Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/93a582a2-a265-3891-b69c-96eb7d91a2db.roa
File: 93a582a2-a265-3891-b69c-96eb7d91a2db.roa (raw, json)
Hash identifier: FW0OZ1Tn1EJ1Jue899GYT7eaKeCaP1hBZ0r2vtvYxUQ=
Subject key identifier: 85:94:CC:FA:79:DB:B4:D9:8F:6E:AF:2F:59:D7:71:E8:B5:A8:CA:8B
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328584002A80ACD7E69C1BEC7B00237
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/93a582a2-a265-3891-b69c-96eb7d91a2db.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Fri 24 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:02:a8:0a:cd:7e:69:c1:be:c7:b0:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2023 GMT
Subject: CN=8d4670c7-62d2-44bd-ac16-e453b5db5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:38:e3:27:16:03:7a:d7:b5:1c:76:bd:fa:
54:f3:a1:00:f5:f0:96:cb:64:5c:74:19:f6:ce:e6:
b0:6d:70:a0:d8:04:3c:6b:a5:7f:a4:0f:ca:66:8c:
11:bb:36:aa:db:f4:42:6b:f5:e6:73:cf:fe:58:0b:
94:dd:06:f8:27:81:4b:9d:67:4e:b6:2d:70:45:e9:
06:be:6f:f0:43:1d:8e:de:4d:94:75:e1:e1:96:01:
5a:37:ab:1b:70:9a:4f:0a:8e:68:df:48:2e:aa:39:
71:01:69:03:25:94:ef:0c:62:0f:84:d2:d1:cb:34:
23:fd:d7:1d:cf:74:91:5b:83:7a:a7:6b:90:9e:03:
0b:20:e4:1a:7b:43:f3:3b:89:44:91:55:f2:4c:3f:
5e:0f:fa:df:d2:7c:c3:e0:94:91:2f:7b:82:0a:61:
92:24:e6:c8:cc:78:6b:88:f3:d4:77:43:d1:9c:6e:
5d:7e:4d:bb:dc:5c:fd:c4:24:45:ee:90:25:8c:b7:
97:7d:90:ef:2f:c5:b8:81:fe:d2:13:69:f1:d2:d4:
09:90:02:b0:fb:dd:05:27:bf:df:64:34:4c:09:77:
2b:39:43:c9:b4:a2:49:7e:f1:53:87:79:79:2f:9f:
af:8e:cf:1d:97:5b:18:f2:61:61:dd:84:3e:6f:81:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:CC:FA:79:DB:B4:D9:8F:6E:AF:2F:59:D7:71:E8:B5:A8:CA:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/93a582a2-a265-3891-b69c-96eb7d91a2db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:af:10:ee:56:16:3b:ba:c9:bd:f5:6c:6e:9e:a2:0b:d9:da:
d5:72:c8:15:f9:69:1a:96:d7:e0:89:21:9e:fd:ee:55:ae:f8:
f8:3f:bc:f4:a8:fb:16:d2:b8:10:60:97:2a:c9:46:d9:5d:3c:
30:85:9f:61:28:29:b6:3f:6b:21:dd:1f:ac:e5:83:05:39:27:
b8:7a:c1:91:8f:81:06:60:a7:ce:bc:84:f1:6e:08:e4:a3:5b:
9c:c5:6f:98:11:8a:1b:d0:bb:ce:61:3f:b8:1e:e4:b1:fd:d5:
13:23:2e:b2:48:55:e9:cf:be:a3:a5:29:52:c7:4f:1d:2a:23:
ae:03:6d:6f:d4:dc:7f:ba:85:51:12:5e:6a:77:f9:9b:c0:84:
4f:49:43:f9:10:57:66:ad:5c:08:da:58:27:b8:20:42:3e:d9:
a2:7f:90:74:51:c5:42:27:8f:b9:c2:71:23:63:3f:3a:01:c9:
f4:a7:84:cc:3c:f7:f3:5e:26:54:e8:d1:ab:62:bd:20:4c:bb:
e6:57:9e:82:0f:67:2b:c3:b6:37:b8:f8:05:e9:bf:3b:7c:a0:
3a:b3:28:74:5d:25:54:7a:78:62:dc:79:7f:73:50:fa:a4:58:
00:9c:34:04:4e:0b:1b:d8:91:98:74:92:a5:ae:69:de:ee:09:
ae:5c:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org