Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7bf07c12-0591-35fa-a719-38a75555efc6.roa
File: 7bf07c12-0591-35fa-a719-38a75555efc6.roa (raw, json)
Hash identifier: tyWxi0ifwEVxZPYYdnQXx/7FUo5SrJ92u9XRwWFzKV0=
Subject key identifier: 71:9D:7A:5F:67:47:2A:AC:65:C6:56:65:04:DE:BB:2A:F5:85:C3:5D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CC8187E34F61CE36F07769240
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7bf07c12-0591-35fa-a719-38a75555efc6.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:18:7e:34:f6:1c:e3:6f:07:76:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=5552bd28-5679-4ab4-bf7d-857229335f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:d0:ac:22:87:6b:e9:8a:a1:2c:75:07:f4:
20:a3:90:49:8f:18:31:ae:6b:36:1e:47:28:0b:b1:
b3:81:03:0c:ac:1e:42:62:7a:07:a7:c5:7a:79:c2:
2c:a0:14:36:e8:ed:eb:51:06:cb:61:9c:16:08:b6:
b0:29:23:23:9a:ea:c5:59:89:2f:67:15:20:6e:28:
6a:9f:a0:bb:52:72:bc:5b:e3:4e:2d:79:38:b2:03:
9d:2c:1c:c4:47:dd:64:4d:d7:e1:8b:89:43:03:76:
6c:80:1d:4b:d2:c7:ae:99:1f:f4:5b:43:a7:c4:d5:
f2:48:20:f4:2a:4c:04:23:0d:38:3e:ea:e6:c7:dd:
50:35:8d:75:65:cd:93:bf:d0:ff:3a:85:e9:3d:6f:
45:52:24:25:85:64:5e:39:4b:c3:14:e7:e5:11:15:
7a:64:20:58:44:2d:7e:4a:79:78:81:c3:ea:ed:5d:
3f:a2:69:af:57:f5:81:06:e2:d4:a8:1c:ad:9a:76:
33:61:fd:6a:b1:da:d7:49:ab:8e:05:34:11:dd:22:
0d:61:68:e4:d5:e2:8f:95:bf:86:af:b8:4b:e7:30:
b0:dc:19:01:fe:ad:c4:ef:be:5c:3e:d7:8b:08:f8:
b5:04:a0:ad:05:d2:0e:8b:2b:82:6e:8f:d4:23:2f:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:7A:5F:67:47:2A:AC:65:C6:56:65:04:DE:BB:2A:F5:85:C3:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7bf07c12-0591-35fa-a719-38a75555efc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:0e:c4:52:4e:b3:77:58:57:e5:cf:18:12:b7:40:11:68:84:
48:bc:5e:5d:04:77:14:79:e9:ac:be:ad:cd:68:4b:12:ae:a0:
89:7d:5f:fc:8e:33:5e:4f:76:d1:89:0b:57:cd:e4:1a:13:d7:
86:75:c4:ba:17:0f:b5:a5:52:bb:0d:a5:bb:4e:3d:fe:64:90:
92:00:eb:ae:24:9d:7d:9f:c5:71:cb:44:02:c1:00:b3:b1:a8:
ca:21:9b:89:ae:72:05:9c:e6:4c:5a:00:fb:e5:6a:0e:89:b6:
50:43:3d:ea:4e:ca:c3:75:cc:c7:f5:07:fa:ff:2a:5d:62:8e:
91:af:03:3a:d7:2a:39:a6:33:17:e5:0c:09:84:71:3b:7a:78:
2d:8b:e0:b1:de:28:17:de:b3:c1:cc:20:cd:a5:5f:20:07:19:
d1:74:34:33:0c:a7:93:9d:2a:46:9f:20:10:31:66:a2:bd:46:
3a:7a:25:5d:b2:e3:42:10:f4:7f:77:e8:a7:93:c5:e2:d4:77:
00:19:7f:ea:b1:bb:8e:3f:9f:b4:eb:55:72:cc:3f:e1:a2:22:
72:72:15:e6:c2:0a:3c:f2:8f:ad:77:4b:88:63:da:a7:07:6f:
e5:4c:34:c4:c4:1b:e2:0a:a3:14:55:ea:ad:55:07:08:7c:77:
2a:73:a8:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzIGH409hzjbwd2kkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDIwMTA1MDAwMFoXDTIzMDIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NTU1MmJkMjgtNTY3OS00YWI0LWJmN2QtODU3MjI5MzM1Zjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknzQrCKHa+mKoSx1B/Qgo5BJjxgxrms2Hkco
C7GzgQMMrB5CYnoHp8V6ecIsoBQ26O3rUQbLYZwWCLawKSMjmurFWYkvZxUgbihq
n6C7UnK8W+NOLXk4sgOdLBzER91kTdfhi4lDA3ZsgB1L0seumR/0W0OnxNXySCD0
KkwEIw04Purmx91QNY11Zc2Tv9D/OoXpPW9FUiQlhWReOUvDFOflERV6ZCBYRC1+
Snl4gcPq7V0/ommvV/WBBuLUqBytmnYzYf1qsdrXSauOBTQR3SINYWjk1eKPlb+G
r7hL5zCw3BkB/q3E775cPteLCPi1BKCtBdIOiyuCbo/UIy8f/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGdel9nRyqsZcZWZQTeuyr1hcNdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvN2JmMDdjMTItMDU5MS0z
NWZhLWE3MTktMzhhNzU1NTVlZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAOxFJOs3dYV+XPGBK3QBFohEi8Xl0EdxR56ay+rc1oSxKuoIl9X/yO
M15PdtGJC1fN5BoT14Z1xLoXD7WlUrsNpbtOPf5kkJIA664knX2fxXHLRALBALOx
qMohm4mucgWc5kxaAPvlag6JtlBDPepOysN1zMf1B/r/Kl1ijpGvAzrXKjmmMxfl
DAmEcTt6eC2L4LHeKBfes8HMIM2lXyAHGdF0NDMMp5OdKkafIBAxZqK9Rjp6JV2y
40IQ9H936KeTxeLUdwAZf+qxu44/n7TrVXLMP+GiInJyFebCCjzyj613S4hj2qcH
b+VMNMTEG+IKoxRV6q1VBwh8dypzqOY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org