7:ae:7c:
a7:ba:f2:5f:96:9f:ea:af:80:b1:77:41:bf:50:b9:
fc:6a:db:21:c8:84:e2:9c:3a:30:52:ce:09:19:c4:
6e:81:58:8f:f6:a5:d6:08:ea:08:a2:75:a0:5a:2e:
ca:19:41:ee:aa:bb:fd:16:a1:27:65:c7:9e:50:e7:
24:8c:54:07:1e:6e:cf:22:0b:f8:ca:34:93:91:11:
c3:3e:74:0b:70:ff:79:78:df:2c:8b:e9:9d:97:a2:
80:ae:28:9e:1c:7c:2c:e3:be:d3:a3:24:98:ca:33:
0c:05:77:08:c5:7d:60:57:28:13:ac:cd:6d:2e:93:
ad:e1:21:a9:98:33:5a:b4:5b:8d:25:e5:ad:16:2b:
74:f5:b8:3f:f0:8a:c3:a6:cc:7e:c1:01:64:16:92:
e8:a7:f9:20:b1:b2:7e:66:ff:0c:ad:81:83:09:a5:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:58:CA:DE:1E:E6:A7:0A:6C:4B:F7:51:FD:BB:D7:E8:F0:08:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/710f321f-9320-3831-9e46-46e424940cc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:05:e7:c0:b6:d5:4b:32:61:98:5b:d2:f7:80:be:79:12:3b:
e8:13:d1:b2:da:b4:cb:33:4e:1d:2d:5b:da:f8:61:b5:bf:60:
d7:2d:3f:9d:97:eb:90:21:22:1f:33:99:b9:0f:9b:99:cb:c1:
41:6a:22:97:50:89:0a:44:91:3d:42:0f:7c:e4:04:22:0c:8c:
c3:35:4f:29:61:da:24:8b:c3:f8:12:4b:32:03:aa:d8:4d:25:
c9:3c:cc:a0:d0:0e:58:79:22:f7:9d:b3:73:99:3d:c1:61:08:
39:d8:4a:cc:2a:2a:97:8d:53:9e:4a:20:b7:7e:72:8e:ab:48:
2b:d3:14:81:86:ef:27:e1:b6:30:6e:44:69:40:63:b9:d6:1d:
ef:16:bd:dd:6b:e4:be:d3:50:37:7a:f7:bc:b5:64:e5:99:42:
39:2f:00:ca:df:4c:f5:aa:5e:43:f7:27:20:1b:ff:c3:8b:8c:
10:81:52:66:3a:d0:48:62:ac:3e:07:2f:a6:4a:67:e7:eb:35:
2c:ef:07:ad:49:69:f7:34:c5:b9:31:a9:38:8b:6b:ed:f0:47:
f1:cf:e4:ef:73:be:19:d3:fb:48:47:d4:23:7e:09:36:64:d7:
ff:02:01:cd:01:b5:96:b1:b6:e3:72:10:09:22:e0:3f:9f:45:
2c:b7:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org