Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/760fc624-ea70-3cdc-83f9-1609fcd39ba4.roa
File: 760fc624-ea70-3cdc-83f9-1609fcd39ba4.roa (raw, json)
Hash identifier: RJMNfYXtIx13gIfBE3gk8Wjh7mdLkfwVQVIMXGl/uOg=
Subject key identifier: 90:F5:0F:76:80:35:08:60:65:57:C9:F3:B0:A7:CD:26:F7:AC:5B:C7
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D5C221D75EE0FDD6C6A090E00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/760fc624-ea70-3cdc-83f9-1609fcd39ba4.roa
Signing time: Sat 26 Mar 2022 04:00:00 +0000
ROA not before: Sat 26 Mar 2022 04:00:00 +0000
ROA not after: Sun 26 Mar 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5c:22:1d:75:ee:0f:dd:6c:6a:09:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 26 04:00:00 2022 GMT
Not After : Mar 26 04:00:00 2023 GMT
Subject: CN=46544fea-ba95-4fbc-91ce-7f18e31d78d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:80:17:9a:81:28:70:ea:c5:94:a4:91:57:
42:6b:19:8b:0e:65:86:86:5e:ca:fa:31:de:c8:24:
17:0b:8c:4b:a3:f0:2d:11:91:82:83:c4:4c:7b:bd:
e8:a9:2f:80:4c:c6:8f:23:64:df:e7:22:95:12:2d:
64:19:6a:36:45:6b:4c:54:13:8e:92:43:ef:c9:44:
0b:63:34:27:fa:81:62:ba:87:2d:15:e3:6b:f9:47:
dc:cb:c3:87:f4:0f:e7:fb:c7:b0:7c:de:2c:8a:36:
61:57:2d:8a:c0:06:a5:97:04:a5:3c:a9:18:b5:07:
84:3c:3a:be:c2:4f:0f:6e:89:fc:39:04:bc:dc:68:
5e:09:f8:fb:b4:5c:bd:7a:4b:a1:48:d4:28:89:31:
2a:dd:51:5a:62:3a:54:25:f5:42:7c:c9:21:22:52:
97:28:ab:6e:f3:0d:7a:f5:1e:24:cb:c3:9e:26:6f:
5c:b6:90:3b:cd:47:ec:44:46:0c:e7:cc:53:15:3b:
0b:45:1f:a6:2b:07:b8:fd:b5:cd:fa:ce:9f:bd:99:
b4:c3:aa:1f:41:a5:28:0a:6b:55:b1:4a:44:c7:71:
55:28:21:37:0a:ee:99:4a:e2:10:ad:11:06:95:9d:
66:2c:5c:5c:49:d6:c8:9a:ca:03:a6:49:48:00:d0:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F5:0F:76:80:35:08:60:65:57:C9:F3:B0:A7:CD:26:F7:AC:5B:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/760fc624-ea70-3cdc-83f9-1609fcd39ba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:4c:6f:af:78:26:69:83:28:47:cd:a0:81:50:74:bb:ee:37:
de:66:13:de:50:3f:3d:98:53:c7:20:bb:b8:54:8c:7b:58:1d:
ae:1f:f3:10:5c:dd:1c:70:b4:ad:7f:87:99:4e:a8:bc:f8:82:
b8:11:1d:3b:f8:73:06:a0:e0:07:0f:ee:c9:64:85:37:40:6b:
bf:8b:8b:70:69:d0:40:6c:99:42:90:60:e7:1f:b5:73:a0:f5:
23:ec:3b:7c:cb:a3:8f:09:d0:cf:c8:c8:85:00:73:aa:88:0a:
84:c5:39:d2:9e:c2:fd:74:3c:69:8d:4f:a7:c7:3b:10:25:f8:
a9:76:eb:c7:fa:54:64:e0:5d:d8:33:23:13:0a:c0:c6:76:b4:
45:54:ac:0e:64:c9:d5:fc:75:9f:af:6d:8c:34:f0:cf:5c:d0:
ad:49:a3:38:c3:de:40:92:73:4b:c4:d3:da:55:4e:80:51:f5:
19:8c:0a:be:55:27:1e:3a:f0:df:4d:4d:da:7f:98:e1:af:55:
1a:a4:a5:91:ae:d6:86:90:d0:71:ec:9b:9e:37:6c:62:2d:50:
45:79:35:88:d9:8e:11:a1:65:8e:a4:a8:f2:21:db:06:dc:a9:
f4:ac:18:49:92:79:c3:46:22:de:3f:af:f7:8a:d4:a3:91:d4:
8a:00:85:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1cIh117g/dbGoJDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDMyNjA0MDAwMFoXDTIzMDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDY1NDRmZWEtYmE5NS00ZmJjLTkxY2UtN2YxOGUzMWQ3OGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX6AF5qBKHDqxZSkkVdCaxmLDmWGhl7K+jHe
yCQXC4xLo/AtEZGCg8RMe73oqS+ATMaPI2Tf5yKVEi1kGWo2RWtMVBOOkkPvyUQL
YzQn+oFiuoctFeNr+Ufcy8OH9A/n+8ewfN4sijZhVy2KwAallwSlPKkYtQeEPDq+
wk8Pbon8OQS83GheCfj7tFy9ekuhSNQoiTEq3VFaYjpUJfVCfMkhIlKXKKtu8w16
9R4ky8OeJm9ctpA7zUfsREYM58xTFTsLRR+mKwe4/bXN+s6fvZm0w6ofQaUoCmtV
sUpEx3FVKCE3Cu6ZSuIQrREGlZ1mLFxcSdbImsoDpklIANBEPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJD1D3aANQhgZVfJ87CnzSb3rFvHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNzYwZmM2MjQtZWE3MC0z
Y2RjLTgzZjktMTYwOWZjZDM5YmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9Mb694JmmDKEfNoIFQdLvuN95mE95QPz2YU8cgu7hUjHtYHa4f8xBc
3RxwtK1/h5lOqLz4grgRHTv4cwag4AcP7slkhTdAa7+Li3Bp0EBsmUKQYOcftXOg
9SPsO3zLo48J0M/IyIUAc6qICoTFOdKewv10PGmNT6fHOxAl+Kl268f6VGTgXdgz
IxMKwMZ2tEVUrA5kydX8dZ+vbYw08M9c0K1JozjD3kCSc0vE09pVToBR9RmMCr5V
Jx468N9NTdp/mOGvVRqkpZGu1oaQ0HHsm543bGItUEV5NYjZjhGhZY6kqPIh2wbc
qfSsGEmSecNGIt4/r/eK1KOR1IoAhQE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org