Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/711ffac2-617e-31cd-9271-b23c0579ceaa.roa
File: 711ffac2-617e-31cd-9271-b23c0579ceaa.roa (raw, json)
Hash identifier: svzruKdlblyWbAfGOExDx9eZf1RY+po5GrV1xRuogJY=
Subject key identifier: 0D:91:EF:48:C6:2B:B0:CC:92:CE:BC:7D:FB:8E:0A:48:3C:A9:D9:13
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858404B4AC17618A9340E1D54CF80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/711ffac2-617e-31cd-9271-b23c0579ceaa.roa
Signing time: Mon 19 Dec 2022 12:00:00 +0000
ROA not before: Mon 19 Dec 2022 12:00:00 +0000
ROA not after: Wed 20 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:4a:c1:76:18:a9:34:0e:1d:54:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 19 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2023 GMT
Subject: CN=71be8015-292e-4e06-831e-8555a5be8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:67:6c:ae:e7:48:9f:ca:45:1b:a4:ef:8e:
e5:82:9b:a2:08:9d:98:2a:fd:aa:52:2f:18:e7:a8:
c7:b2:0a:d9:e9:13:da:3c:43:b7:6e:b2:53:d5:dc:
af:4a:0f:3e:f7:61:1f:a3:00:ba:7b:21:3d:05:1b:
5a:b1:b1:c4:4a:98:76:54:d9:9f:db:d7:03:3e:1e:
23:8a:ea:4b:12:77:4a:bb:e0:a0:bf:84:79:f3:7e:
65:e8:fe:5b:12:de:b7:59:e5:a4:10:21:19:6c:2c:
88:03:00:f4:25:be:07:b7:5c:89:ba:89:a4:6e:35:
70:32:b2:58:ba:44:d4:c0:77:4d:84:92:58:3e:6f:
c1:9b:a6:f6:d3:b8:d9:ef:9b:10:4b:41:f6:50:da:
96:bf:37:3c:f4:a4:a1:50:ec:b0:5f:2f:ea:ea:75:
eb:fe:e6:0c:c3:3b:1e:18:38:a8:8e:19:24:d1:cc:
d4:0c:21:a4:8b:0f:28:37:2e:67:09:30:a8:40:8f:
25:d6:d7:c2:0d:d9:a5:99:96:14:83:34:16:80:64:
c4:06:ba:a4:92:0b:84:ed:7e:48:d6:88:67:22:39:
3c:95:d2:23:b6:16:d4:ca:04:4a:39:aa:21:dd:20:
cc:6a:5d:d4:49:c2:fb:23:7a:4d:f0:77:3f:97:4c:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:EF:48:C6:2B:B0:CC:92:CE:BC:7D:FB:8E:0A:48:3C:A9:D9:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/711ffac2-617e-31cd-9271-b23c0579ceaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:3b:d7:4f:e9:24:09:fe:d5:06:4d:6c:cb:23:64:4f:c2:de:
be:5c:ff:e9:07:49:62:a7:2c:18:24:6d:24:fb:fa:59:ee:b1:
22:91:1b:42:0f:38:54:17:2d:50:df:56:b3:9f:7d:44:87:1f:
96:61:ff:67:4f:a3:c7:60:dc:b1:42:82:e9:44:04:8c:40:ac:
35:b1:2e:7d:be:0e:c2:ef:3c:3c:8e:db:82:22:d7:0d:2b:98:
29:b0:e3:45:6b:6c:7d:3d:e4:5e:a1:5f:1e:d2:ed:5d:fb:77:
16:1e:8a:52:80:28:4b:f6:34:41:3d:a9:65:f8:32:2b:f7:9b:
a9:bd:fa:27:25:fc:32:74:3f:c5:d7:31:9e:3b:e4:d9:1d:23:
a7:3e:2b:c6:05:52:a1:de:d3:8e:5e:ec:d7:c3:fe:ec:06:81:
2a:12:b4:fc:1f:17:ee:5d:d2:13:31:d1:85:08:9a:1d:92:a0:
75:64:6b:37:ce:fa:ae:08:84:74:a1:b3:8c:43:4f:49:c8:d8:
19:09:33:e6:5a:23:8c:08:fe:84:b7:e8:a2:34:87:a7:70:82:
45:8d:62:02:50:dd:d7:a8:c0:62:33:4c:af:dd:ad:f3:da:bf:
d9:e6:e9:51:ea:5c:ec:98:0e:f9:71:98:d3:a9:d7:7e:9b:71:
6e:1d:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org