Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8e26050b-7b10-3450-b05c-0dcec839a61b.roa
File: 8e26050b-7b10-3450-b05c-0dcec839a61b.roa (raw, json)
Hash identifier: mjtelHqT1JnyJJevS0fGN/nCublfOFq90twj2ALeU2Y=
Subject key identifier: E2:74:AB:64:9F:34:AB:C5:AA:3F:14:62:7D:C2:E7:3D:4E:F2:72:41
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E6AD6E4B2957F2C9563081D90
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8e26050b-7b10-3450-b05c-0dcec839a61b.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Sat 01 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6a:d6:e4:b2:95:7f:2c:95:63:08:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Jul 1 04:00:00 2023 GMT
Subject: CN=2d143970-be6b-4cd0-84c9-1f986b44a113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:ee:a0:07:dd:d2:8e:e4:18:81:26:07:af:
0e:d2:f6:78:f9:7b:b3:97:89:35:09:d8:10:72:42:
b1:3a:0c:09:09:7a:6d:92:f4:da:30:4f:e3:1d:cd:
23:61:9f:1e:b7:8e:22:29:d2:90:e7:fc:6b:2f:03:
e6:a9:47:95:26:86:e9:03:2c:38:fe:a0:7c:c3:50:
e0:de:7c:39:94:27:32:18:01:8d:7b:fa:2c:07:70:
24:3a:48:0b:53:a3:c5:41:3a:9c:08:9f:d7:1e:6e:
40:1c:5e:0e:6a:25:72:d6:25:fc:13:84:93:a7:c9:
f2:09:60:67:41:55:29:f7:3c:c8:27:3d:a4:ec:0d:
10:48:16:f9:ca:af:37:60:e4:43:fa:84:b5:7c:e9:
57:0f:87:1d:e3:3f:6e:83:9d:b7:1e:62:27:ba:8b:
ea:01:7e:23:cf:ff:4b:73:ef:a0:71:9f:e9:e9:31:
16:82:f8:76:db:c3:ed:dd:28:86:f7:e4:18:c9:10:
db:f4:d3:5c:48:69:2c:87:0b:18:3d:a9:2e:44:44:
69:84:8c:0b:77:5a:1a:e6:e3:45:88:19:3f:fa:3b:
76:3f:2a:5a:58:78:d6:1b:4b:ca:db:4d:14:4e:f6:
21:a5:0b:88:5b:2d:c2:74:56:ea:61:a9:e0:24:e8:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:AB:64:9F:34:AB:C5:AA:3F:14:62:7D:C2:E7:3D:4E:F2:72:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8e26050b-7b10-3450-b05c-0dcec839a61b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ed:c4:ea:93:02:d1:3c:69:7d:0d:63:d0:54:53:93:db:c9:
51:25:1a:a7:70:1b:ce:59:9a:ab:77:a8:2d:51:70:f1:97:d8:
eb:c3:fd:c6:41:5b:cd:5c:b8:69:40:91:09:4d:68:90:f6:46:
a0:bb:0b:f9:40:bd:d8:71:df:c3:81:44:77:16:36:cf:bd:d4:
ad:43:f4:4f:a0:b5:1d:f2:14:88:1b:22:f6:22:b6:e5:7c:5d:
fe:53:80:5f:66:2b:3d:48:04:92:20:de:fa:dc:db:4a:7c:d2:
4d:f7:f2:b9:a9:1a:94:d9:19:97:f3:dd:c9:7f:41:30:fb:22:
59:9e:53:26:46:9d:5e:75:e9:36:d3:c8:b9:fe:47:87:9f:6c:
b7:25:3a:f1:ab:ff:c5:45:26:73:ee:52:b9:d7:01:e5:49:79:
c2:ba:ee:d7:dd:63:57:7c:bb:0b:e4:cc:f8:c5:56:e1:32:22:
80:c2:76:2b:ac:83:83:77:d0:32:90:1d:85:f3:1f:a4:b8:9b:
1c:62:e8:6a:69:b2:3e:ad:5d:20:03:61:4d:56:d1:f1:04:cb:
b2:1e:72:45:ee:2f:b5:f1:c2:09:40:c2:6d:26:54:a5:c7:86:
a6:63:6e:21:7d:23:d3:c9:c4:db:5f:ff:00:62:9b:a9:58:f7:
42:41:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org