Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/90b9878b-cb7b-3f90-b1d4-933dc4e89ea6.roa
File: 90b9878b-cb7b-3f90-b1d4-933dc4e89ea6.roa (raw, json)
Hash identifier: b9DOvTbMlmThPk1ie5Qx/w2OvfiQiATMxkmFJ5ukop0=
Subject key identifier: A5:4E:7D:8C:C4:6C:36:15:2F:81:29:3F:98:C2:F7:CF:A6:F7:D8:81
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D23FEBCEC41D1DB9F9F8AEB80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/90b9878b-cb7b-3f90-b1d4-933dc4e89ea6.roa
Signing time: Sun 06 Mar 2022 05:00:00 +0000
ROA not before: Sun 06 Mar 2022 05:00:00 +0000
ROA not after: Mon 06 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:23:fe:bc:ec:41:d1:db:9f:9f:8a:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 6 05:00:00 2022 GMT
Not After : Mar 6 05:00:00 2023 GMT
Subject: CN=584057fd-84cd-44e2-bffa-c54a42057cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:b8:90:86:f9:e0:8c:79:91:51:db:b6:31:
7a:97:4c:50:50:77:f4:bd:11:6d:7b:1f:83:94:81:
46:bd:f3:3e:ce:f1:18:af:05:41:2a:0e:20:4f:c3:
1b:09:15:12:57:f3:64:6a:96:14:b5:2b:6e:46:1e:
ca:e2:32:a0:70:05:a4:8b:f5:de:0b:d8:2d:e8:96:
0e:0a:48:29:ce:ad:31:88:1a:27:b1:34:02:f6:a3:
6d:98:28:c8:2b:01:06:cf:f1:33:00:40:88:9f:3f:
17:54:e0:5a:80:65:d5:c6:49:a8:26:19:9d:46:15:
88:fb:06:46:db:7e:5d:0a:e5:f6:63:dd:3a:35:d8:
c8:f2:3e:9d:20:f1:af:ad:5f:21:d9:24:8f:9c:88:
64:92:a7:b2:39:d4:70:71:74:7b:78:57:ab:36:a8:
05:b7:32:01:7b:8b:ba:00:34:73:12:0f:ee:06:19:
41:55:42:06:93:08:3c:cc:8c:23:13:0a:5d:95:c5:
c2:81:cf:47:0d:d0:02:f0:3e:c8:d5:62:a3:d2:1d:
4e:5a:eb:47:b4:b6:21:5c:7f:7e:27:8f:1d:c8:68:
5b:24:4e:a6:80:37:b2:a6:90:62:6f:ef:c1:d2:54:
b5:5b:84:a7:bc:75:59:95:4e:7c:b4:37:b5:ac:23:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4E:7D:8C:C4:6C:36:15:2F:81:29:3F:98:C2:F7:CF:A6:F7:D8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/90b9878b-cb7b-3f90-b1d4-933dc4e89ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:01:17:f5:67:ff:04:d5:60:c5:67:0d:f9:5d:e1:73:7f:79:
e8:4f:0c:4b:d1:27:a3:9c:94:71:01:4b:14:1c:4d:90:3e:5b:
1e:6a:4a:d0:67:86:65:ce:20:45:5c:df:31:c2:1d:cf:2a:20:
a0:04:88:78:65:f6:33:b3:73:a3:f7:ec:85:93:12:61:be:f7:
17:63:b6:75:24:06:a9:e2:88:18:51:31:0f:de:68:fd:01:8e:
08:3f:88:80:b4:73:f7:de:e3:af:23:1e:03:9e:dd:a9:e1:fb:
42:1a:f6:00:74:9c:24:8f:88:cc:ef:63:7a:ca:69:14:4e:c3:
73:b0:a8:2e:f8:55:29:aa:38:fd:fa:ae:8f:a5:7a:87:c9:fc:
36:b5:43:80:15:96:8b:c4:af:21:6e:92:5b:1f:09:c7:d5:ec:
44:ed:ff:77:ad:1b:24:4d:7b:8b:d1:61:36:63:e7:a2:87:86:
cd:f9:53:04:7c:b2:f3:64:49:e5:5c:f5:58:92:6f:3e:5a:54:
56:c9:ca:d3:de:61:c2:35:ec:b8:8b:1e:60:6a:67:08:82:4f:
d6:f2:3c:19:74:5d:5b:2b:bb:6b:39:ce:32:e2:b5:de:aa:b9:
45:ef:1f:e3:b4:9b:95:87:58:41:50:e9:f1:f7:e9:0b:e1:0c:
9e:ea:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org