Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/87a8af03-6b56-39a5-8edc-e0409c685855.roa
File: 87a8af03-6b56-39a5-8edc-e0409c685855.roa (raw, json)
Hash identifier: FZPZRSylQ5SUfkaUYnwDFlpN0bQHVf+rOvJWPVJJcA0=
Subject key identifier: 6E:A4:AB:FD:99:D6:3C:AE:01:65:7A:53:7E:F1:63:31:03:54:E3:5F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D2C9E12A78AE11615E7D00340
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/87a8af03-6b56-39a5-8edc-e0409c685855.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2c:9e:12:a7:8a:e1:16:15:e7:d0:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=e15ccc8d-b35c-4ca0-83c0-8809222cf7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:34:95:af:84:2b:80:38:44:f3:b1:5f:cb:
6e:7c:b0:d6:f9:3f:74:f9:a1:0f:9d:72:7a:4c:c7:
5d:45:85:39:85:4b:14:f8:d3:08:74:e9:7e:28:40:
d9:55:41:6d:51:3b:1d:a7:92:1f:5c:ba:86:fb:b5:
8e:98:86:61:18:f4:32:da:b4:72:c2:c6:13:16:70:
09:a7:bb:c2:0e:af:e1:21:2a:51:c4:e4:1b:16:01:
26:33:d8:92:77:a1:d2:ac:d5:fc:71:75:b2:71:a4:
44:fe:56:36:05:93:fa:91:61:c7:8d:58:19:8d:7a:
e2:07:39:35:ac:2f:d5:12:16:ed:f8:a7:5f:80:c5:
d1:a9:0e:eb:34:ee:53:cc:70:94:e0:b5:e4:3d:79:
74:02:41:52:60:14:4a:cc:60:75:90:b7:45:91:c1:
34:f5:16:cf:ab:be:c3:05:c9:99:88:72:c4:f0:d9:
72:47:51:76:ca:0c:56:d4:c0:09:cc:ce:d3:47:ec:
d6:29:b4:53:96:1e:ed:54:ad:c2:85:d5:f5:54:41:
85:ff:9f:aa:b9:68:75:27:a3:de:4c:eb:02:d4:b0:
cb:0f:24:00:d9:9b:b4:47:71:c2:a3:90:ba:35:d1:
79:a0:bd:d2:19:0f:5a:e9:52:d9:89:b1:05:33:cd:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A4:AB:FD:99:D6:3C:AE:01:65:7A:53:7E:F1:63:31:03:54:E3:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/87a8af03-6b56-39a5-8edc-e0409c685855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a7:59:85:d8:3c:65:a4:05:73:fa:6f:d7:19:b7:c6:45:0f:
97:d1:e6:96:b0:87:78:8c:a5:bf:6c:ee:fe:dc:9a:97:e1:e7:
1c:08:87:0d:f3:d6:44:40:95:b4:30:98:2e:bc:1c:7d:8a:6e:
28:67:e7:18:5d:e2:e0:c8:87:94:f9:ac:aa:58:44:d8:36:79:
ca:c6:c4:40:20:39:9f:d4:a3:51:06:73:e8:bf:ef:33:17:09:
d1:c9:c7:ac:06:00:47:d7:71:9f:ae:0d:3e:8d:4a:be:e7:6b:
af:e6:de:48:38:5f:ba:39:16:f1:53:dc:08:e0:aa:e2:6f:34:
7e:d4:88:09:b7:3a:78:4a:4d:e1:57:c0:44:5a:9e:a7:1e:1f:
6c:a5:91:ba:0d:0e:9e:40:bc:06:49:aa:69:90:33:fa:d9:be:
f3:5a:86:1b:6d:f1:4f:10:f7:25:e1:76:a6:39:83:c9:14:fb:
03:25:9e:46:91:46:b5:5c:da:1b:be:59:c4:9d:3e:96:d0:e4:
58:7a:95:84:b2:28:bd:87:a4:07:8a:e7:d0:f6:62:ba:b1:0d:
16:81:5b:9e:57:f0:a0:7e:72:2e:f1:12:f3:63:19:a5:5f:6c:
f8:13:c8:cf:66:9d:9e:b0:4c:29:a5:93:b0:7a:29:70:64:a3:
f8:82:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:51 2023 by rpki-client on console-fra.rpki-client.org