Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7ad828fd-ce5e-3bc9-8c38-febb178b8b35.roa
File: 7ad828fd-ce5e-3bc9-8c38-febb178b8b35.roa (raw, json)
Hash identifier: LUI9ezbP/IVEHfjl9U5vp3CKx3NzwzoBBcaXDG/CAGI=
Subject key identifier: BB:A3:33:BA:48:C0:25:C7:77:B1:2B:3E:03:C9:C1:CF:83:3F:D2:52
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F17E959966554A90D53934100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7ad828fd-ce5e-3bc9-8c38-febb178b8b35.roa
Signing time: Wed 31 Aug 2022 12:00:00 +0000
ROA not before: Wed 31 Aug 2022 12:00:00 +0000
ROA not after: Fri 01 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:17:e9:59:96:65:54:a9:0d:53:93:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 31 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2023 GMT
Subject: CN=fe176015-78a0-47e3-a4da-e7ab1c18f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:92:93:f5:f7:b0:a8:eb:ec:a1:fd:41:cd:
3d:4d:1b:e3:db:db:1a:2a:c8:cb:16:25:d2:90:25:
9d:3b:f9:96:c5:c7:53:cc:e6:d1:36:e4:e1:da:63:
01:98:76:81:cc:af:c9:c5:a7:e1:a5:7a:42:52:9e:
4b:6f:bf:ec:d1:0f:79:aa:fb:f8:02:54:1a:7e:32:
6b:41:cd:d6:9a:6b:52:02:60:f2:2c:3c:88:c1:72:
39:5b:e8:6f:13:be:63:bd:64:a8:32:99:75:9a:57:
6e:1f:ff:16:b1:1b:18:66:7b:8c:bf:55:26:48:bb:
fb:8e:0d:af:4d:99:50:9d:1c:4f:f6:e4:d9:fd:d0:
65:36:5a:be:3a:f6:11:c7:ef:45:b9:0d:90:5f:19:
c3:fa:6d:b4:c5:0f:06:f0:6e:84:a6:92:d9:cc:08:
d3:bf:2f:af:0e:a1:73:21:bf:60:73:47:e9:19:89:
f0:fd:01:94:53:0e:8c:1d:62:00:e4:6b:0f:73:7e:
a0:1d:21:38:90:1a:8f:73:c4:98:fb:3b:c3:b5:fd:
31:af:ec:0a:96:b5:eb:f5:2d:46:27:ab:d9:47:1c:
16:c9:42:5d:df:13:66:db:05:21:2b:d2:fd:4d:97:
9e:77:6f:9a:57:fb:37:96:6e:d3:b8:24:87:b2:2e:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:33:BA:48:C0:25:C7:77:B1:2B:3E:03:C9:C1:CF:83:3F:D2:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7ad828fd-ce5e-3bc9-8c38-febb178b8b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:05:07:b9:d9:24:23:d9:21:9d:c1:94:4c:92:f6:ff:ec:a9:
33:cd:9c:ec:c2:9e:ba:be:c0:a0:12:49:d1:34:12:62:fc:98:
37:f6:ef:b5:1c:6b:c6:db:f1:e0:0c:38:2f:2e:0d:14:02:90:
98:c0:1a:52:d6:09:37:65:15:91:8a:ea:26:3f:c8:83:02:e4:
5d:e6:94:55:8c:45:7d:3a:00:5a:aa:ea:0b:a9:93:6c:56:7e:
a0:26:08:7c:28:66:c0:1e:c3:a7:1f:6f:23:eb:15:e2:e2:7d:
25:08:31:17:7e:f8:d7:12:fa:9b:ba:51:ab:2b:20:58:65:41:
8f:ac:ff:95:db:2e:5c:52:e3:3e:4c:92:46:3f:8c:be:9e:f2:
97:5e:cb:92:82:b0:33:a6:a7:a8:b8:0f:a7:89:f2:f3:0c:ce:
b7:6e:25:57:6f:00:31:a7:3a:0d:db:d6:99:e2:12:92:8a:bd:
4d:c1:86:cb:76:5d:f2:d6:5d:f9:9a:8a:43:de:88:30:4b:5b:
2a:9b:c8:61:0b:fd:b1:d1:7c:f8:45:5f:1d:4f:86:83:30:ce:
06:63:90:5c:11:e3:ff:53:db:b5:f5:04:c3:54:48:7f:85:19:
96:4b:a3:99:bd:5a:cb:7e:13:d1:c9:86:ba:72:d4:91:db:d5:
e6:1e:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org