Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/964f94f6-c8a4-30f9-82b5-8f547829dd8b.roa
File: 964f94f6-c8a4-30f9-82b5-8f547829dd8b.roa (raw, json)
Hash identifier: NmX15JNz17cbAaIvoJBp4YcAUR1fD6gunqgM3PalTNI=
Subject key identifier: F5:99:3E:65:D9:9B:C3:5B:9B:F3:86:C6:26:27:3F:9D:F2:9F:80:35
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E1A24280AE69A0E3171250480
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/964f94f6-c8a4-30f9-82b5-8f547829dd8b.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Fri 02 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:24:28:0a:e6:9a:0e:31:71:25:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jun 2 04:00:00 2023 GMT
Subject: CN=93708a1a-00ac-4c50-b407-e86c7ae915bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:a5:d3:43:1e:fc:2c:31:c5:1b:8d:98:9d:
68:d6:3a:ef:9f:07:5a:c8:07:bd:d2:58:92:83:46:
35:56:6c:10:58:f4:43:c8:0a:80:8f:30:09:0b:80:
2e:89:27:a5:0b:bf:74:3b:c0:51:b5:fe:8a:cc:ae:
78:dd:23:2e:9d:d3:74:0a:e5:99:89:e5:d5:35:d6:
c2:83:e9:b2:1c:7e:da:b3:5b:0a:7a:8b:3f:cf:65:
44:d1:17:87:08:1b:7a:f3:f3:57:e4:af:09:c2:cb:
4c:c9:a8:cb:25:d9:66:d6:39:d8:a4:c4:d4:8e:11:
cf:ea:c2:8f:3d:dd:f3:f7:da:7a:4a:8e:11:e2:64:
7f:a2:9f:88:e2:70:3f:51:59:35:25:d9:c4:ce:0c:
16:0e:03:d1:c6:03:e2:dd:3b:7b:76:91:bd:c2:54:
78:94:97:bb:77:dc:8c:ee:b5:5c:42:27:00:fb:83:
03:c6:fe:1a:f3:84:1a:0c:bb:d6:5e:4e:ac:e5:14:
85:33:8f:26:f0:30:cd:d6:64:0a:5f:30:72:2c:1b:
50:6e:30:4d:83:d9:44:d6:58:91:93:20:30:b6:75:
1c:4c:f8:de:07:9f:25:6f:b0:03:cb:1d:b6:d4:fe:
ac:13:e6:f8:65:d5:79:0e:3d:4b:f3:62:80:71:df:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:3E:65:D9:9B:C3:5B:9B:F3:86:C6:26:27:3F:9D:F2:9F:80:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/964f94f6-c8a4-30f9-82b5-8f547829dd8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:01:f0:d1:f3:8d:25:e7:2d:29:16:98:c5:7f:f3:13:43:c1:
97:9f:63:11:93:f8:2a:e4:13:19:74:ea:6c:5b:17:5d:a2:71:
00:ce:4d:38:65:24:6d:50:c7:3f:39:cf:2a:43:f8:f6:f7:0f:
b1:0c:d5:8d:62:16:bf:a1:a0:67:72:d0:dd:78:45:b2:08:03:
d5:0e:83:1b:94:18:97:9d:35:f6:43:eb:d3:8b:20:d8:6e:42:
7f:7f:65:d2:26:9d:e8:2d:38:47:9a:e9:1a:8b:de:1c:cd:36:
0a:cb:1a:1d:44:5a:d0:fb:a6:22:a9:83:85:aa:56:cf:67:6a:
84:8f:ab:cc:97:d8:27:2f:ca:4f:1c:bc:c0:df:ba:51:e7:60:
bf:94:6d:eb:6f:d9:d2:17:63:64:4b:88:a6:18:94:86:1c:c3:
a9:4c:65:92:94:14:25:03:92:bf:ab:9f:7f:85:f6:9c:48:04:
d0:e4:07:c9:6b:ed:c7:1b:d3:d9:8c:37:dd:6b:bd:c9:84:0a:
27:0f:97:39:ec:e0:b3:cd:23:a5:73:ef:05:ef:e0:e5:f6:e6:
27:1a:6d:d0:f8:1e:84:0a:36:93:31:01:42:d8:68:83:de:c8:
fa:30:34:ba:eb:05:dd:f4:8b:a7:99:c4:47:14:96:ff:9a:7a:
77:ed:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org